Self-Hosted Apps Licensed Apache-2.0

45 self-hostable apps released under Apache-2.0 you can run on your own server — compared on specs, deployment difficulty, and the SaaS each one replaces.

AI Agent Platforms

AgentArea

A self-hosted runtime for governed agentic networks: instead of an agent library you import into your own app, AgentArea runs agents durably as infrastructure, with VPC-style network isolation between them, tool-approval workflows, ReBAC authorization, and full audit trails. Built on Temporal for durable execution, provider-agnostic via LiteLLM, and extensible through hosted MCP servers.

PythonNext.jsGoTemporal

hardRead guide →

Authelia

A lightweight, open-source authentication and authorization server providing 2FA and SSO via a forward-auth portal in front of your reverse proxy — a self-hosted gatekeeper for existing apps, not a full identity provider.

moderateRead guide →

Caddy

A web server and reverse proxy with automatic HTTPS on by default: name a domain in a two-line Caddyfile and it obtains and renews the certificate from Let's Encrypt or ZeroSSL and redirects HTTP to HTTPS for you. A single Apache-2.0 Go binary with no external dependencies, HTTP/3 on by default, and a JSON admin API for zero-downtime config changes — no web UI and no container auto-discovery out of the box.

easyRead guide →

Platform-as-a-Service

CapRover

A free PaaS (Apache-2.0 with a CapRover appendix) that turns any Docker Swarm server into a one-click app deployment platform, with a built-in reverse proxy, free SSL, and a one-click app marketplace.

TypeScriptNode.js

easyRead guide →

Casdoor

An identity and access management server with a web admin console that exposes one user directory over OAuth 2.0, OIDC, SAML, CAS, LDAP and SCIM, with Casbin-based authorization policies. It runs as a single Go binary backed by MySQL, PostgreSQL or SQLite.

easyRead guide →

changedetection.io

Watches web pages for content changes and sends notifications through Apprise to Discord, Slack, Telegram, email, webhooks and more, with CSS/XPath/JSON filters to limit a watch to part of a page. Plain HTTP fetching works out of the box; JavaScript-heavy pages need an optional Playwright/Chrome browser container.

easyRead guide →

CloudBeaver

The web edition of DBeaver: a browser-based database manager for PostgreSQL, MySQL, SQLite and other JDBC databases, with a SQL editor and a data editor (ER diagrams are in the paid editions).

JavaTypeScriptReact

easyRead guide →

CommaFeed

A self-hosted RSS reader inspired by Google Reader, with a clean web interface, keyboard shortcuts, categories and OPML import and export. A Quarkus (Java) application published as a native-image container, with an embedded H2 database or an external PostgreSQL, MySQL or MariaDB.

easyRead guide →

Platform-as-a-Service

Coolify

An open-source, self-hostable Heroku/Vercel/Netlify alternative — deploy apps, databases, and services to your own servers from a Git push, with one control panel.

easyRead guide →

Container registry

Distribution (Docker Registry)

The reference implementation of the OCI Distribution Specification and the registry engine inside Docker Hub, GitHub Container Registry, GitLab and Harbor, published on Docker Hub as the registry image: push and pull images and other OCI artifacts over HTTP, store them on local disk or S3-compatible, Azure and GCS backends, and gate access with htpasswd or a token server. Apache-2.0 licensed, a CNCF project written in Go; it runs as a single container with one data directory and no database or web UI.

easyRead guide →

Platform-as-a-Service

Dokploy

An open-source, self-hostable deployment platform built on Docker Swarm — deploy applications, databases, and static sites from Git with a Vercel/Heroku/Netlify-style UI.

TypeScriptNext.js

easyRead guide →

draw.io

The diagrams.net (draw.io) editor as a self-hosted container: flowcharts, UML, network and architecture diagrams in the browser. The official image from the project is built on Tomcat and serves HTTP on port 8080 and HTTPS with a self-signed certificate on 8443.

easyRead guide →

File sync & storage

FileBrowser Quantum

A web file manager for folders on your server, with indexed search, share links, multiple users with OIDC or LDAP sign-in, WebDAV and file previews. It is a heavily reworked fork of the original File Browser project, whose filebrowser/filebrowser repository has since been archived on GitHub.

easyRead guide →

Gatus

A developer-oriented health dashboard and status page driven entirely by a YAML file, checking endpoints over HTTP, ICMP, TCP and DNS and evaluating each result against conditions on status code, response time, body values or certificate expiry. There is no setup UI — the monitor list lives in your repo.

easyRead guide →

GitBucket

A Git platform that ships as a single Java WAR file — put it on a box with a JVM, run java -jar, and you have repositories, issues, pull requests and a wiki. Its two selling points are a GitHub-compatible REST API and a plugin system; it has no built-in CI runner.

easyRead guide →

GoAlert

An on-call scheduling, alerting and escalation tool: define services, on-call schedules with rotations and escalation policies, accept alerts from monitoring through integration keys and notify the person on call, with most settings in an admin page of the web UI. Apache-2.0 Go and TypeScript; a single binary or container that needs only a PostgreSQL database.

