App catalog
SHC ships with 57 reference apps in apps/. Each app is a deployable stack template (Docker Compose or Swarm) with declared variables, backup rules, and optional VApp plugins.
Apps are installed with:
shc install <app-name> --stack <stack> --environment <env>Auto-generated from apps/*/app.yaml. 28 categories, 57 apps.
By category
Section titled “By category”- ai — 1 app
- analytics — 2 apps
- auth — 1 app
- automation — 1 app
- cms — 1 app
- collaboration — 1 app
- communication — 2 apps
- crm — 1 app
- database — 5 apps
- design — 1 app
- devops — 3 apps
- documents — 1 app
- email — 2 apps
- finance — 1 app
- infrastructure — 4 apps
- knowledge-base — 1 app
- licensing — 1 app
- marketing — 2 apps
- media — 2 apps
- monitoring — 3 apps
- networking — 1 app
- observability — 1 app
- platform — 2 apps
- project-management — 1 app
- security — 8 apps
- storage — 2 apps
- testing — 5 apps
- web — 1 app
All apps
Section titled “All apps”| App | Version | Category | Description |
|---|---|---|---|
affine | 0.26 | knowledge-base | AFFiNE - open source knowledge base and wiki (Notion alternative) |
blockscout | 10.2 | infrastructure | Open-source block explorer for EVM-compatible blockchains (self-hosted Etherscan) |
ciso-assistant | 1 | security | CISO Assistant - open-source GRC platform for cybersecurity compliance and risk management |
clickhouse | 24.3 | database | ClickHouse - fast open-source column-oriented DBMS for analytics |
crowdsec | 1.7 | security | CrowdSec is a collaborative, open source intrusion detection and prevention system. |
defectdojo | 2.38 | security | DefectDojo is a vulnerability management and security orchestration platform for tracking findings across tools. |
dependency-track | 4.14 | security | OWASP Dependency-Track is an intelligent component analysis platform for identifying and reducing risk in the software supply chain. |
ethereum | 1.17 | infrastructure | Full Ethereum node (Geth + Lighthouse) providing JSON-RPC endpoint |
fleet | 4 | security | Open-source device management platform with MDM and osquery |
frappe | 15.0 | platform | Frappe framework with ERPNext - full-featured business application platform |
fusionpbx | 5.2 | communication | FusionPBX unified communications platform with FreeSWITCH telephony engine |
gitlab | 17.7 | devops | GitLab - complete DevSecOps platform |
greenbone | 24.10 | security | Greenbone OpenVAS is a full-featured vulnerability scanner and management solution. |
highlight | 0.5.6 | monitoring | Highlight - open-source application monitoring and error tracking |
hockeypuck | 2.3.2 | security | OpenPGP public keyserver with HKP protocol support |
hyperswitch | 1.122 | finance | Open-source payment orchestration platform with 300+ PSP integrations |
immich | 2.7 | media | Immich - self-hosted photo and video management |
keycloak | 24.0 | auth | Keycloak is an open source identity and access management solution. |
keygen | 1.4 | licensing | Keygen CE - self-hosted software licensing and distribution API |
kubo | 0.40 | infrastructure | Reference IPFS implementation for decentralized content-addressed storage |
librechat | 0.7 | ai | LibreChat - self-hosted AI chat platform supporting multiple providers |
mail | 1.0 | Headless mail integration for external email providers (AWS SES, Mailgun, SendGrid, Gmail, etc.) | |
mailcow | 2026.03 | Mailcow - dockerized email server suite with webmail, antispam, and antivirus | |
mariadb | 11.7 | database | MariaDB relational database server |
matomo | 5 | analytics | Matomo open-source web analytics platform |
matrix | 1.136 | communication | Matrix Synapse homeserver with Element web client, MAS authentication, and Jitsi video conferencing |
mautic | 5 | marketing | Open-source marketing automation platform for email campaigns, lead management, and multi-channel marketing |
metabase | 0.59 | analytics | Metabase - open-source business intelligence and data visualization |
minio | 2025.4.3 | storage | MinIO high-performance S3-compatible object storage |
