DoTheEvo/selfhosted-apps-docker
Selfhosted Apps Docker
This project is a curated collection of deployment files and configurations for hosting a wide variety of open-source services on a home server. It primarily utilizes Docker and Docker Compose to automate the orchestration, lifecycle management, and deployment of containerized applications.
The repository provides a comprehensive suite for self-hosted infrastructure, covering network management tools, media streaming, and home automation. It includes specialized configurations for securing internal services via reverse proxies, WireGuard VPN tunnels, and automated SSL/TLS certificate management.
The project covers a broad set of capability areas, including system monitoring and observability, deduplicated data backup and recovery, and network traffic management. It also provides deployment patterns for asset tracking, AI-powered video surveillance, and game server administration.
The implementation is primarily based on Shell scripts and YAML configuration files.
Features
- Docker Compose Deployments - Bootstraps an open-source service using Compose files to automate container orchestration.
- Compose Orchestrations - Uses Docker Compose YAML files to automate the deployment and lifecycle management of the entire application suite.
- Home Server Orchestration - Provides a comprehensive suite for orchestrating home server hardware, storage pools, and network shares.
- Automated Backup Systems - Implements automated systems for scheduling periodic data backups, filesystem snapshots, and cloud synchronization.
- Application Data Restorations - Recovers functional application instances by restoring database dumps and uploaded files from backups.
- Data Snapshotting - Automates the creation of daily application directory snapshots and database dumps for recoverability.
- Persistent Application State - Ensures application state is maintained across container restarts using dedicated persistent directories.
- RAID Configurations - Aggregates physical drives into RAID configurations to establish base storage capacity.
- Backup Solutions - Provides containerized systems for managing automated snapshots and deduplicated backups of application data.
- Container Environment Managers - Provides a centralized web interface for managing containerized resources, images, and environments.
- Filesystem Persistence Volumes - Maps host directories to containers to ensure application data and configuration persist across restarts.
- Home Server Orchestration Tools - Offers an integrated toolset for deploying a suite of personal services, including media and home automation, on private hardware.
- Reverse Proxy Configurations - Routes external web traffic to an internal containerized service using a managed proxy.
- Self-Hosted Applications - Offers a curated collection of Docker Compose files for deploying and managing open-source services on private hardware.
- Self-Hosted Infrastructure - Provides a containerized infrastructure for managing DNS, reverse proxies, and VPN tunnels to maintain data control.
- Home Automation - Integrates IoT devices and network cameras with AI-powered object detection and automated event notifications.
- Container Networking Configurations - Creates custom Docker networks to enable automatic DNS resolution between containers.
- Reverse Proxies - Ships reverse proxy configurations that route external web requests to internal containerized applications.
- Secure Tunnels - Configures network interfaces and IP ranges to route traffic through secure, encrypted tunnels.
- Personal VPN Deployments - Sets up a WireGuard VPN instance using a containerized configuration on a private server.
- WireGuard Management - Provides a web interface for creating users and managing configurations for WireGuard VPN tunnels.
- VPN Tunnels - Establishes encrypted layer 3 UDP tunnels via WireGuard for secure remote access to the home network.
- WireGuard VPN Orchestrators - Deploys WireGuard VPN tunnels with automated management of client configurations and connection profiles.
- VPN - Manages authorized public keys and IP addresses to control which remote clients can connect to the VPN.
- Network Service Administration - Configures reverse proxies, DNS servers, and firewalls to securely expose internal services to the internet.
- Real-Time Object Detection - Implements real-time object detection to identify entities like humans or cars in video streams.
- Event-Triggered Notifications - Triggers real-time push notifications and snapshots when AI object detection identifies specific entities in video feeds.
- GPU-Accelerated Variants - Utilizes GPU hardware acceleration to optimize AI-powered video analysis and object detection pipelines.
- Scheduled Database Backups - Runs periodic scripts to create automated database snapshots for disaster recovery.
- Network Share Mounts - Uses systemd mount units to automatically connect network shares and prevent boot failures.
- Automated Container Updaters - Automates the process of pulling new container images and restarting services to keep them current.
