"
+# Optional: Stripe (leave empty if not using)
+STRIPE_SK = ""
+STRIPE_WEBHOOK_SECRET = ""
+STRIPE_PRICE_ONBOARDING = ""
+STRIPE_PRICE_EMAIL_USAGE = ""
+STRIPE_METER_EVENT_NAME = "emails"
-DISABLE_SIGNUPS = "False"
\ No newline at end of file
+# Internal
+PLUNK_API_KEY = ""
+PLUNK_FROM_ADDRESS = ""
+SMTP_DOMAIN = ""
\ No newline at end of file
diff --git a/blueprints/tuwunel/docker-compose.yml b/blueprints/tuwunel/docker-compose.yml
new file mode 100644
index 000000000..039ba0929
--- /dev/null
+++ b/blueprints/tuwunel/docker-compose.yml
@@ -0,0 +1,18 @@
+version: "3.8"
+services:
+ tuwunel:
+ image: ghcr.io/matrix-construct/tuwunel:v1.5.0
+ restart: always
+ environment:
+ - TUWUNEL_SERVER_NAME=${TUWUNEL_SERVER_NAME:-matrix.local}
+ - TUWUNEL_ALLOW_REGISTRATION=${TUWUNEL_ALLOW_REGISTRATION:-false}
+ - TUWUNEL_REGISTRATION_TOKEN=${TUWUNEL_REGISTRATION_TOKEN}
+ - TUWUNEL_ADDRESS=${TUWUNEL_ADDRESS:-0.0.0.0}
+ - TUWUNEL_PORT=${TUWUNEL_PORT:-6167}
+ volumes:
+ - tuwunel-data:/var/lib/tuwunel/
+ expose:
+ - 6167
+
+volumes:
+ tuwunel-data:
diff --git a/blueprints/tuwunel/template.toml b/blueprints/tuwunel/template.toml
new file mode 100644
index 000000000..80dae5d5a
--- /dev/null
+++ b/blueprints/tuwunel/template.toml
@@ -0,0 +1,15 @@
+[variables]
+main_domain = "${domain}"
+registration_token = "${password:32}"
+
+[config]
+env = [
+ "TUWUNEL_SERVER_NAME=${main_domain}",
+ "TUWUNEL_REGISTRATION_TOKEN=${registration_token}"
+]
+mounts = []
+
+[[config.domains]]
+serviceName = "tuwunel"
+port = 6167
+host = "${main_domain}"
diff --git a/blueprints/tuwunel/tuwunel.svg b/blueprints/tuwunel/tuwunel.svg
new file mode 100644
index 000000000..79ec68b47
--- /dev/null
+++ b/blueprints/tuwunel/tuwunel.svg
@@ -0,0 +1,4 @@
+
diff --git a/blueprints/unleash/docker-compose.yml b/blueprints/unleash/docker-compose.yml
new file mode 100644
index 000000000..dc34db8d0
--- /dev/null
+++ b/blueprints/unleash/docker-compose.yml
@@ -0,0 +1,49 @@
+# The default users credentials are:
+# Login: admin
+# Password: unleash4all
+# It is highly recommended to change the password after first login.