GoTypeScriptPostgreSQL

easyRead guide →

No-code database

Grist

A relational spreadsheet from Grist Labs: tables with typed columns and Python formulas, linked widgets, forms and access rules, stored as SQLite documents on your own server.

TypeScriptNode.jsPython

easyRead guide →

Container registry

Harbor

A full container registry for teams: projects with role-based access, a web UI, image and Helm chart storage, replication to and from other registries, retention and immutability rules, audit logs, robot accounts and optional Trivy vulnerability scanning, all on top of the CNCF Distribution registry. Apache-2.0 licensed and a CNCF graduated project, written in Go with an Angular portal; it runs as a set of containers (core, jobservice, portal, registry, PostgreSQL, Redis, nginx) generated and started by its own installer.

GoTypeScriptPostgreSQLRedisNginx

moderateRead guide →

Apache HertzBeat

An agentless real-time monitoring system: it polls applications, databases, servers, middleware, networks and cloud-native services over HTTP, JMX, SSH, SNMP, JDBC and Prometheus, with configurable alert rules and notifications, status pages and optional collector clusters. Apache-2.0 Java; the single-container image bundles an H2 database and needs no external service.

JavaTypeScriptH2

easyRead guide →

Homarr

A dashboard edited by drag and drop in the browser, with built-in user accounts and integrations for self-hosted services such as media servers, download clients and DNS blockers.

TypeScriptNext.js

easyRead guide →

Home automation

Home Assistant

The open-source hub for home automation — local control of thousands of smart devices, with automations that run entirely on your own hardware.

moderateRead guide →

AI Chat Interfaces

Jan

Offline-first, open-source ChatGPT alternative that runs LLMs locally on the desktop (llama.cpp based, GPU-accelerated where available), with an optional self-hosted Jan Server for OpenAI-compatible API access across a team.

moderateRead guide →

Video conferencing

Jitsi Meet

Open-source video conferencing in the browser: meetings with screen sharing, chat and optional passwords, where guests join from a link without an account. The official Docker setup runs the web frontend, Prosody, Jicofo and the Jitsi Videobridge as separate containers.

TypeScriptJavaLuaWebRTC

moderateRead guide →

Keycloak

A mature, enterprise-grade open-source identity and access management server — SSO, SAML, and OpenID Connect with user federation, built on Quarkus and backed by Red Hat.

hardRead guide →

Kopia

A backup tool with a CLI, a desktop GUI (KopiaUI) and a server mode with a web UI: encrypted, deduplicated snapshots with per-path policies for retention, scheduling and compression (zstd, s2, pgzip; off by default), stored on S3-compatible storage, B2, Azure, Google Cloud, SFTP, WebDAV, rclone or a local disk. Repository maintenance runs automatically, and a repository server can take backups from many machines, each user seeing only its own snapshots.

easyRead guide →

Vector database

Milvus

A vector database built for similarity search over embeddings at scale: collections with multiple index types, scalar filtering, hybrid dense-plus-sparse search, partitions and role-based access, served over gRPC and a REST API with SDKs for Python, Go, Java and Node.js. Apache-2.0 licensed, written in Go and C++; in standalone mode it runs as one Milvus container that depends on etcd for metadata and MinIO (or S3) for the vectors themselves, with the message queue embedded.

moderateRead guide →

Miniflux

A deliberately minimalist RSS reader — a single Go binary backed by Postgres, opinionated, fast, and almost maintenance-free.

easyRead guide →

Workflow automation

Node-RED

A flow-based programming tool for event-driven applications: a browser editor where you wire together nodes from a palette, on a light Node.js runtime that is equally at home on a Raspberry Pi and in the cloud. Originally built by IBM's Emerging Technology Services team, now an OpenJS Foundation project under Apache-2.0 with thousands of community-contributed nodes. It is the pick for MQTT, hardware and event plumbing more than for SaaS-to-SaaS automation — and its editor ships with no login until you configure one.

easyRead guide →

Push notifications

ntfy

Send push notifications to your phone or desktop from any script with a simple HTTP PUT or POST — no accounts, no cloud. A tiny Go binary that turns `curl` into a notification pipeline for your servers and cron jobs.

easyRead guide →

File sync & storage

OpenCloud

A Go file sync and share server built on ownCloud Infinite Scale's code and developed since 2025 by OpenCloud GmbH, part of Berlin's Heinlein Group. It runs with no database: files are stored as a normal folder tree on disk and their metadata in extended attributes. Spaces, share links, desktop and mobile apps, and Collabora for office editing through an optional compose module.

moderateRead guide →

OpenSearch

A distributed search and analytics engine with a REST API, a query DSL, aggregations, k-NN vector search and the OpenSearch Dashboards UI for exploring and visualising what you index: the community fork of Elasticsearch and Kibana. Apache-2.0 licensed, Java on Lucene with a Node.js Dashboards server; it runs as a JVM node (or cluster) plus a separate Dashboards container, and the bundled demo security config gives you TLS and an admin login out of the box.

