AdGuard Home
Network-wide DNS ad-blocker — every device on the home LAN points at it for resolution, ads and trackers never make it past the gateway.
Network-wide DNS ad-blocker — every device on the home LAN points at it for resolution, ads and trackers never make it past the gateway.
All workloads deployed on the homelab — grouped by what they're actually for, not by tech stack. Media, productivity, identity, devops, monitoring, dashboards, knowledge, mail, utilities.
A self-hosted audiobook and podcast server.
A no-code online database platform you can self-host.
A self-hosted webmail client built in Rust.
Dynamic DNS updater — keeps the public DNS records for the homelab in sync with the WAN IP, even when the ISP rotates it.
A DevSecOps vulnerability management platform for tracking security findings.
A web-based file manager for browsing and managing files on your server.
An automated media processing and transcoding pipeline server.
A self-hosted uptime and health monitoring dashboard.
Self-hosted Git service and CI/CD platform — repositories, issues, pull requests, Actions runners, and a package registry, all running in-cluster.
CI/CD act
A self-hosted application dashboard with service widgets and cluster metrics.
Self-hosted photo and video timeline with automatic mobile backup, on-device face / object detection, and shared albums — the homelab's Google Photos replacement.
A collection of handy online tools for developers and IT professionals.
Self-hosted media server — streams the personal video and music library to TVs, phones, and browsers, with NFS-backed media from TrueNAS and a Longhorn-encrypted config volume.
Self-hosted OIDC / SAML identity provider — the SSO broker for every app in the cluster that speaks OAuth, federated to the in-cluster LLDAP directory.
Offline Wikipedia and other content served from ZIM files.
A self-hosted comics and manga server.
A lightweight LDAP server for centralized user account management.
A privacy-first lightweight note-taking service.
A minimalist, self-hosted RSS feed reader.
Prometheus-compatible metrics stack with VictoriaMetrics, Grafana, Loki, and Fluent Bit.
A self-hosted workflow automation platform with a visual node editor.
A self-hosted music streaming server compatible with the Subsonic API.
NetBird peer running on the Maresa Synology host so the NAS is reachable over the mesh — Syncthing, AdGuard, and the Traefik dashboard all available to authenticated mesh members.
A self-hosted content collaboration platform for file sync, sharing, and productivity.
A simple HTTP-based pub/sub push notification service.
A self-hosted team wiki and knowledge base.
A document management system that digitizes and organizes physical and digital documents.
A simple OIDC provider that authenticates users via passkeys.
A Kyverno policy compliance dashboard for Kubernetes.
A minimalist, zero-knowledge encrypted paste service.
A self-hosted ROM manager with metadata enrichment and a clean web UI.
A browser automation server for web testing and scraping.
Continuous, peer-to-peer file synchronisation — the engine that keeps the off-site hot-storage tier (Maresa Synology) in step with the primary datasets.
A self-hosted manga server and reader based on the Tachiyomi Android app.
A self-hosted recipe management and meal planning application.
Local reverse proxy + TLS terminator on the Maresa Synology host — exposes the host-local services (Syncthing UI, AdGuard UI, Traefik dashboard) on the internal *.maresa.int.kueber.eu zone with Let's Encrypt certs.
A self-hosted YouTube archive with search and media management.
A lightweight self-hosted Bitwarden-compatible password manager server.
A self-hosted to-do and project management application.
A self-hosted Spotify listening statistics tracker.