+# More info: https://github.com/Unleash/unleash?tab=readme-ov-file#unleash-open-source
+version: "3.8"
+
+services:
+ unleash:
+ image: unleashorg/unleash-server:7.4.0
+ restart: unless-stopped
+ environment:
+ DATABASE_URL: "postgres://${DB_USER}:${DB_PASSWORD}@db/${DB_NAME}"
+ DATABASE_SSL: "false"
+ LOG_LEVEL: "warn"
+ depends_on:
+ db:
+ condition: service_healthy
+ healthcheck:
+ test: wget --no-verbose --tries=1 --spider http://localhost:4242/health || exit 1
+ interval: 1s
+ timeout: 1m
+ retries: 5
+ start_period: 15s
+ db:
+ image: postgres:15
+ restart: unless-stopped
+ environment:
+ POSTGRES_DB: "${DB_NAME}"
+ POSTGRES_USER: "${DB_USER}"
+ POSTGRES_PASSWORD: "${DB_PASSWORD}"
+ volumes:
+ - db_data:/var/lib/postgresql/data
+ healthcheck:
+ test:
+ [
+ "CMD",
+ "pg_isready",
+ "--username=${DB_USER}",
+ "--host=127.0.0.1",
+ "--port=5432",
+ ]
+ interval: 2s
+ timeout: 1m
+ retries: 5
+ start_period: 10s
+
+volumes:
+ db_data:
diff --git a/blueprints/unleash/template.toml b/blueprints/unleash/template.toml
new file mode 100644
index 000000000..f57ef9757
--- /dev/null
+++ b/blueprints/unleash/template.toml
@@ -0,0 +1,17 @@
+[variables]
+main_domain = "${domain}"
+db_name = "unleash"
+db_user = "unleash"
+db_password = "${password:32}"
+
+[config]
+env = [
+ "DB_NAME=${db_name}",
+ "DB_USER=${db_user}",
+ "DB_PASSWORD=${db_password}"
+]
+
+[[config.domains]]
+serviceName = "unleash"
+port = 4242
+host = "${main_domain}"
\ No newline at end of file
diff --git a/blueprints/unleash/unleash.png b/blueprints/unleash/unleash.png
new file mode 100644
index 000000000..9b6b5b8dc
Binary files /dev/null and b/blueprints/unleash/unleash.png differ
diff --git a/blueprints/verdaccio/docker-compose.yml b/blueprints/verdaccio/docker-compose.yml
new file mode 100644
index 000000000..091f3d156
--- /dev/null
+++ b/blueprints/verdaccio/docker-compose.yml
@@ -0,0 +1,17 @@
+version: "3.8"
+
+services:
+ verdaccio:
+ image: verdaccio/verdaccio:6
+ environment:
+ - VERDACCIO_PORT=4873
+ ports:
+ - 4873
+ volumes:
+ - verdaccio_storage:/verdaccio/storage
+ - verdaccio_plugins:/verdaccio/plugins
+ - ../files/conf:/verdaccio/conf
+
+volumes:
+ verdaccio_storage:
+ verdaccio_plugins:
\ No newline at end of file
diff --git a/blueprints/verdaccio/template.toml b/blueprints/verdaccio/template.toml
new file mode 100644
index 000000000..996bbd547
--- /dev/null
+++ b/blueprints/verdaccio/template.toml
@@ -0,0 +1,259 @@
+[variables]
+main_domain = "${domain}"
+
+[config]
+[[config.domains]]
+serviceName = "verdaccio"
+port = 4873
+host = "${main_domain}"
+
+[[config.mounts]]
+filePath = "/conf/config.yaml"
+content = """
+#
+# This is the default configuration file. It allows all users to do anything,
+# please read carefully the documentation and best practices to
+# improve security.
+#
+# Look here for more config file examples:
+# https://github.com/verdaccio/verdaccio/blob/master/docker-examples/README.md
+#
+# Read about the best practices
+# https://verdaccio.org/docs/best
+
+# Path to a directory with all packages
+storage: /verdaccio/storage/data
+
+# Path to a directory with plugins to include, the plugins folder has the higher priority for loading plugins
+# Disable this folder to avoid warnings if is not used
+plugins: /verdaccio/plugins
+
+# Web UI settings
+# https://verdaccio.org/docs/webui
+web:
+ title: Verdaccio
+ # Disable complete web UI
+ # enabled: false
+ # Custom colors for header background and font
+ # primaryColor: "#4b5e40"
+ # Custom logos and favicon
+ # logo: ./path/to/logo.png
+ # logoDark: ./path/to/logoDark.png
+ # favicon: ./path/to/favicon.ico
+ # Disable gravatar support
+ # gravatar: false
+ # By default, packages are ordered ascending
+ # sort_packages: asc | desc
+ # Convert your UI to the dark side
+ # darkMode: true
+ # html_cache: true
+ # By default, all features are displayed
+ # login: true
+ # showInfo: true
+ # showSettings: true
+ # In combination with darkMode you can force specific theme
+ # showThemeSwitch: true
+ # showFooter: true
+ # showSearch: true
+ # showRaw: true
+ # showDownloadTarball: true
+ # showUplinks: true
+ #
+ # HTML tags injected before ends
+ # metaScripts:
+ # - ''
+ # - ''
+ # - ''
+ #
+ # HTML tags injected as first child in
+ # scriptsBodyBefore:
+ # - 'html before webpack scripts
'
+ #
+ # HTML tags injected as last child in
+ # scriptsBodyAfter:
+ # - ''
+ #
+ # Public path for template manifest scripts (only manifest)
+ # publicPath: http://somedomain.org/
+
+# Settings for authentication plugin
+# https://verdaccio.org/docs/configuration#authentication
+auth:
+ htpasswd:
+ file: /verdaccio/storage/htpasswd
+ # Maximum amount of users allowed to register, defaults to "+inf".
