Best Self-Hosted Docker Apps to Run on a VPS in 2026

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

The best self-hosted Docker app is the one that solves a specific problem and still fits your VPS’s memory, CPU, storage, security, backup, and maintenance budget. For a lightweight starting stack, choose Vaultwarden for passwords and Uptime Kuma for monitoring. Add Nextcloud for files, Jellyfin for media, Gitea for Git, Paperless-ngx for documents, n8n for automation, or Home Assistant for home control only when you have a defined use case. Treat Immich separately: its 2026 project documentation requires at least 6 GB of RAM and 2 CPU cores for a smooth experience, with 8 GB and 4 cores recommended.

This guide compares the practical choices, explains what fits on 2 GB, 4 GB, and 8 GB VPS plans, shows a maintainable Compose layout, and covers the security and recovery work that makes self-hosting dependable rather than merely possible.

#	Preview	Product	Price
1		Compressed Air Duster,130000RPM Super Power Cordless Air Duster,Rechargeable Brushless Blower,3 Gear...	$23.99	Buy on Amazon
2		EVEO® Screen Cleaner Spray Kit (Streak-Free) TV Screen Cleaner for Smart TV, Lcd, LEd, Oled |...	$16.97	Buy on Amazon
3		BladeHawks RGB Gaming Mouse Pad Extra Large Extended 31.5x12 Inch-Black | LED mouse pad with 14...	$13.99	Buy on Amazon
4		Vaydeer Wrist Rest for Keyboard and Mouse, Computer Ergonomic Wrist Support Pad, Soft Memory Foam...	$15.99	Buy on Amazon
5		Under Desk Cable Management Tray No Drill, Metal Mesh Cable Management Under Desk with Clamp Mount,...	$13.89	Buy on Amazon

Shortlist: which Docker app fits your job?

These applications cover the most common reasons to run software on your own VPS. The resource notes are planning guidance, not guarantees: indexing, uploads, transcoding, concurrent users, and scheduled jobs can change consumption substantially.

Choose by outcome

Nextcloud for a private cloud and collaboration

Choose Nextcloud when the requirement is broader than file storage. It combines synchronized files with shared folders, calendars, contacts, and office-oriented integrations, making it the general-purpose option in this list. It is a sensible first major service for a family, club, or small team that wants one account system and one web destination.

Popular on Amazon

Compressed Air Duster,130000RPM Super Power Cordless Air Duster,Rechargeable Brushless Blower,3 Gear Adjustable Blower with LED Light,Dust Remover for Computer/House/Outdoor/Car

• Powerful Turbo Fan:CAGIWIRU Electric Air Duster have reached speed up to 130000RPM,Can efficient remove dust and debris.With LED light and Three Adjustable Speed to meet with different cleaning tasks.
• With Attached USB C Fasting Charging cable.Charing 3 hours,Enjoy up to 240 minutes of use on the lowest setting, For third speed can use for 25mins.with four charging options to meet with your needs.
• Wide Application: attached 5 different nozzles,making it suitable for a variety of scenes, such as car,pet, pc, keyboards, and other electronic devices. It also serves for office and home clean duster.
• Handy Design & Portable:Cordless air duster electric nozzle is Light weight and small size, design and comfortable to hold and space saving, convenient to carry around. You can put it in your room or inside the car without taking up space.
• Economical &Reusable: Built durable materials with a long-lasting battery,our CAGIWIRU air duster it's a sustainable alternative to disposable air cans.

$23.99

Buy on Amazon

Plan for persistent storage before inviting users. Files, previews, activity data, and the application database all need space, and growth is driven by the number of users and the volume of shared content. The operational burden is higher than that of a tiny utility container: schedule updates, keep the database and uploaded data in backups, and verify that a restore produces a usable instance rather than merely a collection of files.

Immich for a Google Photos-like library

Immich is the strongest fit for personal photos and videos, but it is the app most likely to invalidate an undersized VPS plan. Immich’s current requirements documentation states: “For a smooth experience, especially during asset upload, Immich requires at least 6GB of RAM.” The same documentation lists a baseline of at least 6 GB RAM and 2 CPU cores, with 8 GB RAM and 4 cores recommended.