- Application Cloud Deployments - Sets up virtual private servers using free-tier cloud offerings to host applications.
- Cloud Storage Integrations - Connects backup repositories to remote providers to store encrypted and compressed data.
- Multi-Container Stacks - Deploys multi-container stacks for collecting system metrics and visualizing logs via dashboards.
- Container Monitoring Tools - Provides terminal-based utilities for real-time monitoring of container hardware utilization and lifecycle operations.
- File Sharing Services - Sets up a multi-container environment for sharing files, calendars, and collaboration tools.
- Game Server Management Panels - Runs a Python-based management interface for Minecraft servers using Docker Compose.
- Stream and Content Distribution - Provides infrastructure for streaming movies, shows, and music to various client devices.
- Hardware-Accelerated Transcoders - Configures hardware-accelerated transcoding to offload video processing from the CPU to the GPU.
- BitTorrent Clients - Provides a pre-configured environment to run a torrent downloader with integrated search.
- DNS Query Interceptors - Redirects outbound DNS traffic on port 53 to a local DNS server for controlled resolution.
- Internal DNS Resolvers - Implements local DNS resolution to point domain names to internal server IP addresses.
- Network Environment Scanning - Performs local network scanning and IP discovery to identify connected devices on the home server network.
- NFS Configurations - Shares datasets between Linux systems using NFSv4 for high-performance file access.
- Traffic Routing Proxies - Masks user origin IPs by forwarding HTTP requests through remote proxy servers.
- NAT Traversal - Implements NAT punching to establish direct external connections without manual router configuration.
- Network Management Controllers - Runs a web-based controller to manage Wi-Fi access points and networking hardware.
- Recursive DNS Resolution - Runs a recursive DNS server with Unbound and supports encrypted DNS over TLS.
- Service Port Forwarding - Maps external WAN ports to internal server IP addresses to expose local services.
- DNS-Based Routing - Utilizes DNS resolution and weighted policies to mask public IPs and apply geographic routing.
- Virtual Local Area Networks - Segments network traffic into isolated virtual local area networks to apply security policies.
- VLAN Segmentations - Creates Virtual LANs to segment network traffic for improved security and organizational structure.
- Archive Mounting - Allows the mounting of historical backup archives as local directories to recover specific files.
- ACME Certificate Provisioners - Automates the requesting and renewal of SSL/TLS certificates using the ACME protocol.
- Certificate Renewal Managers - Automates the renewal of SSL/TLS certificates via ACME clients and DNS challenges.
- Certificate Expiry Tracking - Monitors security certificate expiration dates and sends alerts to ensure timely renewal.
- Password Management - Hosts a resource-efficient password management server that integrates with official clients.
- Wildcard Certificate Issuers - Issues wildcard TLS certificates that secure all subdomains under a single primary domain.
- Alert Notification Systems - Ships a system for receiving real-time outage alerts when monitored hosts or services go offline.
- Policy-Based Retention - Enforces backup retention policies by automatically deleting old archives based on a defined schedule.
- Camera Stream Management - Provides connectivity and health monitoring for network cameras using RTSP and ONVIF protocols.
- Deduplication Backup Tools - Implements backup tools that use chunk-based deduplication to optimize storage space.
- Minecraft Server Orchestrators - Runs a Java-based game server using a specialized image for open-world gameplay.
- IT Asset Management - Sets up an IT inventory system with LDAP integration and a MariaDB database.
- Log Aggregation - Collects and indexes logs from containerized services using a centralized aggregation system for analysis.
- Service Uptime Monitors - Tracks the uptime and availability of web services and internal hosts with integrated outage alerts.
- Network Video Recorders - Implements a network video recorder to capture and archive streams from security cameras.
- Request Logs - Records and manages request-response cycles to monitor incoming traffic and troubleshoot network connectivity.
- Server Resource Monitors - Tracks real-time server resource usage, including memory and CPU statistics, via containerized monitoring tools.
- System Log Monitoring - Provides capabilities to access shell and kernel logs for troubleshooting host and virtual machine activities.
- Domain Filtering Rules - Blocks specific domains, advertisements, and malicious IP addresses based on configurable filtering rules.
