This repo contains ansible playbooks and docker compose files to get a number of self-hosted services up and running on my homelab.
Each host is running within a Proxmox cluster in a LXC container running Ubuntu 24.04 LTS.
Why use Proxmox rather than a single host with docker compose? Mostly because Proxmox makes it trivial to both backup and migrate services between nodes using a single web interface.
| Image | Version |
|---|---|
| codeberg.org/forgejo/forgejo | 15.0.2 |
| data.forgejo.org/forgejo/runner | 12 |
| docker.io/aceberg/watchyourlan | v2 |
| docker.io/archivebox/archivebox | 0.7.4 |
| docker.io/caronc/apprise | v1.4.1 |
| docker.io/chrisbenincasa/tunarr | 1.3.3 |
| docker.io/deluan/navidrome | 0.61.2 |
| docker.io/dgtlmoon/changedetection.io | 0.55.5 |
| docker.io/docker | 29.5.2-dind |
| docker.io/fosrl/newt | 1.12.5 |
| docker.io/gotify/server | 2.9.1 |
| docker.io/grafana/grafana | 13.0.1 |
| docker.io/grafana/loki | 3.7.2 |
| docker.io/henrygd/beszel | 0.18.7 |
| docker.io/itzg/minecraft-bedrock-server | 2026.5.2 |
| docker.io/jellyfin/jellyfin | 10.11.9 |
| docker.io/krateng/maloja | 3.2.4 |
| docker.io/library/redis | 8 |
| docker.io/linuxserver/calibre-web | 0.6.26 |
| docker.io/linuxserver/lidarr | 3.1.0 |
| docker.io/linuxserver/prowlarr | 2.3.5 |
| docker.io/linuxserver/qbittorrent | 5.2.0 |
| docker.io/linuxserver/radarr | 6.1.1 |
| docker.io/linuxserver/sonarr | 4.0.17 |
| docker.io/linuxserver/speedtest-tracker | 1.14.2 |
| docker.io/mariadb | 12.2.2 |
| docker.io/miniflux/miniflux | 2.3.0 |
| docker.io/paperlessngx/paperless-ngx | 2.20.15 |
| docker.io/postgres | 18.4 |
| docker.io/rommapp/romm | 4.8.1 |
| docker.io/searxng/searxng | 2026.5.22-fc90c5b09 |
| docker.io/tensorchord/pgvecto-rs | pg14-v0.2.0 |
| docker.io/twinproduction/gatus | v5.36.0 |
| docker.io/valkey/valkey | 9 |
| docker.io/vaultwarden/server | 1.36.0 |
| docker.io/vikunja/vikunja | 2.3.0 |
| ghcr.io/advplyr/audiobookshelf | 2.35.0 |
| ghcr.io/alam00000/bentopdf | 2.8.4 |
| ghcr.io/androidseb25/igotify-notification-assist | v1.5.1.3 |
| ghcr.io/autobrr/qui | v1.19.0 |
| ghcr.io/davegallant/rfd-fyi | 0.8.0 |
| ghcr.io/dispatcharr/dispatcharr | 0.25.0 |
| ghcr.io/gethomepage/homepage | v1.13.1 |
| ghcr.io/hargata/lubelogger | v1.4.5 |
| ghcr.io/immich-app/immich-machine-learning | v2.7.5 |
| ghcr.io/immich-app/immich-server | v2.7.5 |
| ghcr.io/kiwix/kiwix-serve | 3.8.2 |
| ghcr.io/nicotsx/zerobyte | v0.37 |
| ghcr.io/seerr-team/seerr | v3.2.0 |
| ghcr.io/seriousm4x/upsnap | 5.3.5 |
| ghcr.io/umami-software/umami | 3.1.0 |
| quay.io/invidious/invidious | 2026.05.21-99390d0 |
| quay.io/invidious/invidious-companion | master-6c76cab |
All hosts have tailscale installed on them, with Tailscale SSH. In some cases, tailscale serve is used to expose services with Let's Encrypt certificates.
Tailscale ACLs are used to tag and restrict nodes from accessing eachother.
Each host runs an instance of Alloy managed by systemd allowing for all journald and docker logs to be collected, labelled and sent to Grafana Loki.
ProxMenux is used to run update scripts and monitor key vitals of running proxmox nodes.
Renovate is used to update dependencies and pin digests.