Docker 自托管实用工具完全合集：用开源替代所有付费云服务（2026版）

# Ubuntu/Debian 一键安装
curl -fsSL https://get.docker.com | sudo sh
sudo usermod -aG docker $USER
# 安装 Docker Compose 插件
sudo apt install docker-compose-plugin -y
# 验证
docker compose version

docker network create homelab

# ~/homelab/npm/docker-compose.yml
services:
  nginx-proxy-manager:
    image: jc21/nginx-proxy-manager:latest
    restart: unless-stopped
    ports:
      - "80:80"       # HTTP
      - "443:443"     # HTTPS
      - "81:81"       # 管理后台
    volumes:
      - ./data:/data
      - ./letsencrypt:/etc/letsencrypt
    networks:
      - homelab

networks:
  homelab:
    external: true

# ~/homelab/adguard/docker-compose.yml
services:
  adguardhome:
    image: adguard/adguardhome:latest
    restart: unless-stopped
    ports:
      - "53:53/tcp"
      - "53:53/udp"
      - "3000:3000/tcp"     # 初始配置（一次性）
      - "8083:80/tcp"       # 管理后台
    volumes:
      - ./workdir:/opt/adguardhome/work
      - ./confdir:/opt/adguardhome/conf
    networks:
      - homelab

networks:
  homelab:
    external: true

# ~/homelab/nextcloud/docker-compose.yml
services:
  nextcloud-db:
    image: mariadb:11
    restart: unless-stopped
    environment:
      MYSQL_ROOT_PASSWORD: <强密码>
      MYSQL_DATABASE: nextcloud
      MYSQL_USER: nextcloud
      MYSQL_PASSWORD: <强密码>
    volumes:
      - ./db:/var/lib/mysql
    networks:
      - homelab

  nextcloud:
    image: nextcloud:30
    restart: unless-stopped
    ports:
      - "8080:80"
    environment:
      MYSQL_HOST: nextcloud-db
      MYSQL_DATABASE: nextcloud
      MYSQL_USER: nextcloud
      MYSQL_PASSWORD: <强密码>
    volumes:
      - ./data:/var/www/html
      - /mnt/storage/nextcloud:/data   # 数据存储目录
    depends_on:
      - nextcloud-db
    networks:
      - homelab

networks:
  homelab:
    external: true

# ~/homelab/immich/docker-compose.yml
# 注：完整配置建议从官网获取最新版本
# https://immich.app/docs/install/docker-compose
services:
  immich-server:
    image: ghcr.io/immich-app/immich-server:release
    restart: unless-stopped
    volumes:
      - ${UPLOAD_LOCATION}:/usr/src/app/upload
      - /etc/localtime:/etc/localtime:ro
    env_file:
      - .env
    ports:
      - "2283:2283"
    depends_on:
      - redis
      - database
    networks:
      - homelab

  immich-machine-learning:
    image: ghcr.io/immich-app/immich-machine-learning:release
    restart: unless-stopped
    volumes:
      - model-cache:/cache
    env_file:
      - .env
    networks:
      - homelab

  redis:
    image: redis:7
    restart: unless-stopped
    volumes:
      - ./redis:/data
    networks:
      - homelab

  database:
    image: tensorchord/pgvecto-rs:pg16-v0.4.0
    restart: unless-stopped
    env_file:
      - .env
    environment:
      POSTGRES_PASSWORD: <强密码>
      POSTGRES_USER: postgres
      POSTGRES_DB: immich
    volumes:
      - ./pgdata:/var/lib/postgresql/data
    networks:
      - homelab

volumes:
  model-cache:

networks:
  homelab:
    external: true

UPLOAD_LOCATION=/mnt/storage/immich
DB_PASSWORD=<强密码>
IMMICH_VERSION=release

# ~/homelab/syncthing/docker-compose.yml
services:
  syncthing:
    image: syncthing/syncthing:latest
    restart: unless-stopped
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Asia/Shanghai
    ports:
      - "8384:8384"         # Web UI
      - "22000:22000/tcp"   # TCP 文件传输
      - "22000:22000/udp"   # QUIC 文件传输
      - "21027:21027/udp"   # 本地发现
    volumes:
      - ./config:/var/syncthing/config
      - /mnt/storage/sync:/data
    networks:
      - homelab

networks:
  homelab:
    external: true

# ~/homelab/jellyfin/docker-compose.yml
services:
  jellyfin:
    image: jellyfin/jellyfin:latest
    restart: unless-stopped
    ports:
      - "8096:8096"
      - "8920:8920"           # HTTPS（可选）
    environment:
      - TZ=Asia/Shanghai
    volumes:
      - ./config:/config
      - ./cache:/cache
      - /mnt/media/movies:/media/movies:ro
      - /mnt/media/tv:/media/tv:ro
      - /mnt/media/music:/media/music:ro
    devices:
      - /dev/dri:/dev/dri     # Intel 核显硬件转码
    networks:
      - homelab

