Dropshell Templates

Templates for Dropshell. For template authoring docs, see TEMPLATES.md.

---

Infrastructure & Networking

Template	Description	Ports
caddy	Reverse proxy with automatic HTTPS via Let's Encrypt	80, 443
cloudflare-config	Manage Cloudflare DNS records (A, CNAME, TXT) via API	None
openwrt-config	Manage OpenWRT port forwards and DHCP static leases via UCI	None
sshfs	Read-only SSH file server accessible over Tailscale	22 (Tailscale)
apt-cacher-ng	Caching proxy for APT package downloads	3142
watchtower	Automatically updates running Docker containers to latest images	None
ds-failover	DNS failover via Cloudflare, health-checks hosts and updates A records	None
ds-backup-server	Centralised restic backup server with web dashboard — stores encrypted deduplicated snapshots for all dropshell services	8000, 8088
lxc-provision	Provisions and manages LXC containers on Proxmox with Tailscale integration	None
turn-server	WebRTC TURN/STUN relay server (coturn) with automatic TLS via Let's Encrypt	3478, 5349, 49152-49252

Git & CI/CD

Template	Description	Ports
forgejo-server	Forgejo git server with federation support and built-in CI/CD	3000, 2222
gitea-server	Lightweight self-hosted Gitea git service	3000, 2222
forge-runner-native	Native Forgejo Actions CI/CD runner (systemd-managed)	None
gitea-runner-docker	Gitea Actions CI/CD runner in Docker containers	None
docker-registry	Private Docker image registry with htpasswd auth	5000

Logging & Monitoring

Template	Description	Ports
logserver	Loki + Grafana centralized logging with web UI	3001, 3100
logclient	Promtail log shipper for Docker and system logs to Loki	None
graylog	Enterprise log collection/analysis with OpenSearch and MongoDB	9000, 12201, 514
graylog-client	Fluent Bit log shipper forwarding to Graylog	None
scrutiny	Hard drive S.M.A.R.T monitoring with failure prediction	8080

Storage & File Sharing

Template	Description	Ports
seafile	Cloud storage with file sync, sharing, and collaboration	8080
simple-object-server	Lightweight S3-compatible object storage server	Configurable
immich	Photo/video management with ML features and mobile apps	2283

Web Hosting

Template	Description	Ports
caddy-static	Static file server with Caddy and automatic HTTPS	8080
wikijs	Modern wiki with full-text search, markdown, and PostgreSQL	3080
shlink	URL shortener with tracking, analytics, and API	8080
sbsviewer	Stereoscopic (180°/SBS) 3D media gallery for AR glasses — depth-rendered UI, 2D/3D modes, 2D/3D download conversion, password-protected upload	8590

AI & Applications

Template	Description	Ports
nomad	Offline-first knowledge/education/AI server (Kiwix, Ollama)	8080
knowledgebase	Multi-user semantic knowledge base with connectors, sharing, and Authentik SSO	8560
model-cache	AI model caching proxy — caches HuggingFace/URL downloads with versioning, pin-by-date, resume, background updates	Configurable

Authentication

Template	Description	Ports
authentik	Modern identity provider with OIDC/OAuth2/SAML/LDAP, admin UI, and user management	9000, 9443

Utilities

Template	Description	Ports
nvidia-power-limit	GPU power throttling with boot persistence via systemd — prevents thermal throttling in multi-GPU setups	None
vlmcsd	KMS activation server for Windows/Office	1688
squashdisplay	Configures Linux/Raspberry Pi as fullscreen kiosk display	None
squashthumbnailmaker	Generates video thumbnails using YOLOv8 pose detection	None