Use local SSD storage for Immich’s PostgreSQL data; the project documentation specifically advises against putting that database on a network share. Photos and video consume storage quickly, while uploads, indexing, thumbnails, and other bursty work can create temporary CPU and memory pressure. If Immich is your primary workload, size for it first and add only small supporting services afterward. A 4 GB VPS is a poor default for Immich alongside other demanding applications.

Immich’s production documentation recommends Docker Compose. Keep its compose file and environment template under controlled change management, and treat the media library and database as separate backup concerns.

Vaultwarden for self-hosted passwords

Vaultwarden is a lightweight Bitwarden-compatible server and one of the most practical first services for a small VPS. It can replace a hosted password vault for individuals or a small household while allowing standard compatible clients to remain in use.

Its small footprint does not make it low-risk. A password database is among the most sensitive data on the server. Terminate HTTPS at your reverse proxy, use a long unique administrator secret, enable multi-factor authentication where supported by the client ecosystem, and keep encrypted off-VPS backups. Test that you can restore the database and log in before you depend on it during an outage.

Jellyfin for personal media streaming

Jellyfin is appropriate when you want to stream a library you control rather than upload it to a third-party service. Direct play can be relatively undemanding, but transcoding changes the calculation: codecs, subtitle handling, resolution changes, concurrent viewers, and whether hardware acceleration is available all affect CPU and memory use.

Also popular on Amazon

EVEO® Screen Cleaner Spray Kit (Streak-Free) TV Screen Cleaner for Smart TV, Lcd, LEd, Oled | Computer Screen Cleaner Spray and Wipe Microfiber Cloth - TV, Monitor, Laptop, iPad, Car - 6.7oz 1 Pack

• Screen Cleaner is Your Screen’s New Bestfriend! - EVEO is proud to present a screen cleaner that’s perfectly suited for your TV. Meet your new screen cleaner, computer screen cleaner, laptop cleaner, iPad cleaner, Macbook,tv cleaner or any other electronic device. Our screen cleaner spray and wipe along with the included plush microfiber cloth, easily removes dust, fingerprints & other smudges on the screen’s surface. Clean effectively for a streak-free screen
• Gentle on your Screens - Our screen cleaner spray and wipes is compatible to be used even for the most sensitive LCD, LED, CRT, and OLED screens in proper use. Be at ease knowing that this product is compatible with all the major brands: LG, SONY, Samsung, Sharp, iPad, iPhone, Android screens, Kindle, PC monitors - we’ve got you covered! Can be used as LCD screen cleaner, tv cleaner, smart tv screen cleaner, and more
• Premium Super Soft Plush Microfiber Cloth - Included in this efficient screen cleaning kit. This screen cleaner spray and wipe has our signature plush microfiber cloth specially designed to comply with screens and monitors and leave them streak-free. Has been shown to effectively absorbs stubborn stains, zero streaks, and no fiber shedding. Always use this together with our screen cleaner for the best results
• Easy-to-Use Screen Cleaner Kit + microfiber cleaning cloth - The EVEO Screen Cleaning Kit will easily be your new favorite tool when it comes to taking care of the things you love most, quick and easy solution for a streak-free screen. Simply screw on the sprayer gun on the screen cleaner bottle. Spray the cleaning liquid onto the microfiber cloth, then wipe the screen until desired cleanliness & shine is achieved.
• Quality Screen Care Kit Worth Purchasing - Enjoy a convenient Screen Cleaner anytime, anywhere you need it. Your satisfaction is our top priority. We stand behind the quality of our products and that’s why, you shouldn’t be worrying at all. We manufacture the Best Screen Cleaner. and can be used for laptop cleaning kit, laptop screen cleaner, tv screen cleaner for smart tv. MacBook screen cleaner, monitor cleaner or screen cleaner spray for electronic devices with microfiber cleaning cloth

$16.97

Buy on Amazon

Before selecting a VPS, list the devices that will watch, the formats in your library, and the number of simultaneous streams you expect. A container that is fine for one direct-play viewer may fail when two clients require video conversion. Keep the media volume persistent and include its metadata in your backup and rebuild plan.