networks:
  homelab:
    external: true

# ~/homelab/navidrome/docker-compose.yml
services:
  navidrome:
    image: deluan/navidrome:latest
    restart: unless-stopped
    ports:
      - "4533:4533"
    environment:
      ND_SCANSCHEDULE: "1h"
      ND_LOGLEVEL: info
      ND_MUSICFOLDER: /music
      ND_ENABLETRANSCODINGCONFIG: "true"
      ND_TRANSCODINGCACHESIZE: "4000M"
    volumes:
      - ./data:/data
      - /mnt/media/music:/music:ro
    networks:
      - homelab

networks:
  homelab:
    external: true

# ~/homelab/vaultwarden/docker-compose.yml
services:
  vaultwarden:
    image: vaultwarden/server:latest
    restart: unless-stopped
    ports:
      - "8082:80"
    environment:
      - WEBSOCKET_ENABLED=true
      - SIGNUPS_ALLOWED=false        # 初始注册后立即关闭
      - LOGIN_RATELIMIT_SECONDS=10   # 登录频率限制
      - TZ=Asia/Shanghai
    volumes:
      - ./data:/data
    networks:
      - homelab

networks:
  homelab:
    external: true

# ~/homelab/stirling-pdf/docker-compose.yml
services:
  stirling-pdf:
    image: frooodle/s-pdf:latest
    restart: unless-stopped
    ports:
      - "8085:8080"
    environment:
      - DOCKER_ENABLE_SECURITY=false
      - LANGS=zh_CN                   # 中文界面
      - SYSTEM_DEFAULTLOCALE=zh-CN
    volumes:
      - ./trainingData:/usr/share/tessdata   # OCR 中文语言包
      - ./config:/configs
    networks:
      - homelab

networks:
  homelab:
    external: true

# ~/homelab/n8n/docker-compose.yml
services:
  n8n:
    image: n8nio/n8n:latest
    restart: unless-stopped
    ports:
      - "5678:5678"
    environment:
      - N8N_HOST=n8n.yourdomain.com
      - N8N_PORT=5678
      - N8N_PROTOCOL=https
      - NODE_ENV=production
      - WEBHOOK_URL=https://n8n.yourdomain.com
      - GENERIC_TIMEZONE=Asia/Shanghai
    volumes:
      - ./data:/home/node/.n8n
      - ./files:/files
    networks:
      - homelab

networks:
  homelab:
    external: true

# ~/homelab/uptime-kuma/docker-compose.yml
services:
  uptime-kuma:
    image: louislam/uptime-kuma:latest
    restart: unless-stopped
    ports:
      - "3001:3001"
    volumes:
      - ./data:/app/data
      - /var/run/docker.sock:/var/run/docker.sock
    networks:
      - homelab

networks:
  homelab:
    external: true

# ~/homelab/dockge/docker-compose.yml
services:
  dockge:
    image: louislam/dockge:latest
    restart: unless-stopped
    ports:
      - "5001:5001"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - ./data:/app/data
      - /home/$USER/homelab:/home/$USER/homelab  # 管理你的 compose 目录
    environment:
      - DOCKGE_STACKS_DIR=/home/$USER/homelab
    networks:
      - homelab

networks:
  homelab:
    external: true

# ~/homelab/portainer/docker-compose.yml
services:
  portainer:
    image: portainer/portainer-ce:latest
    restart: unless-stopped
    ports:
      - "9000:9000"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - ./data:/data
    networks:
      - homelab

networks:
  homelab:
    external: true

# ❌ 危险：直接暴露 8082 到所有网络接口
ports:
  - "8082:80"

# ✅ 安全：只暴露给 NPM（同一 Docker 网络）
# 不映射端口，只通过 NPM 反向代理访问
expose:
  - "80"

# 备份所有数据卷
tar -czf homelab-backup-$(date +%Y%m%d).tar.gz ~/homelab/

# 推荐：3-2-1 备份策略
# 3 份副本 + 2 种存储介质 + 1 份异地

# 定期执行
cd ~/homelab
for d in */; do
  cd "$d"
  docker compose pull
  docker compose up -d
  cd ..
done

services:
  nextcloud:
    # ...
    deploy:
      resources:
        limits:
          memory: 512M

#!/bin/bash
# ~/homelab/start-all.sh

SERVICES=(
  npm adguard nextcloud immich jellyfin
  vaultwarden uptime-kuma stirling-pdf
  syncthing dockge navidrome n8n
)

for svc in "${SERVICES[@]}"; do
  if [ -f ~/homelab/$svc/docker-compose.yml ]; then
    echo "▶ Starting $svc..."
    docker compose -f ~/homelab/$svc/docker-compose.yml up -d
  fi
done

echo "✅ All services started."