Homelab discussion

Docker containers:

• actual (budgeting)
• affine (note taking)
• bentopdf (PDF editing)
• beszel (server status monitoring)
• cloudflared (for a cloudflare tunnel with my own domain)
• dockge (Docker management)
• guacamole (server remote desktop access)
• immich (photo application, backup, gallery and AI tagging)
• jellyfin (video and music server)
• kavita (comic books and ebooks)
• kopia (backups)
• mattermost (used solo for sharing text, links, files, etc to myself)
• papra (document storage, tagging and OCR)
• pihole (DNS adblocking for whole network)
• opodsync (gpodder podcast sync backend)
• omnitools (file conversion etc)
• prunemate (automated scheduled docker pruning)
• qbittorrent (with gluetun VPN )
• Redlib (reddit access with gluetun VPN because fuck you UK mandatory ID checks)
• samba (file sharing on the local netwrok)
• syncthing (mostly used to keep retro/emulated games in sync across devices)
• tiny tiny rss (RSS platform)
• qbittorrent, through gluetun VPN on a VPN)
• SABnzbd, radarr, sonarr (for media)
• watchtower (automatic docker updates)

The setup is on a bare metal Debian mini PC server with storage on a Synology 2 drive NAS.

Thanks for asking

• Firefly III - home financials
• Grocy
• Jellyfin
• Self made homebrewing log webapp
• Arr stack
• Nextcloud
• Matrix server for family chats

Everything I have is either for entertainment or home automation. Most of it is running on a mini-PC running Proxmox.

• Jellyfin
• Asset UPnP
• Lyrion
• Navidrome
• LRCLIB offline lyric server
• Home Assistant

And I’ve got a containerized Audiomuse-AI instance for music analysis and instant playlist generation.

What this thread has showed me is that I'm over here playing tiddlywinks.

• Nextcloud - I basically just use it as a Google drive replacement
• Immich
• SearXNG (will probably remove it because I don't really use it)
• Jellyfin + arr stack + qbittorrent for 🦜. I also have IPTV hooked in. Everything that needs to is routed though nordVPN / mullvad
• Jellyseer
• Home Assistant (I've barely scratched the surface, mostly just used for:
• Predbat (manages solar with agile tariff)
• frigate+ (3 cam reolink NVR)
• keepassxc / syncthing
• ariang - download manager. I have it set up such that anything I add to the download queue downloads between 0000 and 0600.
• Some vibe coded app I made to rank movies using pairs and suggest new ones.
• adguard
• grafana
• ntfy
• coolercontrol (fan curves for server)
• otter wiki (my own idiots guide on how it's all set up)
• and a homepage/dashboard

Only external access is from my phone via tailscale. I also run Claude code on there so I can remotely do stuff on the server using natural language while away from home.

The server is just a mishmash of old parts I had lying around. I only needed to purchase a case and a drive to get it going.

Server runs ubuntu lts I5 4690k 16gb ddr3 Rtx 2060 6gb Currently about 11tb storage

I use proxmox on one server, but currently my layout is:

• docker 1:
  • Authentik first network
  • heimdall
  • immich
  • jellyfin
  • NPM first network
  • zipline
• docker 2:
  • authentik second network
  • npm second network
  • blorp
  • gitlab-runner
  • ladder
  • metube
  • photon
  • privatebin
  • tandoor
  • bar assistant
  • sponsor block

LXCS:

• database server
• pihole
• wireguard
• mail server (postfix/dovecot)
• zoneminder
• zabbix
• gitlab
• matrix
• xmpp/openfire
• revolt/stoat
• gamevox (temporary)
• pufferpanel - minecraft
• pufferpanel - ark
• palworld
• discord development container
• projects container

VMs:

• homeassistant
• ipa server
• firewall
• Syncthing / immich storage / PXE server/ File storage

Also thank you for making this post, it helped me realize I have a few containers and services I don't use and I don't think have activity on them anymore so I can start a deprecation cycle on them lol

Since I haven’t seen these mentioned yet:

Clipcascade (clipboard sharing across multiple OSes, handy when “copy from this VM and paste to that VM gets funky with the intermediary rdp client)

Infisical (self hosted secrets management, used for n8n automation pulls so I’m not storing credentials and api keys on a VPS)

Plus a Debian 13 VM for Claude+Hermes and a Fedora workstation VM to pretend I have a central workstation somewhere.