Uptime Kuma for visibility and alerts

Uptime Kuma is a compact monitoring and alerting service. Run it early, not after the first outage: it can check the public endpoints of your other applications and notify you when they stop responding. Monitor more than HTTP status alone where appropriate, including certificate expiry, disk capacity, and the health of critical services.

Place monitoring on a separate path from the application it observes when possible. If the monitor shares the same failure domain, a host outage can silence both the service and its alarm.

Gitea for private Git projects

Gitea provides repositories, issues, and team workflows without the weight of a large code-hosting platform. It fits a VPS well for personal projects, small teams, and internal code. Repository growth is usually predictable, but release upgrades and database backups still require operator attention.

Keep repository data and the service database on persistent volumes. Decide whether the Git endpoint should be public or reachable only through a VPN or access-controlled proxy. A private project is not protected merely because its web page is obscure; enforce authentication and back up both code and metadata.

Paperless-ngx for searchable records

Paperless-ngx turns scanned and imported records into a searchable document archive through OCR, tags, and metadata. It is useful for receipts, policies, tax records, and household paperwork, but importing an existing archive can create a sudden storage and CPU spike.

Estimate the size of original files plus OCR output and any previews before migration. Define retention rules and an off-site backup destination first. The service is valuable only if documents remain recoverable, so include a restore rehearsal in the setup rather than assuming that a copied volume is sufficient.

Also popular on Amazon

Sale

BladeHawks RGB Gaming Mouse Pad Extra Large Extended 31.5x12 Inch-Black | LED mouse pad with 14 lighting modes, covers keyboard & mouse, anti-slip rubber base, waterproof surface, USB powered

• 【Large size】：Measuring 800 x 300 mm/ 31. 5×12 inches, which is wider and taller than others. Large mouse pad can perfectly fit your keyboard and mouse of any size, and there is also ample space for peripherals such as phones, tablets, etc.
• 【LED backlight mouse pad】：Blade Hawks RGB mouse pad provides 7 static modes and 7 dynamic modes will give you the options you are looking for. Power-off memory function remembers the last lighting mode you selected. The super glow fiber Chroma will give you a colorful gaming setup that you want.
• 【Anti-slip rubber base】：Made from Natural rubber, this gaming mousepad will firmly grip your desktop, allowing you to enjoy the ultimate precision in the games you are most passionate about. It also comes with a texture that enhances this ability even further.
• 【Smooth and waterproof surface】: Micro-textured cloth surface, for extremely precise mouse control and a smooth movement. When liquid splashes on the gaming mouse pad, it forms water droplets and slides down. Will not delay your work or gameplay.
• 【Plug and play】: This mouse and keyboard pad is powered by USB, plug and play, no driver required. One button control light modes. Press one time to change the lighting mode, press twice to change the brightness, press and hold about 3 seconds turn ON/OFF.

$13.99

Buy on Amazon

n8n for API and scheduled automation

n8n connects APIs and scheduled jobs into repeatable workflows. It can eliminate repetitive tasks, but its workflows often contain tokens with authority over other systems. Keep credentials out of compose files and public repositories, restrict the editor’s exposure, and separate administrators from ordinary users.

Review every workflow after an upgrade. A harmless-looking change to an API, webhook, or schedule can create duplicate jobs or unexpected data writes. Back up workflow definitions and the data store together so a rebuild does not leave automation references pointing at missing credentials.

Home Assistant when the VPS can reach your home safely

Home Assistant is a strong choice when the control plane belongs in a VPS and you can provide a secure, reliable connection to the home network. That connection is the main design constraint: a public server should not become a bridge into trusted household devices without deliberate network segmentation and access controls.

Account for the consequences of a WAN outage, VPN failure, or changing home IP address. Keep device credentials private, expose only the required interface, and decide which automations must continue locally if the VPS is unreachable.

How much VPS capacity do these apps need?

Start with the heaviest service, then reserve headroom for its database, reverse proxy, monitoring, backups, and bursty maintenance jobs. The following bands are practical starting points, not promises of a particular performance level.

