Self-Hosting Annual Report 2025
It’s the end of the year again, time to take stock of all the self-hosted services I’ve been tinkering with. From the underlying PaaS platform to various applications, I’ve basically self-hosted everything I could. This article serves as a record for myself and a reference for fellow self-hosting enthusiasts.
Infrastructure
I use two PaaS platforms for container deployment management.
Dokploy
An open-source PaaS platform, a self-hosted alternative to Vercel/Netlify. Supports Docker Compose, Git deployment, and automatic SSL. The interface is clean, and resource usage is low.
Related Articles:
EasyPanel
EasyPanel is another PaaS platform, a closed-source commercial product. More modern interface, richer templates, suitable for users who don’t want to tinker too much. Some features require payment.
CDN
Cloudflare CDN + Zero Trust
I use Cloudflare CDN for the entire site, combined with Zero Trust for internal network access and security control. The free tier is sufficient, and stability is good. Zero Trust can hide services you don’t want to make public, requiring email verification for access.
Backup
I use two backup solutions:
HostBrr Storage Box
Cheap and large storage box for storing various backup files. Synchronized regularly via SFTP/rsync.
Cloudflare R2
Object storage, S3 API compatible. Mainly used for Dokploy automatic backups. Free tier of 10GB is more than enough for configuration file backups.
Related Article: Configure Dokploy Backups with Cloudflare R2
NameCrane
NameCrane provides domain email service. The $20 for 3 years plan is great value. Supports custom domain email sending and receiving.
URL Shortener
S.EE
S.EE URL shortening service, lifetime $55 one-time purchase. Building your own URL shortener is too much hassle, this price is worth the convenience.
Security WAF and Web Server
For security, I use the CrowdSec + Traefik combination.
CrowdSec
A collaborative security engine, similar to Fail2ban but more powerful. Community-shared threat intelligence, automatic IP banning. Combined with Traefik Bouncer, it can intercept attacks at the entry layer.
Traefik
Cloud-native reverse proxy with automatic service discovery and automatic SSL certificates. Works seamlessly with Docker - just add a few labels to automatically configure routing and certificates for new services.
Related Articles:
Monitoring
The monitoring system is where I spent the most time this year, building a comprehensive observability platform.
Visualization and Logging
| Service | Purpose |
|---|---|
| Grafana | Visualization dashboards, unified display of metrics and logs |
| Loki | Log aggregation system, query logs with Grafana |
| Alloy | Grafana’s next-gen collector, replacing Promtail |
| Logporter | Lightweight log forwarding tool |
Metrics Collection
| Service | Purpose |
|---|---|
| VictoriaMetrics | Time-series database, high-performance Prometheus alternative |
| Node-Exporter | Host metrics collection |
| BlackBox-Exporter | Black-box probing, monitor service availability |
| AlertManager | Alert management and notification |
| Pushgateway | Push metrics for short-lived jobs |
Lightweight Monitoring
| Service | Purpose |
|---|---|
| Beszel | Lightweight server monitoring with clean interface |
| ServerStatus-Rust | Multi-server status page, my live demo: serversentry.catcat.blog |
Related Articles:
Media Services
Media services are the highlight of self-hosting - fully automated from download to organization to playback.
Media Servers
| Service | Image/Project | Purpose |
|---|---|---|
| Emby | amilys/embyserver:latest | Primary media server |
| Plex | linuxserver/plex | Private music library |
| Komga | gotson/komga | Comics library management |
Download and Organization
| Service | Image/Project | Purpose |
|---|---|---|
| Moviepilot | jxxghp/moviepilot-v2:latest | Media download, organization, and scraping - fully automated TV tracking |
| MDC | mdcng/mdc:latest | Adult media organization and scraping |
| Byte-Muse | envyafish/byte-muse | M-Team adult video download |
| Ani-Rss | wushuo894/ani-rss:latest | Automatic anime download |
| qBittorrent | linuxserver/qbittorrent:5.1.0 | Torrent downloader |
Supporting Services
| Service | Image/Project | Purpose |
|---|---|---|
| misaka_danmu_server | l429609201/misaka_danmu_server:latest | Danmaku service for Emby |
| jellyfin-library-poster | evanqu/jellyfin-library-poster:latest | Auto-generate library posters |
| MetaTube | metatube-community | Metadata fetching |
Related Articles:
Applications
Various applications categorized by purpose, with detailed introductions for each.
Information Management
linkding
A minimalist bookmark manager focused on doing one thing well. Supports tag categorization, full-text search, and archiving. Has a browser extension for one-click saving. Clean interface, no bloat, fast startup, low resource usage. Compared to fancy alternatives like Raindrop, this suits my needs better.