+ # You can set this to -1 to disable registration.
+ max_users: 1
+
+# A list of other known repositories we can talk to
+# https://verdaccio.org/docs/configuration#uplinks
+uplinks:
+ npmjs:
+ url: https://registry.npmjs.org/
+
+# Learn how to protect your packages
+# https://verdaccio.org/docs/protect-your-dependencies/
+# https://verdaccio.org/docs/configuration#packages
+packages:
+ '@*/*':
+ # scoped packages
+ access: $all
+ publish: $authenticated
+ unpublish: $authenticated
+ proxy: npmjs
+
+ '**':
+ # allow all users (including non-authenticated users) to read and
+ # publish all packages
+ #
+ # you can specify usernames/groupnames (depending on your auth plugin)
+ # and three keywords: "$all", "$anonymous", "$authenticated"
+ access: $all
+
+ # allow all known users to publish/unpublish packages
+ # (anyone can register by default, remember?)
+ publish: $authenticated
+ unpublish: $authenticated
+
+ # if package is not available locally, proxy requests to 'npmjs' registry
+ proxy: npmjs
+
+# To improve your security configuration and avoid dependency confusion
+# consider removing the proxy property for private packages
+# https://verdaccio.org/docs/best#remove-proxy-to-increase-security-at-private-packages
+
+# https://verdaccio.org/docs/configuration#server
+# You can specify HTTP/1.1 server keep alive timeout in seconds for incoming connections.
+# A value of 0 makes the http server behave similarly to Node.js versions prior to 8.0.0, which did not have a keep-alive timeout.
+# WORKAROUND: Through given configuration you can workaround following issue https://github.com/verdaccio/verdaccio/issues/301. Set to 0 in case 60 is not enough.
+server:
+ keepAliveTimeout: 60
+ # The pluginPrefix replaces the default plugins prefix which is `verdaccio`. Please don't include `-`. If `something` is provided
+ # the resolved package will be `something-xxxx`.
+ # pluginPrefix: something
+ # A regex for the password validation /.{3}$/ (3 characters min)
+ # An example to limit to 10 characters minimum
+ # passwordValidationRegex: /.{10}$/
+ # Allow `req.ip` to resolve properly when Verdaccio is behind a proxy or load-balancer
+ # https://expressjs.com/en/guide/behind-proxies.html
+ # trustProxy: '127.0.0.1'
+
+# https://verdaccio.org/docs/configuration#offline-publish
+# publish:
+# allow_offline: false
+# check_owners: false
+# keep_readmes: 'latest' | 'tagged' | 'all'
+
+# Define public URL of registry in combination with VERDACCIO_PUBLIC_URL environment variable
+# https://verdaccio.org/docs/configuration#url-prefix
+# url_prefix: /verdaccio/
+#
+# Examples:
+# VERDACCIO_PUBLIC_URL='https://somedomain.org'
+# url_prefix: '/my_prefix'
+# // url -> https://somedomain.org/my_prefix/
+#
+# VERDACCIO_PUBLIC_URL='https://somedomain.org'
+# url_prefix: '/'
+# // url -> https://somedomain.org/
+#
+# VERDACCIO_PUBLIC_URL='https://somedomain.org/first_prefix'
+# url_prefix: '/second_prefix'
+# // url -> https://somedomain.org/second_prefix/
+
+# Security settings
+# https://verdaccio.org/docs/configuration#security
+# security:
+# api:
+# legacy: true
+# jwt:
+# sign:
+# expiresIn: 29d
+# verify:
+# someProp: [value]
+# web:
+# sign:
+# expiresIn: 1h # 1 hour by default
+# verify:
+# someProp: [value]
+
+# https://verdaccio.org/docs/configuration#user-rate-limit
+# userRateLimit:
+# windowMs: 50000