Immich’s official baseline is the clearest hard requirement in this shortlist: at least 6 GB RAM and 2 CPU cores. Its recommended 8 GB and 4 cores configuration leaves more room for uploads and indexing. Other applications do not have a single universal VPS size in the available documentation, so “not stated” is more honest than assigning them a precise minimum.

Can you run Nextcloud, Immich, Jellyfin, and Vaultwarden together?

Yes, but “can start” and “will remain reliable” are different questions. Vaultwarden is generally light, while Nextcloud, Immich, and Jellyfin can each create sustained or bursty demand. Immich’s 6 GB baseline alone makes a 4 GB all-in-one VPS unsuitable. Jellyfin may add sudden CPU load during transcoding, and Nextcloud’s storage and database activity grows with users and files.

Also popular on Amazon

Sale

Vaydeer Wrist Rest for Keyboard and Mouse, Computer Ergonomic Wrist Support Pad, Soft Memory Foam Arm Cushion for Desk, Palm Hand Office Laptop Typing

• 【Softer and More Comfortable】Vaydeer wrist rest has unique diamond pattern, which is the combination of softness and aesthetics. The materials of wrist rest are improved into higher quality memory foam and covered with silky smooth lycra. The computer wrist rest makes you as comfortable and cushiony as like rest your wrists on clouds.
• 【Ergonomic Wrist Saver】The wrist rests for keyboard and mouse comes with a 17.32×3.15×0.83 inch keyboard wrist pad and a 5.94×3.15×0.83 inch mouse wrist support. Based on ergonomic design, the unique concave shape is the perfect fit for your wrist joints. The wrist rest pad fits most computer keyboards and laptops, improve hand and wrist posture, release your wrist and arm stress.
• 【Non-Slip Rubber Bottom】Featuring an anti-skid silicone base on the bottom, this wrist keyboard support stays firmly in place on your desk, preventing the padding from sliding around, ensuring stable and consistent wrist support during extended computer sessions.
• 【Better Experience & Pain Relief】Our keyboard arm rest is beneficial to alleviate the soreness caused by direct contact and friction between your arm and a hard desk surface, reducing the risk of wrist fatigue or carpal tunnel. The soft texture of memory foam can evenly distribute the pressure around your wrists and provide good support with just enough give.
• 【Helpful in Multiple Scenarios】Whether you're working, studying, writing, typing, gaming, this keyboard and mouse rest combo is an essential accessory to add comfort and support to your hands and wrists. It’s also a great gift for men, women, family, friend, coworker, gamer, teacher, etc.

$15.99

Buy on Amazon

For a combined deployment, use this order:

1. Choose the VPS around Immich or the most demanding Jellyfin workload, not around the smallest container.
2. Reserve memory and CPU headroom for PostgreSQL or other databases, the reverse proxy, monitoring, backups, and the operating system.
3. Keep Immich’s PostgreSQL data on local SSD storage rather than a network share.
4. Separate services into their own Compose projects and networks so an update or restart is easier to isolate.
5. Measure memory, CPU, disk I/O, and disk growth during real uploads, indexing, and playback before adding more applications.

If the combined stack regularly swaps, drops streams, or stalls during photo indexing, move the heaviest service to another VPS or remove a workload. Splitting services is usually safer than trying to tune an undersized host indefinitely.

If you need a server for this kind of stack, an Antihost Linux VPS with a one-click Docker image offers 1 to 16 vCPUs and 2 to 64 GB of RAM on AMD Ryzen 9 9950X3D with NVMe storage and full root access, so you can size the plan for Immich’s 8 GB figure. It is self-managed, so you handle updates and backups yourself, and for n8n the simplest route is to install it yourself on the VPS.

A maintainable Docker Compose deployment pattern

Compose is the YAML-based definition for images, ports, volumes, and environment variables. The Docker documentation launches a defined project with docker compose up -d. Use one project per application so its lifecycle, logs, and rollback decisions remain understandable.