Incus, all services running in lxc. Ansible and templates to run startup stuff for new containers (ssh keys, etc). My docker setup is primitive, I regressed down to individual containers for each with docker compose. It's so trivial to restore last night's lxc backup that k3s/k8s doesn't really help me. In fact, i've been simplifying everything to suit my use case, including hardware.

• sonarr
• radarr
• bazarr
• prowlarr (I'm close to getting rid of this)
• transmission
• sabnzbd
• kavita for comics only
• calibre Web automated (CWA)
• frigate NVR
• navidrome
• immich
• openwisp to manage 2x openwrt access points
• homeassistant
• technitium DNS x2
• uptimekuma monitoring x2
• ntfy for push notifications
• ansible
• jellyfin
• radicale
• syncthing
• Wireguard
• wanderer for GPS track mgmt on "big screen". I track my GPS trails and drives as a hobby. I'd love a self-hosted comaps web client, but I can't really find one. :(

Plus lots of transient trials that come and go with interest. Rotating 7 day/4 week/3 months backups by NFS with pruning, includes snapshots, but I set expires on these.

This is running on 2x minipcs with 48GB ram each, but they are way overkill. I just received a mini itx i5 board, which will house all of the containers, save VPN and 1x DNS, which I will run on an SBC.

So I'm going down from 2x servers + 1 NFS nas to one 1u server for everything plus one SBC so I can reboot it.

Power consumption is king factor for me now.

• authoritative DNS for my domain
• email (Postfix, Dovecot, rspamd)
• endlessh
• Matrix chat and video conferencing (nginx, Synapse, MAS, Livekit, coturn, Postgres)
• Prosody elsewhere for failover if international links go down
• Nextcloud
• offsite backups for important data, not the whole OS (rsync)
• QR scanner on a webpage, for transferring complex passwords locally
• Syncthing
• Offsite monitoring (Prometheus, Grafana, AlertManager) - amusingly, on an old ex-Android phone running PostmarketOS (a variant of Alpine). Eats less than a watt of power.
• Wireguard to hook up the monitoring with minimum fuss

Current Self-hosted Setup

Hardware

Server 1
Trycoo / Peladn mini pc
Intel n97 CPU
Integrated GPU
32gb of 3200mt/s ddr4 (Upgraded from 16gb)
512nvme
2x 2tb ssd's (Raid1 + LVM)
Startech usb to sata cable
Atolla 6 port powered usb 3.0 splitter 
2x 8tb hdd's
2 bay usb 3.0 Fideco dock
Each 8tb HDD is split into 2 equal size partitions, making 4 x 4tb partitions
Each night, the 2tb SSD array backups to the alternating first partition of the HDD's .
Each 1st of the month, the 2tb SSD array backups to the alternating 2nd partition of the HDD's .

Server 2
Raspberry pi 4b
32gb SD card
4gb ram

Services

Server 1
Nginx web server / reverse proxy.  
Fail2ban.  
Crowdsec.  
Valutwarden
Bit warden reimplantation for storing credentials 
Forgejo
Remote federated git
Immich.   
Google Photos replacement.  
External libraries only.  
4 users.  
Radicale
Calender and contacts
Navidrome.  
Spotify replacement.  
2 users.  
Adguard home
1st instance
Provides Network wide DNS filtering and DHCP server
Unbound
Provides recursive DNS
Go-notes
Rich Text formatting, live, real time multi-user notes app
FMD
Find my device
Transmission
Torrent client
PIA VPN
Network Namespace script to isolate PIA & Transmission
Searxng
Meta search engine
StirlingPDF 
PDF editor
File browser
This is in maintenance mode only so I am planning to migrate to File Browser Quantum soon
Syncthing 
Syncs 3 android and 1 apple phone for immich
Custom rsync backup script
Darkstat
Real time Network statistics

