Tools for people who run their own servers.

Arrmate

Turns plain English into media-server commands. Built for families: the admin sets it up once, and everyone else just types what they want.

• Python
• Docker
• MIT

• Connects to Sonarr, Radarr, Lidarr, Bazarr, Plex, AudioBookshelf, ReadMeABook, Prowlarr, SABnzbd, NZBget, qBittorrent, Transmission and more.
• Runs on a local model (Ollama, LM Studio, LocalAI) or a cloud API (OpenAI, Anthropic, Groq, OpenRouter, Mistral, or any OpenAI-compatible endpoint).
• Family members join through invite links, with user, power-user and admin roles.
• Slack or Discord notifications when someone requests new media (optional).

GitHub Docker Hub

portless

An interactive setup wizard and management CLI for a self-hosted media stack, with no port forwarding, no exposed home IP and no router changes.

• Shell
• MIT

• One installer walks through Docker, wildcard TLS certificates, authentication, app selection and remote access.
• Services sit behind HTTPS with Traefik and a single login (TinyAuth SSO recommended).
• Remote access through Cloudflare Tunnel, Pangolin, Tailscale, Headscale or Netbird. Works behind CGNAT.
• The README publishes its own security review findings and the fix for each one.

GitHub

pangolin-debug-skill

A Claude Code skill and repair scripts for debugging self-hosted Pangolin EE tunnel installs.

• JavaScript
• Claude Code

• Adds a /pangolin-debug command for diagnosing empty dashboards, 404s, 502s, SSO errors, WireGuard tunnel failures and multi-site routing.
• The scripts also work on their own, without Claude Code: database repair, resource registration and initial setup.
• The README lists support for Pangolin EE through v1.18.

GitHub

termhop

An end-to-end encrypted terminal in a phone or desktop browser. The relay only carries encrypted messages, so it can't read your terminal.

• Python
• AGPL-3.0

• The agent runs on the computer you want to reach: Linux, macOS or Windows 10/11.
• Pair a device by scanning a QR code printed in the terminal. Pairing secrets are short-lived.
• Run your own relay with Docker Compose behind a TLS reverse proxy, or as a hardened native systemd service.

GitHub

Meerkat42

Every node. One watch. A self-hosted monitoring and operations platform for homelabs, small infrastructure teams and managed service providers.

• Go agent
• Python
• Next.js

• A small agent on each machine connects outward to the Hub, so no management port has to be opened at remote sites.
• Monitors CPU, memory, load, Docker containers, ZFS pools, SMART disks and, optionally, Proxmox guests.
• Stateful alerts with recovery notices and flap suppression, delivered to Discord, Slack, email or webhooks.
• Allowlisted remote actions with an audit trail, optional two-owner approval, and owner, admin and scoped viewer roles.
• Selected Compose and environment files are encrypted on the agent before the Hub stores them.