EnvSH/Software picks
Find a command/
中文
☰

02 / THE CONSIDERED SHORTLIST

Good tools. A reason for each.

Choose what you need and skip the rest. Understand why each tool is here, what it costs to maintain, and how to install it.

A place for every self-hosted service.

The official repository with the Compose plugin. A useful foundation for running several services.

THE TRADEOFF
Containers need updates and backups. Published ports can bypass UFW rules.
AFTER INSTALLATION
Verify with docker run --rm hello-world.
OFFICIAL INSTALLERAfter install →Upstream docs ↗

Domains and HTTPS, with a visual interface.

A practical way to manage a few websites and certificates without writing Nginx configuration.

THE TRADEOFF
Uses ports 80/443. Choose it or Zoraxy, or plan different ports yourself.
AFTER INSTALLATION
Admin binds to 127.0.0.1:81 (SSH tunnel). Apps from this plan are reachable by container name, such as komari:25774.
REQUIRES DOCKERAfter install →Upstream docs ↗

A small dashboard for your servers.

A central view of server health. Deploy the dashboard, then copy the agent command from it onto each host.

THE TRADEOFF
Agents must reach the dashboard: put it behind a reverse proxy, or publish port 25774. Back up the data directory.
AFTER INSTALLATION
The first account is in docker logs komari. With NPM, forward your domain to komari:25774 with WebSockets on.
REQUIRES DOCKERAfter install →Upstream docs ↗

A friendlier terminal for everyday work.

Suggestions and syntax highlighting for people who spend time in SSH sessions.

THE TRADEOFF
Adds third-party configuration and changes ~/.zshrc. Bash is also a good choice.
AFTER INSTALLATION
Installs for the current user. Does not change the login shell automatically.
OFFICIAL INSTALLERAfter install →Upstream docs ↗

Another visual reverse proxy option.

Manage HTTP routes and static sites through a web interface.

THE TRADEOFF
Conflicts with Nginx Proxy Manager on 80/443. Docker socket is not mounted.
AFTER INSTALLATION
Admin binds to 127.0.0.1:8000. Connect through an SSH tunnel.
REQUIRES DOCKERAfter install →Upstream docs ↗

A full panel, when you need one.

For managing applications and the host through a graphical interface. Installation is interactive.

THE TRADEOFF
Broad host privileges. Install separately and review the upstream guide first.
AFTER INSTALLATION
The installer prompts for port and credentials. Run 1pctl user-info afterward.
OFFICIAL INSTALLERAfter install →Upstream docs ↗

Self-host a relay for remote desktops.

Run hbbs and hbbr for your own RustDesk clients.

THE TRADEOFF
Uses host networking and requires the documented ports. Linux only.
AFTER INSTALLATION
The script prints the public key at the end. Enter the server address and key in each client; open TCP 21115-21117 and UDP 21116.
REQUIRES DOCKERAfter install →Upstream docs ↗

Know when a site or service goes down.

Checks HTTP, TCP, DNS and more on a schedule, and notifies you by Telegram, email, and other channels.

THE TRADEOFF
The first visitor creates the admin. Create it through the tunnel before adding a domain. On the same host it monitors, it goes down with that host.
AFTER INSTALLATION
Binds to 127.0.0.1:3001. With NPM, forward your domain to uptime-kuma:3001 with WebSockets on.
REQUIRES DOCKERAfter install →Upstream docs ↗

Tells you when an image has a new version. You decide when to update.

These apps use latest images and stay old unless someone updates them. Diun checks every container every 6 hours and notifies you via Telegram or ntfy. It only notifies; nothing updates on its own, which is safer than automatic updates.

THE TRADEOFF
It mounts the Docker socket to list containers, which grants control of Docker. Diun is a well-known open-source project that only reads image data; skip it if that is not acceptable.
AFTER INSTALLATION
No web UI. After installing, run docker exec diun diun notif test to send a test notification.
REQUIRES DOCKERAfter install →Upstream docs ↗

Your installation plan

Server system

Debian 12/13, Ubuntu 22.04–26.04; Rocky / AlmaLinux 8–10, CentOS Stream 9/10, RHEL (dnf, some tools from EPEL); Alpine 3.x (apk + OpenRC). The script checks the host first and stops on a mismatch.

How to reach web dashboards

Affects Komari and Uptime Kuma. Recommended: a reverse proxy with your domain and HTTPS, ports on loopback only. Direct: reach them at IP:port, for when you have no domain yet.

Output & identity
How to use it

Paste mode stops on errors inside a subshell, preserving your SSH session. Script mode is for reviewing and saving a file.

Run as

A fresh reinstall is root, so the default commands have no sudo. Choose sudo when you are a normal user and sudo is already installed.

apps.txt
Select software on the left to build the commands.

Generated locally; no VPS connection. Container apps live in /opt/<app> on one Docker network, proxy, and the plan is safe to rerun. Images use latest; add Diun to hear about new versions.

After installing: access, domains, backups, updates, removal →
View installation plan ↓