Server 2
Fail2ban
Crowdsec
Honeygain
Generates a tiny passive income
I'm UK based and in the last 6 months it has produced £15
Adguard home
2nd instance
Provides Network wide DNS filtering and DHCP server
Unbound
Provides recursive DNS
Custom DDNS update script

• Open Media Vault
• Immich
• Jellyfin
• Arr-stack (Radarr, Sonarr for file naming and management of DVDs and Blu-rays ripped with A.R.M.)
• Automatic Ripping Machine
• Home Assistant (on a separate device)

hi! first time posting from this account, but a long time lurker.

I have Adguard Home on my router, but here are my other machines. I'm currently working on overhauling the NUC, mostly because I didn't know what I was doing when I got it.

I use Dokploy for my services right now, I like it more than Portainer.

currently running on a Raspberry Pi 4:

• Diun (for notifying me of updates to my containers)
• PDFding (for my ttrpg collection and some other stuff like crochet patterns)
• Grimmory (for ebooks)
• Mealie (for recipe storage, I don't really use the other features)
• Pinepods (for podcasts)
• Shiori (for archiving webpages and bookmarks)

things I'm going to be running on my NUC:

• Prowlarr (it's just easier for me to find stuff using the interface)
• Diun (again, notifying me of updates)
• RomM (for game ROMs, I like that some of them I can play in my browser or put on my desktop)
• SABnzbd (for sailing!)
• Qbittorrent (same deal as above)
• Emby (was using Jellyfin but for a couple reasons I want to try Emby. if I don't like it, I'm going back to Jellyfin)
• Tubeless (it's a fork of Pinchflat, which is a way to download Youtube videos specifically to watch them through something like Emby or Jellyfin)
• Navidrome (for music playing, planning on using Feishin on desktop and Symfonium to listen to it on my phone)
• MusicGrabber (kinda does what it says)
• probably Immich (unsure on this, might just store my photos for safekeeping but I kinda like the idea of looking at them laid out like Immich does)

I currently have a 10TB NAS in RAID 1 for storage, though I've found it a bit difficult to map storage to docker containers while leaving the databases on the NUC because I have very little experience and am still learning. thankfully, I'm taking notes this time around.

I would love to get more storage, but man. prices.

Here is my copypasted documentation

				== PROXMOX CONTAINERS & VIRTUAL MACHINES ======================
				C:TorRelay      -	192.168.78.160  /  2a05:f6c7:8321::0160
				C:Gonic		-	192.168.78.161  /  2a05:f6c7:8321::0161
				C:Corrade	-	192.168.78.162  /  2a05:f6c7:8321::0162
				C:MeshCore	-	192.168.78.163  /  2a05:f6c7:8321::0163
				C:Apache        -	192.168.78.164  /  2a05:f6c7:8321::0164
				C:Backups       -	192.168.78.165  /  2a05:f6c7:8321::0165
				C:PiHole        -	192.168.78.166  /  2a05:f6c7:8321::0166
				C:WireGuard     -       192.168.78.167  /  2a05:f6c7:8321::0167
				C:qBitTorrent	-	192.168.78.169  /  2a05:f6c7:8321::0169
				C:OwnCast	-	192.168.78.170  /  2a05:f6c7:8321::0170
				C:i2pd		-       192.168.78.172  /  2a05:f6c7:8321::0172
				C:endlessh	-	192.168.78.174	/  2a05:f6c7:8321::0174

NAS

• Arr stack
• Jellyfin
• Navidrome
• Immich
• Forgejo
• Paperless
• Mealie

RaspPi

• PiHole

VPS

• Tailscale
• TaskWarrior Sync
• Vaultwarden

Personal Workstation

• Forgejo runners
• Immich image detection
• Paperless OCR

And of course all the basic security measures and Borg backup on everything.