mongodb | 8.0 | database | Percona Server for MongoDB - enhanced document database |
monica | 4 | crm | Open-source personal CRM for managing contacts, relationships, and life events |
mysql | 8.4 | database | Percona Server for MySQL - enhanced MySQL database server |
netbird | 0.35 | networking | NetBird - VPN mesh networking with WireGuard |
nextcloud | 30 | collaboration | Nextcloud - self-hosted productivity and collaboration platform |
nginx | 1.27 | web | High-performance web server for static site hosting |
openobserve | 0.70.3 | observability | Cloud native observability platform for logs, metrics, traces |
paperless | 2.20 | documents | Paperless-ngx - document management system with OCR |
peertube | 8.1 | media | PeerTube - federated video hosting platform |
penpot | 2.14 | design | Open-source design platform for design and prototyping |
plane | 1.2 | project-management | Plane - open source project management platform (Linear/Jira alternative) |
pmm | 2 | monitoring | Percona Monitoring and Management - database observability platform |
postgres | 16 | database | Percona Distribution for PostgreSQL with Patroni support |
postiz | 2.21 | marketing | Open-source social media scheduling and management tool |
pulp | 3.85 | devops | Platform for managing repositories of software packages |
s3 | 1.0 | storage | Headless S3-compatible storage integration for external providers (AWS S3, Cloudflare R2, Backblaze B2, etc.) |
sonarqube | 10.7 | devops | SonarQube is a code quality and security analysis platform for continuous inspection of code. |
supabase | 2.0 | platform | Supabase - open source Firebase alternative with auth, realtime, storage, and REST APIs |
test-data | 1.0.0 | testing | Test app with data volumes for backup/restore testing |
test-health | 1.0.0 | testing | Test app with controllable health check - touch /healthy to make healthy |
test-multi | 1.0.0 | testing | Test multi-service app - web + worker + redis |
test-simple | 1.0.0 | testing | Simple test app for E2E testing - minimal alpine container |
traefik | 3.6.6 | infrastructure | Cloud native reverse proxy and load balancer for Mesh Architecture V2 |
uptime-kuma | 2 | monitoring | Uptime Kuma - self-hosted uptime monitoring tool |
wazuh | 4.14 | security | Wazuh is a free and open source SIEM/XDR platform for threat detection, integrity monitoring, incident response, and compliance. |
whoami | 1.11 | testing | Simple HTTP request inspection app for testing |
windmill | 1.676 | automation | Windmill - workflow automation and internal tool builder |
wordpress | 6.9 | cms | WordPress content management system with multisite support |
| App | Version | Description | Files |
|---|---|---|---|
librechat | 0.7 | LibreChat - self-hosted AI chat platform supporting multiple providers | compose, backup, tests |
analytics
Section titled “analytics”| App | Version | Description | Files |
|---|---|---|---|
matomo | 5 | Matomo open-source web analytics platform | compose, backup, tests |
metabase | 0.59 | Metabase - open-source business intelligence and data visualization | compose, backup, tests |
| App | Version | Description | Files |
|---|---|---|---|
keycloak | 24.0 | Keycloak is an open source identity and access management solution. | compose, backup, tests |
automation
Section titled “automation”| App | Version | Description | Files |
|---|---|---|---|
windmill | 1.676 | Windmill - workflow automation and internal tool builder | compose, backup, tests |
| App | Version | Description | Files |
|---|---|---|---|
wordpress | 6.9 | WordPress content management system with multisite support | compose, backup, tests |
collaboration
Section titled “collaboration”| App | Version | Description | Files |
|---|---|---|---|
nextcloud | 30 | Nextcloud - self-hosted productivity and collaboration platform | compose, backup, tests |
communication
Section titled “communication”| App | Version | Description | Files |
|---|---|---|---|
fusionpbx | 5.2 | FusionPBX unified communications platform with FreeSWITCH telephony engine | compose, backup, tests |
