Homelab

Apps for your server and home network, from the UniFi controller to Home Assistant. Most of them install in one click, like any app in the App Store.

Installable or guide

Every installable entry in Apps → Homelab is a checked App Store template. Install sets up what CloudZH can automate, and the app card lists the Next steps that are left for you, such as creating the admin account or pairing devices. Software that cannot run as a container on CloudZH, such as Ubiquiti UISP, Grandstream GWN Manager and OpenWISP, gets a step-by-step guide instead, usually for a separate small server.

Finding apps

The categories are the same as in the App Store, with ★ recommended apps first. The filter Installable / Guide narrows the list, and in Network & devices a vendor filter shows the apps for your hardware.

Area	For example
Network & devices	UniFi Network Application, TP-Link Omada, AdGuard Home, NetAlertX, UpSnap
Cameras & smart home	Home Assistant, Zigbee2MQTT, Z-Wave JS UI, Scrypted, Frigate, Node-RED
System & monitoring	Scrutiny, Healthchecks, Beszel, SmokePing
Remote access	Apache Guacamole, RustDesk Server, MeshCentral
Everyday, files and cloud	Nextcloud, Stirling PDF, PairDrop, Rallly, Mealie, Actual Budget, Homebox, Karakeep, FreshRSS, Mumble, Spliit
Local AI and games	Ollama, Open WebUI, Pelican Panel

One controller per vendor

Network controllers of the same vendor exclude each other: install the UniFi Network Application or UniFi OS Server, never both. CloudZH tells you before the installation when the other one is already there.

USB sticks and devices

Zigbee2MQTT and Z-Wave JS UI need a USB stick. The install dialog lists the sticks it finds by their stable name. If there is none, it says what to do, for example Plug in your Zigbee stick and select it here. Scrutiny reads the S.M.A.R.T. values of all your disks.

Host network and fixed ports

Some apps need the network of the server itself or fixed ports, for example so that UniFi devices find their controller. CloudZH checks these ports before the installation and names the app or service that already uses one.

Memory and processor

Every app has a memory estimate, so CloudZH can warn you before the server runs short. Apps that are only published for some processors show a clear message before the installation instead of failing halfway, for example on a Raspberry Pi.

AdGuard Home and port 53

AdGuard Home blocks ads and trackers for every device at home as the DNS server of your network. It needs port 53, which systemd-resolved holds on Ubuntu and Debian. Only if you tick Free port 53 in the install dialog does CloudZH turn off the DNS stub of systemd-resolved, and removing AdGuard Home turns it back on. The server keeps resolving names the whole time.

AdGuard Home starts with Quad9 as upstream and the AdGuard DNS filter, both changeable. Nothing changes in your network until you set the server as the DNS server in your router. Never forward port 53 to the internet.

Left out on purpose

Kind	Why
Dashboards	The CloudZH dashboard already shows every app with its link, status and sign-in.
Docker management	Full access to Docker equals root access to the server and would bypass the security check of every app.
Reverse proxies	Caddy already handles domains, certificates and the sign-in.
WireGuard interfaces	CloudZH has its own WireGuard VPN.
Mail servers	Home connections can't send mail reliably, and a mail server needs constant care.