+# max: 1000
+
+# https://verdaccio.org/docs/configuration#max-body-size
+# max_body_size: 10mb
+
+# https://verdaccio.org/docs/configuration#listen-port
+# listen:
+# - localhost:4873 # default value
+# - http://localhost:4873 # same thing
+# - 0.0.0.0:4873 # listen on all addresses (INADDR_ANY)
+# - https://example.org:4873 # if you want to use https
+# - "[::1]:4873" # ipv6
+# - unix:/tmp/verdaccio.sock # unix socket
+
+# The HTTPS configuration is useful if you do not consider use a HTTP Proxy
+# https://verdaccio.org/docs/configuration#https
+# https:
+# key: ./path/verdaccio-key.pem
+# cert: ./path/verdaccio-cert.pem
+# ca: ./path/verdaccio-csr.pem
+
+# https://verdaccio.org/docs/configuration#proxy
+# http_proxy: http://something.local/
+# https_proxy: https://something.local/
+# no_proxy: localhost,127.0.0.1,server.local
+
+# https://verdaccio.org/docs/configuration#notifications
+# notify:
+# method: 'POST'
+# headers: '[{ "Content-Type": "application/json" }]'
+# endpoint: 'https://usagge.hipchat.com/v2/room/3729485/notification?auth_token=mySecretToken'
+# content: '{"color":"green","message":"New package published: * {{ name }}*","notify":true,"message_format":"text"}'
+
+# Settings for middleware plugins
+# https://verdaccio.org/docs/plugins#middleware-configuration
+middlewares:
+ audit:
+ enabled: true
+ # timeout: 10000
+
+# Log settings
+# https://verdaccio.org/docs/logger
+# Redaction: https://getpino.io/#/docs/redaction
+# Synchronous logging: https://getpino.io/#/docs/asynchronous
+log:
+ type: stdout
+ format: pretty
+ level: http
+# redact:
+# paths: ['req.header.authorization','req.header.cookie','req.remoteAddress','req.remotePort','ip','remoteIP','user','msg']
+# censor: ''
+# sync: true
+
+# Feature flags (experimental settings that can be changed or removed in the future)
+# https://verdaccio.org/docs/configuration#experiments
+# experiments:
+# # Support for npm token command
+# token: false
+# # Enable tarball URL redirect for hosting tarball with a different server.
+# # The tarball_url_redirect can be a template string
+# tarball_url_redirect: 'https://mycdn.com/verdaccio/${packageName}/${filename}'
+# # The tarball_url_redirect can be a function, takes packageName and filename and returns the url,
+# # when working with a js configuration file
+# tarball_url_redirect(packageName, filename) {
+# const signedUrl = // generate a signed url
+# return signedUrl;
+# }
+# Renamed from "experiments" to "flags" in next major release
+# flags:
+# changePassword: true
+# searchRemote: true
+
+# Translate your registry, API and web UI
+# List of the available translations https://github.com/verdaccio/verdaccio/blob/master/packages/plugins/ui-theme/src/i18n/ABOUT_TRANSLATIONS.md
+i18n:
+ web: en-US
+"""
\ No newline at end of file
diff --git a/blueprints/verdaccio/verdaccio.svg b/blueprints/verdaccio/verdaccio.svg
new file mode 100644
index 000000000..a9e07b295
--- /dev/null
+++ b/blueprints/verdaccio/verdaccio.svg
@@ -0,0 +1,38 @@
+
diff --git a/meta.json b/meta.json
index 42cdf342c..c4632a56a 100644
--- a/meta.json
+++ b/meta.json
@@ -1680,12 +1680,28 @@
"self-hosted"
]
},
+ {
+ "id": "cut",
+ "name": "Cut",
+ "version": "0.1.0",
+ "description": "A tiny, self-hosted URL shortener — short links that are entirely yours, with per-link passwords, expiries, and click limits.",