Quickest way for me is just show n' tell:

::: spoiler spoiler :::

That's currently. Could change tomorrow. LOL There's always room for more, if I can find something interesting.

On all of my raspberry pi’s excluding my HAOS pi I have Docker; (I am thinking of adding something so I can see all my images visually, funny story I was looking on docker to see everything I have running and I guess I do have a service for this).

2 instances of pihole across 2 of my pi’s; (one primary, which has been migrated to docker and a secondary which is still running bare metal I have docker on that pi but just have not got around to migrating it yet maybe that is a today project) highly recommend you start with a linux distro that is right for you and start with docker and pihole (You could probably stick with windows or MacOS if you want but I highly recommend linux, there are other whole LAN ad blockers, pihole is just the one that works for me. Just to be funny I run them on port 31415!) on a device or two you are not afraid to leave running 24/7 that is why my homelab is spread across different 4 different pi’s and a Flint 2 router.

Maybe on two pi’s I have Nebula-sync; to keep my piholes in sync but I know I have it on one of them.

On my pi 5 with the most RAM I have:

Caddy; this could go on prior to pihole, but it is to give everything easy to remember domain names and to allow some to be open to the world while keeping others to the LAN/VPN

After those four things I would suggest searXNG; to replace whatever search engine you use when you go through and pick which engines it uses to do searches please do not select the Google. With searXNG you do not get all that AI crap I hear people get now, or the paid advertisement links at the top of the results, you also get to weigh which engine you want to use more.

Vaultwarden; with that I can use all of bitwarden’s services for free

Immich, because I am not paying a third party to store just my photos

Nextcloud, but I am getting off of that, it does all of the file sharing that I need with my devices that cannot use rsync calendars and contacts but it tries to do to much.

Down detector; to tell me if there are problems with my devices (sends me emails if one of my devices goes off line).

Paperless; to keep important documents in a easier place to find.

On another pi 5 I have:

The arr stack, I should really get jellyseeerr working!

Transmission, the bittorrent client it is running CLI with a web interface. I have it setup to download a copy of the raspberry pi OS every time there is a new release and to host it until the next new release, everything else I have a ratio of 3.

Jellyfin; (I will fight you if you think plex or emby are better), if I wanted to share my media with people I could create another VPN exit that only allows people to Jellyfin.

I guess I have Navidrone; for music streaming? I should probably remove that because I have Jellyfin that I plan on using.

Cowrie, is the honey pot sitting on port 22.

On another pi 5 I have

Ghost; for my blog/web design service, I am considering exploring more options as it is more geared towards people wanting to get money.

I guess I have matomo; to monitor my self hosted blog, did not know that.

On a pi 4 I have

HAOS; I have so many things running in HAOS, but the one service I am most proud of is my reminders. The reminders just started as a reminder for me to take my medication because the app I had purchased decided that the fact that I had purchased it was not good enough and they wanted to charge me a subscription, so I setup Home Assistant to remind me and that quickly became reminders to do other things as well all on my apple watch.

I have a retired ipad running a HA kiosk in my kitchen; it tells me things like what lights are on, how many times I have had bots try to penetrate me, speedtest, transmission stats, and my ecobee settings. I am thinking of setting up an old phone to run as a separate kiosk in my bedroom as a clock/weather screen on my bedside table and I am hoping to get a hand me down old ipad to act as another kiosk in my living room, more to watch for docker containers needing updates, maybe the also the weather and bandwidth monitor.

OpenWRT on a Flint 2 because the firewall my ISP’s firewall/modem like most ISP’s is a joke so I have it set to pass through to my own with 2 static IP’s one of them was originally going to be for mail but I quickly discovered how silly of an idea that was.

