wtf is havenstack?

HavenStack is a homelab setup built with Docker Compose, designed to run a full suite of self-hosted services across Unraid and NAS hardware. If you have a home server and want to run your own private cloud, media system, and identity management instead of relying on outside providers, this project gives you a structured, security-focused way to do it. The stack is organized into groups of services. An edge layer handles secure internet access using Cloudflare Tunnel and Traefik as a reverse proxy, with Authelia providing central login and access control so only authorized users can reach your services. A private apps group includes Nextcloud for file storage and sharing, plus Vaultwarden for password management. A media automation group brings together the Servarr tools, such as Prowlarr, Radarr, and Sonarr, with qBittorrent running behind a VPN so downloads stay private. A monitoring group uses Prometheus and Grafana to track the health of everything, with Blackbox Exporter checking that services stay reachable. On the NAS side, Plex handles media playback. Setup follows a defined order: copy example environment files, fill in your own settings such as paths, network ranges, and secrets, then deploy each stack one at a time using Docker Compose commands. Some services need manual preparation first, like generating a password hash for Authelia or adding a VPN provider's configuration files for qBittorrent. The documentation folder walks through host preparation, first run checks, ongoing operations, and a matrix showing which services are exposed to the internet versus kept private on the home network. This project is aimed at people comfortable running their own server hardware and editing configuration files, not a one click installer. It emphasizes running containers with health checks and resource limits, and keeping networks segmented so a problem in one service does not expose the whole system. There is a contributing guide and a private channel for reporting security issues rather than posting them publicly. The project is still small, with limited history so far, and its licensing terms are included in a separate LICENSE file in the repository.