JamesTurland/JimsGarage
JimsGarage
JimsGarage is a collection of shell scripts and automation tools designed to help individuals deploy and manage a wide range of self-hosted services on their own hardware. It provides a structured approach to setting up containerized applications, from media servers and document management systems to VPNs and monitoring stacks, all through automated Docker-based configurations.
The project distinguishes itself by offering a comprehensive library of deployment recipes that cover the full lifecycle of a home server environment. This includes not just the services themselves, but also the supporting infrastructure such as reverse proxies with automatic SSL, authentication portals, DNS-level ad blocking, and secure remote access through WireGuard or mesh VPNs. It also addresses hardware-specific needs like GPU passthrough for transcoding or compute workloads, and integrates with cloud storage for backup and synchronization.
Beyond individual service deployment, JimsGarage provides tools for orchestrating multi-node Docker Swarm clusters, managing DNS records, and setting up monitoring dashboards to track service health. The collection also covers specialized use cases like video surveillance with AI object detection, Zigbee home automation bridges, and self-hosted identity providers for single sign-on across services. The documentation and scripts are organized to guide users through each deployment step, from initial server setup to ongoing maintenance and updates.
Features
- Self-Hosted Authentication Gateways - Provides scripts to deploy a self-hosted authentication portal with single sign-on and two-factor authentication for securing internal web services.
- Containerized Reverse Proxy Infrastructure - Sets up Caddy as a containerized reverse proxy to route external traffic to internal services with automatic TLS.
- Containerized Service Deployment - Automates the installation and configuration of Docker-based server services on personal hardware.
- Containerized Service Deployments - Runs pre-configured sets of containerized services from a single compose file.
- Containerized Service Orchestration - Manages the setup and coordination of containerized server services and administrative tools on personal hardware.
- Docker Swarm Orchestration - Provides shell scripts to initialize a multi-node Docker Swarm cluster for orchestrating containerized services.
- Reverse Proxies - Sets up Traefik as a reverse proxy to route external traffic to internal containerized services.
- Proxy Traffic Management - Uses Traefik to direct incoming web requests to the correct containerized service.
- Automated TLS Reverse Proxies - Sets up Traefik as a reverse proxy that automatically provisions TLS certificates for secure connections to containerized services.
- WireGuard VPN Orchestrators - Automates the deployment of a WireGuard VPN server using Docker Compose for secure remote access to a home network.
- Self-Hosted Identity Providers - Provides scripts to deploy a containerized identity provider for managing users and single sign-on across self-hosted services.
- Video Surveillance Systems - Automates the deployment of Frigate as a containerized NVR with AI object detection.
- Self-Hosted Photo Platforms - Provides a Docker Compose file to deploy a self-hosted photo management platform for private photo storage and sharing.
- Media Servers - Provides a script to deploy a Plex media server for streaming personal media collections.
- Portal Authentication - Sets up a web-based login gateway that authenticates users before they access other self-hosted services.
- Document Management Systems - Automates the deployment of Paperless-ngx for document ingestion, classification, and search.
- Declarative Infrastructure Provisioning - Provides scripts for provisioning infrastructure using Terraform declarative configuration files.
- Self-Hosted Note-Taking Servers - Provides a Docker Compose file to deploy a self-hosted hierarchical note-taking application for personal knowledge management.
- Self-Hosted Git Services - Provides scripts to deploy a self-hosted Git repository server with a web interface using Docker Compose.
- Domain-Based Routing - Directs incoming requests to the correct backend service based on the requested domain name.
- DNS-Based Ad Blockers - Sets up Pi-hole in a Docker container to block advertisements and trackers across all devices on a home network.
- Mesh VPN Coordination Servers - Sets up a self-hosted Tailscale-compatible coordination server using Headscale for secure peer-to-peer networking.
- Mesh VPN Coordination Servers - Deploys a Headscale coordination server that manages WireGuard peers for a private mesh overlay network.
- SSL/TLS Certificate Management - Configures SSL certificates to encrypt traffic between clients and proxied services.
- Reverse Proxy Authentication - Integrates an identity-aware proxy that validates user sessions before routing traffic to backend container services.
- Cloudflare Tunnels - Routes external traffic through a Cloudflare tunnel to expose local services without opening firewall ports.
- SSL Certificate Automation - Automates the provisioning and renewal of Let's Encrypt SSL certificates for all proxied services.
- Web Application Firewalls - Ships a containerized web application firewall to inspect and filter HTTP traffic before it reaches protected services.
- Uptime Dashboard Deployments - Deploys a containerized uptime monitoring service with a web dashboard to track service availability.
- Observability Stack Deployments - Launches Prometheus, Grafana, and Telegraf containers to collect and visualize system metrics from self-hosted services.
- Server Health Monitoring - Sets up Checkmk as a containerized service to monitor infrastructure health and alert on issues.
Star history
How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