SearXng
A meta search engine that aggregates results from Google, Bing, DuckDuckGo, and more. The biggest benefit is privacy protection - no tracking. Self-host one and enjoy a cleaner search experience without ads and personalized recommendations interfering. Earlier this year I used it with Open WebUI for AI-powered search.

RSSHub
The ultimate “everything can be RSS” tool. Many websites don’t offer RSS feeds, but RSSHub can convert them. Weibo, Bilibili, Zhihu, Twitter… basically anything you want to subscribe to. Self-host one, pair it with an RSS reader, and dramatically improve your information gathering efficiency.
Files and Images
CattoPic
My personal project - a Cloudflare-based image hosting solution using R2 storage and Workers. Simple deployment, fast speeds, low cost. Supports image compression, WebP conversion, and has a clean management interface. Perfect for personal blog image hosting needs.
Here’s my anime random image API: https://api.catcat.li/api/random?tags=random
Related Article: CattoPic - Self-Hosted Image Hosting on Cloudflare
Afilmory
A beautiful photo gallery application. Supports album categorization, map view, and timeline browsing. The interface design is elegant, perfect for showcasing photography work or family albums. Supports multiple users, so you can share with family.
But I ended up using it as a… waifu gallery, hahaha.

URL: https://gallery.catcat.blog - NSFW warning, don’t open at work!
Mazanoke
An online image compression tool with batch processing support. Adjustable compression quality and output format, supports WebP and AVIF. Processing happens entirely in the browser locally, nothing uploads to servers, ensuring privacy.
My public instance: https://mazanoke.sakiko.de
Bentopdf
A PDF processing toolbox supporting merge, split, compress, convert, and other common functions. Web interface is simple to use, no software installation needed. Convenient for small files, though local tools are still recommended for large files.
My public instance: https://pdf.sakiko.de

FileBrowser Quantum
An enhanced version of FileBrowser, a web file manager. Supports file upload/download, online preview, and sharing links. Modern interface with performance optimizations. Very convenient for managing server files, much more intuitive than command line.
Related Article: Docker Deploy FileBrowser-Quantum
Nextcloud
Nextcloud is a veteran private cloud solution with comprehensive features: file sync, calendar, contacts, notes, collaborative office… Rich ecosystem with many plugins. The downside is it’s heavy with significant resource usage. Suitable for scenarios requiring a full office collaboration suite.

Openlist
This is what powers the Catcat network drive. A fork of Alist, supports mounting various cloud drives (Aliyun Drive, Baidu Netdisk, OneDrive, etc.) for unified management and sharing. Clean interface, paired with Meilisearch for full-disk search.
Meilisearch
A high-performance full-text search engine written in Rust. Simple configuration, works out of the box. I use it to index my network drive - hundreds of thousands of files searchable in milliseconds. Much lighter than Elasticsearch.
Baidu Netdisk
johngong/baidunetdisk:latest
I absolutely hate installing anything from Baidu, but some people just love sharing resources on Baidu Netdisk. So I have no choice but to run it in Docker.

Development and Code
Gitea
A lightweight Git hosting service, private alternative to GitHub/GitLab. Has everything you need: code hosting, issue tracking, CI/CD (via Actions). Low resource usage, fast startup. More reassuring to keep private code here than in GitHub private repos. I also use it to backup some GitHub repos, just in case they suddenly go private or get taken down.