JavaLuceneNode.js

easyRead guide →

File sync & storage

ownCloud

ownCloud's modern flagship, Infinite Scale (oCIS) — a cloud-native rewrite in Go that replaces the legacy PHP server Nextcloud originally forked from. Single binary, lighter to run, enterprise-focused file sync and sharing.

moderateRead guide →

Papermerge DMS

A document management system for scanned archives: PDF, TIFF, JPEG and PNG in folders, with document versioning, custom fields, document types, tags, page management, users, groups and granular permissions, OIDC single sign-on and a REST API; OCR and full-text search are added as separate worker services. Apache-2.0, Python with a TypeScript front end; the web app runs as one container next to PostgreSQL (SQLite by default, for demos only).

PythonTypeScriptPostgreSQL

easyRead guide →

Workflow automation

Prefect

A Python workflow orchestration platform: decorate ordinary functions as flows and tasks, and the server tracks every run, schedules deployments, retries failures and shows state, logs and schedules in a web dashboard. Apache-2.0; `prefect server start` runs the API and UI in one container with SQLite by default, and PostgreSQL for production.

easyRead guide →

Prometheus

The de facto open-source metrics time-series database and alerting engine, scraping targets over HTTP and powering most self-hosted dashboarding stacks.

easyRead guide →

Password manager

Psono

An end-to-end encrypted password manager aimed at IT teams, pairing a Django/PostgreSQL server with browser extensions and a built-in admin portal. The community edition has no user cap; SSO, audit logging, and policy enforcement live in the enterprise build.

PythonDjangoPostgreSQL

hardRead guide →

Vector database

Qdrant

A vector database and vector search engine for the embeddings behind semantic search, recommendations and retrieval-augmented generation: a REST API, a gRPC API, a built-in web dashboard, JSON payload filtering, quantization and per-collection snapshots. Written in Rust and Apache-2.0 licensed, it runs as a single container with no separate datastore.

easyRead guide →

step-ca

An online certificate authority from Smallstep for automated certificate management: it issues X.509 certificates for HTTPS and TLS and SSH certificates, and runs an ACME server so ACME clients can request certificates from it. In the Docker image it initialises itself on first start from environment variables.

easyRead guide →

Supabase

Postgres-native backend platform bundling auth, realtime subscriptions, storage, and edge functions behind a single API gateway. The open-source Firebase alternative.

PostgreSQLTypeScript

hardRead guide →

Business intelligence

Apache Superset

An Apache Software Foundation data-exploration and dashboarding platform: write SQL in a browser editor or build charts without code, assemble them into dashboards, and connect to a wide range of SQL databases. It is a Python (Flask) backend with a React frontend that keeps its own state in a metadata database, and the full feature set also needs a Redis cache and Celery workers. Upstream's Docker Compose setup is for trying it out; its recommended production route is Kubernetes.

PythonFlaskTypeScriptReactPostgreSQLRedis

hardRead guide →

SuperTokens

An open-core login provider: the core is a Java service with an HTTP API for sessions, email and password, passwordless and social login, roles and multi-tenancy, which your own backend calls through SuperTokens SDKs while your frontend uses prebuilt sign-in UI. Apache-2.0 outside its `ee/` directory, which is under an enterprise license; this image keeps its data in PostgreSQL.

moderateRead guide →

VictoriaMetrics

A fast, resource-light time-series database for metrics: it speaks the Prometheus remote-write, scrape and query APIs plus InfluxDB, Graphite and OpenTSDB ingestion, extends PromQL as MetricsQL, and ships the vmui web UI for exploring data, so Grafana and Prometheus-style exporters plug straight in. Apache-2.0 licensed (an Enterprise edition with extra features is a separate licence), written in Go; the single-node version runs as one container writing to one data directory with no other services.

easyRead guide →

AI Chat Interfaces

vLLM

High-throughput LLM inference and serving engine with PagedAttention and continuous batching — an OpenAI-compatible API server built for GPU-backed, multi-user production workloads.

moderateRead guide →

Woodpecker CI

A lightweight CI/CD engine, forked from Drone, that runs pipelines defined in YAML as Docker containers. It has no user accounts of its own: you log in through a connected forge such as GitHub, Gitea, Forgejo or GitLab.

easyRead guide →

Zulip

An open-source team chat server that organizes every conversation into topics within channels, so discussions stay threaded. It ships web, desktop and mobile apps.

PythonDjangoPostgreSQLRabbitMQ

moderateRead guide →

Analytics cookies only (Google Analytics, PostHog). No ad networks, no cross-site tracking. See our privacy policy.