Wireguard; I think it is on my firewall, on one of the IPs I was going to host mail on the other but I came so close to ripping out my hair trying to do that so I got a hosted service through easydns it has a wildcard function so I can still get unlimited free trials to whatever instead of going into hosthero’s cpannel and spinning up a new address)

Crowdsec so I get to watch how many bots try to penetrate me in a day, week, month, or ever. It is in the 100’s a day, before I knew I could/should change my SSH port I had port 22 open to the WAN, this was long ago but still it was a bad idea. 22 is now open as a honey pot.

I have Crowdsec-bouncer that stops known bad actors from trying to get in.

I am sure I have other services on my firewall but I cannot tell what is an actual openwrt service and what is something I have added, but it is a vanilla install with all kinds of things added extra. .

Don’t know if you would count CUPS or scanjs as self hosted but those are run for my printer/scanner on a pi.

I have an old mac mini I am thinking of plugging in so that I can download all my music and add it to Jellyfin, than I am debating on if I want to install debian on part of the drive and keep MacOS on part of the drive so that I can actually use the bluray drive I have as far as I know there are no bluray drivers for linux because the big movie producers are scared of piracy, not like they are trying to rape us consumers over the hot coals.

Proxmox, mostly LXCs

• Home Assistant
• Paperless NGX
• OpenWRT
• Arr Stack
• Jellyfin
• Geoactivity Playground
• Calibre Web
• PiHole
• Samba Share
• Tandoor (more of an archive for grandmas good recipes than anything else)
• PDF editor (with the name I forgot)
• Nginx Proxy

A lot on docker and yunohost.

Gotosocial is the most used service for the family.

Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I've seen in this thread:

Fewer Letters	More Letters
AP	WiFi Access Point
DHCP	Dynamic Host Configuration Protocol, automates assignment of IPs when connecting to a network
DNS	Domain Name Service/System
Git	Popular version control system, primarily for code
ISP	Internet Service Provider
LVM	(Linux) Logical Volume Manager for filesystem mapping
LXC	Linux Containers
NAS	Network-Attached Storage
NFS	Network File System, a Unix-based file-sharing protocol known for performance and efficiency
NUC	Next Unit of Computing brand of Intel small computers
NVR	Network Video Recorder (generally for CCTV)
PIA	Private Internet Access brand of VPN
PiHole	Network-wide ad-blocker (DNS sinkhole)
Plex	Brand of media server package
RAID	Redundant Array of Independent Disks for mass storage
SBC	Single-Board Computer
SSD	Solid State Drive mass storage
SSH	Secure Shell for remote terminal access
SSO	Single Sign-On
Unifi	Ubiquiti WiFi hardware brand
VPN	Virtual Private Network
VPS	Virtual Private Server (opposed to shared hosting)
k8s	Kubernetes container management package
nginx	Popular HTTP server

---

[Thread #69 for this comm, first seen 31st Jul 2026, 20:30] [FAQ] [Full list] [Contact] [Source code]

Your Spotify

Shame there isn't a "your deezer" that sounds really cool. Anyways user facing service LXCs (eg. Jellyfin) have Tailscale installed. Here's my services by box:

:::spoiler NAS: Ugreen DXP4800 pro
-Proxmox
-Pihole
-NginxProxyManager
-Homarr
-Audiobookshelf
-Jellyfin
-Seerr
-Immich
-Syncthing
-Searxing
-Paperless
-Vaultwarden
-Mealie
-Joplin
-Docker host #1(Romm, LibroFM downloader, audiobookshelf/hardcover integration)
-Docker host #2 (*arrs)

:::
:::spoiler Local back up: Beelink eq12 (I think, anyways an Intel N100 thing.
-Proxmoxx
-Redundant pihole
-Redundant NginxProxyManager
-Syncthing
-Immich machine learning :::

:::spoiler Satalites, usually a RPi3. These act as a relay in users' houses so nothing touches the open web.
-DietPi
-Tailscale
-Pihole
-NginxProxyManager
-One poor soul has syncthing and a couple of drives for a remote backup.
:::

I have a spare no name n100 box that I would like to turn into a network box one day, then I can manage my Airvpn and Tailscale access through that. But for now the ISP router is fine, I guess.

