One-click services. AI-managed after.

PostgreSQL

01

PostgreSQL 15 or 16 from the official PGDG repository, with managed config and an encrypted superuser password.

MariaDB

04

MariaDB from your distro's apt repository, with an encrypted root password and a managed config drop-in.

MySQL

06

MySQL 8.0 from Ubuntu's apt repository, with an encrypted root password and localhost-only binds.

MongoDB

07

MongoDB Community Server 8.0 from the official MongoDB repository, bound to localhost by default.

ClickHouse

08

The ClickHouse OLAP column store from its official repository — every listener bound to localhost.

Qdrant

16

Vector database for RAG and semantic search — a pinned Rust binary on its standard ports, bound to localhost.

Meilisearch

11

Meilisearch as a single pinned binary — typo-tolerant search API bound to localhost, protected by a master key.

Ollama

12

Ollama's CPU-only build as a pinned artifact — open LLMs behind a localhost API, models pulled on demand.

Grafana

13

Grafana OSS from the official Grafana Labs repository — current stable, dashboards on port 3000 in about two minutes.

Prometheus

14

Prometheus with node_exporter from your distro's apt repository — host metrics out of the box, 15-day retention.

VictoriaMetrics

17

Fast, low-resource time-series database — a Prometheus-compatible remote-write target in a single pinned binary.

Node Exporter

18

Prometheus Node Exporter — host CPU, memory, disk, and network metrics on a localhost /metrics endpoint.

Fail2ban

23

Bans IPs that brute-force SSH or flood your app vhosts with blocked requests — SSH protection on by default.

CrowdSec

24

Crowd-sourced blocklist plus an nftables firewall bouncer that auto-registers and drops known-bad IPs — SSH scenarios on by default.

File Browser

19

A web UI for the files on your server — upload, download, preview, edit, and share — as a single pinned binary.

SeaweedFS

21

S3-compatible object storage in a single pinned binary — master, volume, filer, and S3 gateway in one process.

Syncthing

22

Continuous, encrypted peer-to-peer file sync between your devices — no cloud in the middle.

Redis

02

Redis from your distro's apt repository, bound to localhost with protected mode on — safe by default.

nginx

03

A managed reverse-proxy vhost in front of your app, with optional Let's Encrypt TLS.

Docker

05

Docker CE from Docker's official repository, with the Buildx and Compose plugins included.

RabbitMQ

09

RabbitMQ from your distro's apt repository with a matched Erlang runtime — a working broker in one approval.

PocketBase

10

PocketBase as a single pinned binary — SQLite backend, auth, file storage, and admin UI, bound to localhost.

Gitea

15

Self-hosted Git service — repos, issues, pull requests, and CI — as a single pinned binary bound to localhost.

Memos

20

Lightweight self-hosted notes — markdown, tags, and sharing with an embedded SQLite database, in one pinned binary.