1. Create a dedicated directory. Use a predictable path such as /srv/apps/<app-name>, with subdirectories for configuration and bind-mounted data where you need direct filesystem access.
2. Store the compose file in version control. Record image references, volumes, networks, health checks, and restart policies. Do not commit secrets.
3. Keep environment values private. Put passwords, tokens, database credentials, and domain-specific settings in an environment file with restrictive permissions. Back it up through an encrypted method because a rebuild may require it.
4. Define persistent storage explicitly. Use named volumes or carefully chosen bind mounts. Verify where uploads, databases, generated previews, and logs live before the first import.
5. Attach the app to an internal network. Databases and administration interfaces should not receive public ports. Only the reverse proxy and deliberately public services need internet-facing listeners.
6. Put HTTPS at the reverse proxy. Point the hostname to the proxy, issue a certificate, and forward only the required application route. Keep Docker sockets, database ports, and management ports private.
7. Start and inspect the project. Run docker compose up -d, then inspect container status and logs. Confirm that the application can write to its volumes and that its database is reachable over the internal network.
8. Document updates and rollback. Pin image tags or record a controlled update process. Read release notes, back up data, update one project, and verify health before touching the next.

Immich’s official production guidance specifically recommends Docker Compose and provides a compose file plus an environment template in its quick-start process. Follow that project’s current template rather than copying an old example from an unrelated deployment.

Security baseline for an internet-facing VPS

• Patch the host and install Docker from the project’s supported repository.
• Use HTTPS for every public application and a strong, unique secret for each administrator account.
• Enable multi-factor authentication where the application supports it, especially for password, code, document, and automation services.
• Never publish database ports or the Docker socket to the internet.
• Use firewall rules and separate networks to isolate public-facing services from internal databases and home-network connections.
• Keep credentials out of compose files committed to public repositories, shell history, and workflow exports.
• Pin image tags or apply updates through a documented, reviewable process; read release notes before changing major versions.
• Monitor disk usage, memory pressure, certificate expiry, and endpoint health. A container being “running” does not prove that the service is usable.

Backups and recovery are part of the app choice

Every service in this list creates a different recovery problem. Back up databases and configuration as well as uploaded files. For Vaultwarden, the database and encryption-related configuration are critical. For Nextcloud, preserve both the application data and database. For Immich, protect the photo/video library and PostgreSQL data. For Gitea, include repository data and metadata. For Paperless-ngx, retain originals and the searchable database. For n8n, preserve workflows and their associated configuration.

Keep at least one backup off the VPS, preferably in a separate failure domain. Define how many historical versions you need and how long to retain them. Then perform a restore drill: provision a clean environment, restore the data, start the Compose project, and verify logins, files, searches, playback, or workflow execution. A backup that has never been restored is an assumption, not a recovery plan.

How to decide between candidates

Score each proposed app against the same operational questions before installing it:

Also popular on Amazon

Sale

Under Desk Cable Management Tray No Drill, Metal Mesh Cable Management Under Desk with Clamp Mount, 2 Hole Cable Tray with Wire Management and Cord Organizer for Home Office Standing Desk

• 【No Drill Mounted】Cable management tray can be assembled in as little as 3 minutes or less-simply. Side clips easily clampe the edge of desk, pass through the holes on the sides, and secure excess cables with baskets. Desk cable management supports inward or outward installation to meet your needs in different scenarios, and provides you with great convenience when collecting and organizing wires.
• 【Rubber Pad Protects Desk】Wire organizer under desk built-in soft rubber pads on the clamp protect your desk from scratches, so you will not damage your furniture or office.
• 【Sturdy and Beautiful】Cord management under desk is made of high-quality carbon steel and holds about 15 lbs. The wire basket has 2 holes on each side of the tray to enable your cables to pass freely. Cable baskets are suitable for desk thickness use from 0.4" to 2.4".
• 【Space Saving & Keep Organized】Desk cable management tray holds all your power cords, outlet strips, USB hubs and computer transformers hidden from your feet, and the data cables will not enter the vacuum cleaner to keep your desk clean and tidy. Desk wire organizer is also suitable for use in the kitchen and outdoors.
• 【Reduce Safety Risks】Cable tray under desk keeps all plugs away from your kids, no more worry about tripping. Using 2 holes wire tray saves extra space, helps you easily cabling and wire protection. The mesh design is not easy to accumulate dust, but avoids safety accidents caused by messy wires.