matrix | 1.136 | Matrix Synapse homeserver with Element web client, MAS authentication, and Jitsi video conferencing | compose, backup, tests |
| App | Version | Description | Files |
|---|---|---|---|
monica | 4 | Open-source personal CRM for managing contacts, relationships, and life events | compose, backup, tests |
database
Section titled “database”| App | Version | Description | Files |
|---|---|---|---|
clickhouse | 24.3 | ClickHouse - fast open-source column-oriented DBMS for analytics | compose, backup, tests |
mariadb | 11.7 | MariaDB relational database server | compose, backup, tests |
mongodb | 8.0 | Percona Server for MongoDB - enhanced document database | compose, backup, tests |
mysql | 8.4 | Percona Server for MySQL - enhanced MySQL database server | compose, backup, tests |
postgres | 16 | Percona Distribution for PostgreSQL with Patroni support | compose, backup, tests |
design
Section titled “design”| App | Version | Description | Files |
|---|---|---|---|
penpot | 2.14 | Open-source design platform for design and prototyping | compose, backup, tests |
devops
Section titled “devops”| App | Version | Description | Files |
|---|---|---|---|
gitlab | 17.7 | GitLab - complete DevSecOps platform | compose, backup, tests |
pulp | 3.85 | Platform for managing repositories of software packages | compose, backup, tests |
sonarqube | 10.7 | SonarQube is a code quality and security analysis platform for continuous inspection of code. | compose, backup, tests |
documents
Section titled “documents”| App | Version | Description | Files |
|---|---|---|---|
paperless | 2.20 | Paperless-ngx - document management system with OCR | compose, backup, tests |
| App | Version | Description | Files |
|---|---|---|---|
mail | 1.0 | Headless mail integration for external email providers (AWS SES, Mailgun, SendGrid, Gmail, etc.) | compose, tests |
mailcow | 2026.03 | Mailcow - dockerized email server suite with webmail, antispam, and antivirus | compose, backup, tests |
finance
Section titled “finance”| App | Version | Description | Files |
|---|---|---|---|
hyperswitch | 1.122 | Open-source payment orchestration platform with 300+ PSP integrations | compose, backup, tests |
infrastructure
Section titled “infrastructure”| App | Version | Description | Files |
|---|---|---|---|
blockscout | 10.2 | Open-source block explorer for EVM-compatible blockchains (self-hosted Etherscan) | compose, backup, tests |
ethereum | 1.17 | Full Ethereum node (Geth + Lighthouse) providing JSON-RPC endpoint | compose, backup, tests |
kubo | 0.40 | Reference IPFS implementation for decentralized content-addressed storage | compose, backup, tests |
traefik | 3.6.6 | Cloud native reverse proxy and load balancer for Mesh Architecture V2 | compose, stack, backup, tests |
knowledge-base
Section titled “knowledge-base”| App | Version | Description | Files |
|---|---|---|---|
affine | 0.26 | AFFiNE - open source knowledge base and wiki (Notion alternative) | compose, backup, tests |
licensing
Section titled “licensing”| App | Version | Description | Files |
|---|---|---|---|
keygen | 1.4 | Keygen CE - self-hosted software licensing and distribution API | compose, backup, tests |
marketing
Section titled “marketing”| App | Version | Description | Files |
|---|---|---|---|
mautic | 5 | Open-source marketing automation platform for email campaigns, lead management, and multi-channel marketing | compose, backup, tests |
postiz | 2.21 | Open-source social media scheduling and management tool | compose, backup, tests |
| App | Version | Description | Files |
|---|---|---|---|
immich | 2.7 | Immich - self-hosted photo and video management | compose, backup, tests |
peertube | 8.1 | PeerTube - federated video hosting platform | compose, backup, tests |
monitoring
Section titled “monitoring”| App | Version | Description | Files |
|---|---|---|---|
highlight | 0.5.6 | Highlight - open-source application monitoring and error tracking | compose, backup, tests |
