Apps / Docker Images
Production Docker images.
Free to pull, documented to run.
The same digest-pinned, hardened images that power our App Platform, public on GHCR. Each one ships with a full production guide, a changelog, and a working compose.
BookStack in Docker
26.05.4-r1Per-instance APP_KEY, rotated default admin, MariaDB pairing, healthcheck
Updated Sep 11, 2026
Chatwoot in Docker
4.17.1-r1Live chat + shared inbox, pgvector Postgres and Redis wired, generated super admin, signup closed
Updated Sep 11, 2026
Code Server in Docker
4.137.0-r1Non-root, healthchecked, auth and TLS via your proxy
Updated Sep 11, 2026
Drupal 11 in Docker
11.4.6-r1MariaDB pairing, trusted-host and proxy config, healthcheck
Updated Sep 11, 2026
EspoCRM in Docker
10.0.8-r1Headless install, generated admin, in-container job daemon, MariaDB pairing
Updated Sep 11, 2026
Ghost in Docker
6.63.0-r2Env-driven config, MySQL 8 pairing, proxy-safe healthcheck, one content volume
Updated Sep 10, 2026
Gitea in Docker
1.27.3-r1Headless setup, SQLite, admin auto-provisioning, healthcheck
Updated Sep 10, 2026
Grafana in Docker
13.2.1-r1Non-root, SQLite, admin auto-setup, healthcheck kept
Updated Sep 11, 2026
Joomla 5 in Docker
5-r1Headless install, MariaDB pairing, healthcheck
Updated Sep 11, 2026
Kimai in Docker
2.66.0-r1MariaDB pairing, admin auto-provisioning, healthcheck
Updated Sep 11, 2026
LibreChat in Docker
0.8.7-r1Multi-provider chat UI, MongoDB and Meilisearch pairing, one env contract
Updated Sep 11, 2026
LiteLLM in Docker
1.100.1-r1OpenAI-compatible gateway, Postgres pairing, key management, healthcheck
Updated Sep 11, 2026
Mattermost in Docker
11.10.1-r1Postgres pairing, proxy-aware config, one data volume, healthcheck
Updated Sep 11, 2026
Mautic in Docker
5.2.11-r1Built-in cron loop, headless install, generated admin, MySQL 8 pairing
Updated Sep 12, 2026
Metabase in Docker
0.63.17.2-r1Postgres app database, persisted encryption key, generated admin
Updated Sep 12, 2026
Moodle in Docker
5.2.2-r1Headless CLI install, plugins persist on a volume, PostgreSQL 17 pairing
Updated Sep 12, 2026
n8n in Docker
2.38.6-r1Proxy-correct webhook URLs, persistent data, encryption-key discipline
Updated Sep 10, 2026
Nextcloud in Docker
34.0.3-r1Redis file locking and cache, APCu, MariaDB pairing, trusted-domain wiring
Updated Sep 10, 2026
Odoo 18 in Docker
18.0-r1PostgreSQL pairing, addons volume, proxy-aware config, healthcheck
Updated Sep 11, 2026
Open WebUI with Ollama
0.11.3-r1Bring your own models via the UI, one data volume, CPU inference works
Updated Sep 10, 2026
OpenClaw in Docker
2026.9.4-r1Hardened defaults, one data volume, proxy-fronted UI
Updated Sep 11, 2026
Plausible CE in Docker
3.2.1-r1Postgres + ClickHouse wired and migrated, generated owner, invite-only
Updated Sep 12, 2026
Portainer in Docker
2.45.0-r2Admin created before first request, trusted origins wired, socket-scoped host access
Updated Sep 12, 2026
PrestaShop in Docker
8.2.8-r1Headless install wrapper, MariaDB pairing, healthcheck
Updated Sep 11, 2026
Vaultwarden in Docker
1-r1Bitwarden-compatible API, SQLite on one /data volume, signup lockdown notes
Updated Sep 10, 2026
Snipe-IT in Docker
8.7.2-r1Persisted APP_KEY, headless superuser, /setup closed, MySQL 8 pairing
Updated Sep 12, 2026
Uptime Kuma in Docker
1-r1SQLite, one data volume, upstream healthcheck kept
Updated Sep 10, 2026
WooCommerce on OpenLiteSpeed
11.1.0-r1LiteSpeed Cache with cart exclusions, Redis object cache, MariaDB pairing, healthcheck
Updated Sep 11, 2026
WordPress on LiteSpeed Enterprise
6.3.6-r1LiteSpeed Cache, Redis object cache, BYOL serial via env, no baked key
Updated Sep 10, 2026
WordPress on Nginx
7.1-r1fastcgi_cache page caching, brotli, Redis object cache, proxy-aware URLs
Updated Sep 10, 2026
WordPress on OpenLiteSpeed
7.1-r2LiteSpeed Cache page caching, Redis object cache, wp-cli, proxy-aware canonical URLs
Updated Sep 10, 2026
Every image is pinned by digest and updated deliberately; each build is recorded in its changelog. The repository contents are MIT licensed, and each image's contained software keeps its own upstream license, noted on its page.
Your server runs. You sleep.
Fully managed hosting from people who have been doing this since 2001.