Not much these days. While it used to be "everything", now it's:

• Http/https
• dns
• Wireguard
• Minecraft
• beegfs

Main services:

• Home Assistant
• Immich
• Pi-Hole (3x, to avoid killing internet if one goes down for whatever reason)
• Plex/JF/*arr stack
• Nextcloud
• Syncthing
• Planka (kanban for keeping track of all my various projects around the house)
• LubeLogger
• Joplin (OneNote replacement)
• Kasm (remote management)
• Mesh Central (local management)
• BeamMP (BeamNG.Drive multiplayer server)
• Crafty (Minecraft server)
• Traccar (location tracking)
• NPM

Infrastructure supporting the above:

• Mac Mini 2014 | some 4th gen i5 | 16GB RAM | 8TB RAID5+1 (OMV NAS)
• Lenovo M710q Tiny | i7-7700T | 8GB RAM (Home Assistant)
• Dell Optiplex 7050 SFF | i7-7700 | 32GB RAM (Proxmox node)
• HP Elitedesk Mini G3 | i7-7700T | 32GB RAM (Proxmox node)
• HP Elitedesk Mini G4 | i7-8700T | 32GB RAM (Proxmox node)
• 4x Docker VMs (managed by Dockge)
• 22x active Docker compose stacks
• 5x inactive Docker stacks (testing/tinkering shit)
• 3x not-Docker VMs
• 7x LXCs
• Unifi UDM (the OG trash can model)
• Unifi U7 AP Lite
• 3x Netgear GS308E switches (1x for house distribution, 1x for game consoles, 1x for servers)
• 1x Netgear GS305E switch (for my own PC + U7 AP)

I'm currently only hosting Jellyfin (movies and TV) and Komga (books and comics) on a LAN, but I already bought a domain, and I'll be exposing them via reverse proxy within the next few weeks; maybe even this weekend if everything goes well. After that, Nextcloud is a must for sharing large files, as Google Drive's limits are coming up on me fast, and I'll start test driving Fluxer as a replacement for Discord.

Apache webserver, very low level only the la part of a lamp. File server. Two proxmox, one to fuck around with vms on, one "production" hosting a HA instance, middleman on alpine that lists symlinks of contents on the file server in kodi-friendly naming format for the kodi machines in the lounge / bedroom /brewery and firewalled XP machine for legacy drivers on older camera equipment. Win7 machine physically airgapped and KVM'd on my main monitor/keyboard for my old school games and programs. Also has a CRU for drive recovery / backups. OpenWRT firewall.

Currently I have one Docker host. I want to split my containers across 2 hosts. Both just small form factor PCs. (Lenovo, forget the exact model. But each have 16gb of DDR4 and an i5. One is 8th gen, and the other I have to double check. The one I haven't setup yet has an Nvidia card of sorts. I want to offload media services onto that one.)

Anyways, on to the breakdown:

Containers:

• Technitium (DNS)
• DNSWeaver (DNS from Labels)
• Caddy (with custom plugins Caddy-Docker-Proxy mainly)
• WG-Easy (Wireguard VPN)
• DDNS container
• Authentik (SSO Provider)
• Signal-CLI
• Molly Socket
• Multiple Docker Socket Proxy containers
• SearXNG
• Uptime Kuma
• Vaultwarden
• WUD
• Speedtest Tracker
• Dozzle
• Forgejo
• FMD (Find my device)
• Bookstack
• Syncthing
• Vikunja (Kanban board)
• Navidrome
• Maloja
• Audiomuse
• Doku
• Jellyfin
• FreshRSS
• Nextcloud
• beets
• Komga
• Lyrica (with some custom scripting to search my music for matching LRC files)
• Homepage
• Ntfy

Next up I want to add Autokuma. However, I am going to split these containers onto another machine yet.