pmm | 2 | Percona Monitoring and Management - database observability platform | compose, tests |
uptime-kuma | 2 | Uptime Kuma - self-hosted uptime monitoring tool | compose, backup, tests |
networking
Section titled “networking”| App | Version | Description | Files |
|---|---|---|---|
netbird | 0.35 | NetBird - VPN mesh networking with WireGuard | compose, backup, tests |
observability
Section titled “observability”| App | Version | Description | Files |
|---|---|---|---|
openobserve | 0.70.3 | Cloud native observability platform for logs, metrics, traces | compose, backup, tests |
platform
Section titled “platform”| App | Version | Description | Files |
|---|---|---|---|
frappe | 15.0 | Frappe framework with ERPNext - full-featured business application platform | compose, backup, tests |
supabase | 2.0 | Supabase - open source Firebase alternative with auth, realtime, storage, and REST APIs | compose, backup, tests |
project-management
Section titled “project-management”| App | Version | Description | Files |
|---|---|---|---|
plane | 1.2 | Plane - open source project management platform (Linear/Jira alternative) | compose, backup, tests |
security
Section titled “security”| App | Version | Description | Files |
|---|---|---|---|
ciso-assistant | 1 | CISO Assistant - open-source GRC platform for cybersecurity compliance and risk management | compose, backup, tests |
crowdsec | 1.7 | CrowdSec is a collaborative, open source intrusion detection and prevention system. | compose, backup, tests |
defectdojo | 2.38 | DefectDojo is a vulnerability management and security orchestration platform for tracking findings across tools. | compose, backup, tests |
dependency-track | 4.14 | OWASP Dependency-Track is an intelligent component analysis platform for identifying and reducing risk in the software supply chain. | compose, backup, tests |
fleet | 4 | Open-source device management platform with MDM and osquery | compose, backup, tests |
greenbone | 24.10 | Greenbone OpenVAS is a full-featured vulnerability scanner and management solution. | compose, backup, tests |
hockeypuck | 2.3.2 | OpenPGP public keyserver with HKP protocol support | compose, backup, tests |
wazuh | 4.14 | Wazuh is a free and open source SIEM/XDR platform for threat detection, integrity monitoring, incident response, and compliance. | compose, backup, tests |
storage
Section titled “storage”| App | Version | Description | Files |
|---|---|---|---|
minio | 2025.4.3 | MinIO high-performance S3-compatible object storage | compose, backup, tests |
s3 | 1.0 | Headless S3-compatible storage integration for external providers (AWS S3, Cloudflare R2, Backblaze B2, etc.) | compose, tests |
testing
Section titled “testing”| App | Version | Description | Files |
|---|---|---|---|
test-data | 1.0.0 | Test app with data volumes for backup/restore testing | compose, backup |
test-health | 1.0.0 | Test app with controllable health check - touch /healthy to make healthy | compose |
test-multi | 1.0.0 | Test multi-service app - web + worker + redis | compose |
test-simple | 1.0.0 | Simple test app for E2E testing - minimal alpine container | compose |
whoami | 1.11 | Simple HTTP request inspection app for testing | compose, tests |
| App | Version | Description | Files |
|---|---|---|---|
nginx | 1.27 | High-performance web server for static site hosting | compose, backup, tests |
Structure of an app directory
Section titled “Structure of an app directory”Every app directory contains at least one of:
app.yaml— declarative metadata:name,version,description,category, and thevarsschema (type annotations using@string,@port,@secret, etc.).compose.yaml— Docker Compose template (Jinja2-rendered withvars).backup.yaml— declarative backup rules (paths, databases, retention) consumed byshc backup create.vars.yaml— default variable values.tests/— black-box test suite for the app.*.vapp.yaml/*.vsocket.yaml/*.vplug.yaml/*.vvars.yaml— Virtual-App plugins that extend the stack (e.g. thepluginVApp for WordPress plugins).
See architecture/modules/app.md for the data model.
shc@docs:~$