+ "logo": "cut.svg",
+ "links": {
+ "github": "https://github.com/MendyLanda/cut",
+ "website": "https://github.com/MendyLanda/cut",
+ "docs": "https://github.com/MendyLanda/cut#readme"
+ },
+ "tags": [
+ "url-shortener",
+ "links"
+ ]
+ },
{
"id": "cyberchef",
"name": "CyberChef",
"version": "latest",
"description": "CyberChef is a web application for encryption, encoding, compression, and data analysis, developed by GCHQ.",
- "logo": "cyberchef.svg",
+ "logo": "cyberchef.png",
"links": {
"github": "https://github.com/gchq/CyberChef",
"website": "https://gchq.github.io/CyberChef/",
@@ -2543,6 +2559,26 @@
"performace"
]
},
+ {
+ "id": "frappe-lending",
+ "name": "Frappe Lending",
+ "version": "latest",
+ "description": "A comprehensive loan management system built on Frappe Framework. 100% open source and customizable for managing loans, repayments, and lending operations.",
+ "logo": "frappe-lending.png",
+ "links": {
+ "github": "https://github.com/frappe/lending",
+ "docs": "https://docs.frappe.io/lending",
+ "website": "https://frappe.io"
+ },
+ "tags": [
+ "lending",
+ "finance",
+ "loans",
+ "payments",
+ "accounting",
+ "self-hosted"
+ ]
+ },
{
"id": "freescout",
"name": "FreeScout",
@@ -2810,6 +2846,24 @@
"api"
]
},
+ {
+ "id": "go2rtc",
+ "name": "go2rtc",
+ "version": "latest",
+ "description": "Ultimate camera streaming application with support for dozens formats and protocols.",
+ "logo": "go2rtc.png",
+ "links": {
+ "github": "https://github.com/AlexxIT/go2rtc",
+ "website": "https://go2rtc.org/",
+ "docs": "https://go2rtc.org/"
+ },
+ "tags": [
+ "streaming",
+ "webrtc",
+ "video",
+ "home assistant"
+ ]
+ },
{
"id": "gotenberg",
"name": "Gotenberg",
@@ -2831,7 +2885,7 @@
{
"id": "grafana",
"name": "Grafana",
- "version": "9.5.20",
+ "version": "12.4",
"description": "Grafana is an open source platform for data visualization and monitoring.",
"logo": "grafana.svg",
"links": {
@@ -3099,6 +3153,25 @@
"group-finances"
]
},
+ {
+ "id": "imgproxy",
+ "name": "imgproxy",
+ "version": "v3.30.1",
+ "description": "imgproxy is a fast and secure image processing server, fronted by nginx with built-in response caching for repeated transformations.",
+ "logo": "imgproxy.png",
+ "links": {
+ "github": "https://github.com/imgproxy/imgproxy",
+ "website": "https://imgproxy.net/",
+ "docs": "https://docs.imgproxy.net/"
+ },
+ "tags": [
+ "images",
+ "media",
+ "proxy",
+ "cdn",
+ "caching"
+ ]
+ },
{
"id": "immich",
"name": "Immich",
@@ -3929,10 +4002,27 @@
"self-hosted"
]
},
+ {
+ "id": "mediafetch",
+ "name": "MediaFetch",
+ "version": "1.1.1",
+ "description": "A tiny, self-hosted web wrapper for yt-dlp to download video and audio. Optional basic auth.",
+ "logo": "mediafetch.svg",
+ "links": {
+ "github": "https://github.com/lukedunsmoto/mediafetch",
+ "website": "https://www.lukedunsmore.com/mediafetch",
+ "docs": "https://docs.lukedunsmore.com/docs/self-hosted/mediafetch/"
+ },
+ "tags": [
+ "utilities",
+ "media",
+ "downloader"
+ ]
+ },
{
"id": "meilisearch",
"name": "Meilisearch",
- "version": "v1.8.3",
+ "version": "v1.35.1",
"description": "Meilisearch is a free and open-source search engine that allows you to easily add search functionality to your web applications.",
"logo": "meilisearch.png",
"links": {
@@ -4294,10 +4384,10 @@
},
{
"id": "nextcloud-aio",