$13.89

Buy on Amazon

Common failure modes and fixes

The VPS runs out of memory

Symptoms include killed containers, slow responses, failed uploads, or swap activity. Check which service spikes during indexing, OCR, transcoding, or backups. Stop nonessential projects, reduce concurrency where the application allows it, and move the heaviest workload to a larger or separate VPS. Do not treat repeated out-of-memory kills as a Docker restart-policy problem.

Uploads or indexing make the app unusable

Photo and document imports are bursty. Schedule large migrations for quiet periods, watch CPU and disk I/O, and leave headroom for the database. Immich users should meet its documented 6 GB minimum rather than trying to compensate for insufficient memory with retries.

Media playback buffers

Determine whether the client is direct-playing or forcing a transcode. Check the codec, subtitle mode, resolution, concurrent viewers, and available hardware acceleration. If the VPS cannot transcode the required formats reliably, convert media ahead of time or move Jellyfin to hardware better suited to that workload.

Disk usage grows unexpectedly

Measure originals, previews, OCR output, repositories, database files, logs, and backup staging areas separately. Set alerts before the filesystem is full, rotate logs, and move backups off-host. Expanding a disk without identifying the growing directory only postpones the failure.

An upgrade breaks the service

Read release notes, capture a restorable backup, and update one Compose project at a time. Keep the previous image reference and the compose configuration needed to roll back. If the data schema changed, restore into a test project first rather than repeatedly starting and stopping production.

The certificate expires or a public endpoint disappears

Monitor certificate expiry and the public URL from outside the VPS. Confirm DNS, firewall rules, reverse-proxy configuration, and container health in that order. Uptime Kuma is useful here, but keep its monitoring path independent enough to detect a host-wide failure.

Recommended starting combinations

Minimal utility stack

Start with Vaultwarden and Uptime Kuma when the goals are password management and visibility. This keeps resource use and operational scope modest while establishing HTTPS, backups, alerting, and update habits.

Private cloud stack

Add Nextcloud when shared files, calendars, contacts, or office integrations are the actual requirement. Increase storage and backup retention before inviting additional users.

Media-and-photo stack

Run Immich and Jellyfin only on a VPS sized for photo indexing and the expected transcoding workload. Test uploads and playback with representative files before adding unrelated databases or automation.

Builder and automation stack

Combine Gitea, n8n, and Uptime Kuma for private development workflows and scheduled integrations, but isolate credentials and restrict the automation editor. Add Paperless-ngx when document search is a defined need rather than an incidental feature.

Quick Recap

Bestseller No. 1

Compressed Air Duster,130000RPM Super Power Cordless Air Duster,Rechargeable Brushless Blower,3 Gear Adjustable Blower with LED Light,Dust Remover for Computer/House/Outdoor/Car

$23.99

Bestseller No. 2

EVEO® Screen Cleaner Spray Kit (Streak-Free) TV Screen Cleaner for Smart TV, Lcd, LEd, Oled | Computer Screen Cleaner Spray and Wipe Microfiber Cloth - TV, Monitor, Laptop, iPad, Car - 6.7oz 1 Pack

$16.97

SaleBestseller No. 3

BladeHawks RGB Gaming Mouse Pad Extra Large Extended 31.5x12 Inch-Black | LED mouse pad with 14 lighting modes, covers keyboard & mouse, anti-slip rubber base, waterproof surface, USB powered

$13.99

SaleBestseller No. 4

Vaydeer Wrist Rest for Keyboard and Mouse, Computer Ergonomic Wrist Support Pad, Soft Memory Foam Arm Cushion for Desk, Palm Hand Office Laptop Typing

$15.99

SaleBestseller No. 5

Under Desk Cable Management Tray No Drill, Metal Mesh Cable Management Under Desk with Clamp Mount, 2 Hole Cable Tray with Wire Management and Cord Organizer for Home Office Standing Desk

$13.89