Applications Overview

Auberge deploys a curated stack of self-hosted FOSS applications. Services run natively via systemd; containers are per-app exceptions granted only when upstream supports nothing else (currently Immich).

Infrastructure

Application	Description
Caddy	Reverse proxy with automatic HTTPS
Cockpit	Web-based server administration
fail2ban	Intrusion prevention system
UFW	Uncomplicated firewall

Networking

Application	Description
Blocky	DNS server with ad/tracking blocking
Headscale	Self-hosted Tailscale control server
Tailscale	Mesh VPN for secure remote access

Apps

Application	Description
Actual Budget	Budgeting with EU bank sync
Baikal	CalDAV/CardDAV server
Bichon	Email archiving and search
Grimmory	Multi-user digital library
Calibre	Ebook library (alternative to Grimmory)
Colporteur	Newsletter-to-feed converter
FreshRSS	RSS feed aggregator
Forgejo	Self-hosted git forge
Immich	Photo and video management
Navidrome	Music streaming server
Paperless-ngx	Document management system
Radio	Password-gated music streams
memsearch	Agent memory: markdown store + on-box index
Stirling-PDF	PDF signing and editing
Syncthing	Continuous file synchronization
Gokapi	Expiring-link file sharing
YOURLS	URL shortener

Notifications

Application	Description
TGTG Bot	Too Good To Go availability notifications

AI

Application	Description
Hermes Agent	Self-improving personal AI assistant
OpenCode	Agent runtime on the disposable agent Host
Agent of Empires	Agent session dashboard, PWA with push

Deployment

All applications are deployed via Ansible playbooks. See Running Playbooks for details.

# Deploy all apps
auberge deploy --all

# Deploy specific app
auberge deploy baikal

Backup Support

All applications support backup and restore. See Backup & Restore for details.