- "name": "Nextcloud All in One",
- "version": "30.0.2",
- "description": "Nextcloud (AIO) is a self-hosted file storage and sync platform with powerful collaboration capabilities. It integrates Files, Talk, Groupware, Office, Assistant and more into a single platform for remote work and data protection.",
- "logo": "nextcloud-aio.svg",
+ "name": "Nextcloud",
+ "version": "stable",
+ "description": "Nextcloud is a self-hosted file storage and sync platform with powerful collaboration capabilities. It integrates Files, Talk, Groupware, Office, Assistant and more into a single platform for remote work and data protection.",
+ "logo": "nextcloud.png",
"links": {
"github": "https://github.com/nextcloud/docker",
"website": "https://nextcloud.com/",
@@ -5879,6 +5969,24 @@
"open-source"
]
},
+ {
+ "id": "strapi",
+ "name": "Strapi",
+ "version": "v5.33.0",
+ "description": "Open-source headless CMS to build powerful APIs with built-in content management.",
+ "logo": "strapi.svg",
+ "links": {
+ "github": "https://github.com/strapi/strapi",
+ "discord": "https://discord.com/invite/strapi",
+ "docs": "https://docs.strapi.io",
+ "website": "https://strapi.io"
+ },
+ "tags": [
+ "headless",
+ "cms",
+ "content-management"
+ ]
+ },
{
"id": "streamflow",
"name": "StreamFlow",
@@ -5898,24 +6006,6 @@
"media"
]
},
- {
- "id": "strapi",
- "name": "Strapi",
- "version": "v5.33.0",
- "description": "Open-source headless CMS to build powerful APIs with built-in content management.",
- "logo": "strapi.svg",
- "links": {
- "github": "https://github.com/strapi/strapi",
- "discord": "https://discord.com/invite/strapi",
- "docs": "https://docs.strapi.io",
- "website": "https://strapi.io"
- },
- "tags": [
- "headless",
- "cms",
- "content-management"
- ]
- },
{
"id": "supabase",
"name": "SupaBase",
@@ -6173,6 +6263,24 @@
"e-ink"
]
},
+ {
+ "id": "tuwunel",
+ "name": "Tuwunel",
+ "version": "v1.5.0",
+ "description": "High performance Matrix homeserver written in Rust. Official successor to conduwuit - a scalable, low-cost, enterprise-ready alternative to Synapse.",
+ "logo": "tuwunel.svg",
+ "links": {
+ "github": "https://github.com/matrix-construct/tuwunel",
+ "website": "https://tuwunel.chat",
+ "docs": "https://matrix-construct.github.io/tuwunel/"
+ },
+ "tags": [
+ "matrix",
+ "chat",
+ "messaging",
+ "rust"
+ ]
+ },
{
"id": "twenty",
"name": "Twenty CRM",
@@ -6270,6 +6378,24 @@
"networking"
]
},
+ {
+ "id": "unleash",
+ "name": "Unleash",
+ "version": "7.4.0",
+ "description": "Open-source feature management platform",
+ "logo": "unleash.png",
+ "links": {
+ "github": "https://github.com/unleash/unleash",
+ "website": "https://www.getunleash.io/",
+ "docs": "https://docs.getunleash.io/"
+ },
+ "tags": [
+ "feature-flag",
+ "feature-management",
+ "feature-toggle",
+ "remote-configuration"
+ ]
+ },
{
"id": "upsnap",
"name": "Upsnap",
@@ -6372,6 +6498,23 @@
"open-source"
]
},
+ {
+ "id": "verdaccio",
+ "name": "Verdaccio",
+ "version": "6",
+ "description": "A lightweight Node.js private proxy registry",
+ "logo": "verdaccio.svg",
+ "links": {
+ "github": "https://github.com/verdaccio/verdaccio",
+ "website": "https://www.verdaccio.org/",
+ "docs": "https://www.verdaccio.org/docs/what-is-verdaccio"
+ },
+ "tags": [
+ "node.js",
+ "package-repository",
+ "npm"
+ ]
+ },
{
"id": "vikunja",
"name": "Vikunja",