Gitea-Mirror
Automatically mirrors GitHub repos to Gitea. Once set up, it syncs periodically, essentially backing up your GitHub repos. If GitHub goes down or your account has issues, at least the code is still safe.

Excalidraw
A hand-drawn style whiteboard tool, great for architecture and flowcharts. Supports real-time collaboration for drawing and discussing with colleagues. Self-host one, no data leak worries, and can integrate with other services.
Tools and Automation
IT-Tools
A developer toolbox with various useful utilities: Base64 encode/decode, JSON formatting, UUID generation, hash calculation… Everything in one page, no need to hunt for online tools.
N8n
A workflow automation platform, open-source Zapier alternative. Connect various services to create automated workflows. For example: auto-forward emails to Telegram, sync GitHub stars to Notion, push notifications on RSS updates… Node-based programming, usable without writing code.
FlareSolverr
A proxy service to bypass Cloudflare verification. Some websites with Cloudflare protection block direct crawler requests. FlareSolverr uses headless Chrome to simulate browser access, bypasses verification, and returns content. Works with indexers like Prowlarr and Jackett.
CookieCloud
Cookie cloud sync service. Encrypts and syncs browser cookies to your own server, sharing login states across devices. Works with a browser extension, syncing login states for PT sites, video sites, and more.
Network and Remote
RustDesk
Open-source remote desktop software, a TeamViewer alternative. Self-host your relay server for lower latency and better security. Clients support all platforms with sufficient features. No more suffering TeamViewer’s various limitations.
Related Article: Docker Deploy RustDesk Relay Server
AdGuard Home
DNS-level ad blocker. Set it as your home network’s DNS server and all devices enjoy ad-free browsing. Also supports DoH, DoT encrypted DNS for privacy. Combined with custom rules, more thorough than browser plugins.
Related Article: AdGuard Ad Blocking with Clash Proxy
Privtracker
Private BT Tracker service. Host your own tracker for convenient file sharing among friends. No worries about public tracker logging or copyright issues. Perfect for small circle use.
Neko
Browser-based virtual desktop for multi-user screen sharing. Essentially a browser running in Docker, streaming via WebRTC. Great for watching videos together, collaborative browsing, or demonstrating operations.
AI and Data
Open WebUI
AI chat interface connecting to multiple LLM backends (OpenAI, Ollama, LiteLLM, etc.). Interface similar to ChatGPT, supports conversation history, prompt templates, and knowledge base (RAG). Self-host one to manage various AI models in one place while protecting conversation privacy.
Convex
Convex is a reactive database platform. Real-time sync, automatic caching, TypeScript support. Great for building real-time applications.
Infisical
Secret management platform for centrally managing API keys, database passwords, and environment variables. Supports version control, permission management, and automatic injection into applications. Much safer than keeping secrets in .env files, and convenient for team collaboration.
Postgresus
PostgreSQL database backup tool. Supports scheduled backups, incremental backups, and compressed storage. Can backup to local or S3-compatible storage. Simple configuration, easier than writing cron scripts.
Rybbit
Website analytics tool, a privacy-friendly Google Analytics alternative. Doesn’t use cookies, GDPR compliant. Clean interface with key metrics at a glance. Perfect for personal blogs and small websites.

Media Processing
Vert
Online media format conversion tool. Supports video, audio, and image format conversion. Processing happens locally in the browser, no server upload needed. Supports batch processing with common formats covered.
Conclusion
Looking back at this year, self-hosted services from monitoring to media to various tool applications have basically formed a complete ecosystem. Key takeaways:
- Dokploy + Traefik + CrowdSec combination solved deployment and security challenges
- Grafana + Loki + VictoriaMetrics built a complete observability platform
- Moviepilot + Emby + Danmaku service achieved fully automated viewing experience
- Various small tools significantly improved daily work efficiency
Looking forward to more tinkering in 2026!