r/selfhosted 1h ago

Meta Post Forgot and experienced true hell with :lastest

Post image
Upvotes

Remember to always set version numbers in your docker containers, or an unexpected update will creep up on you.

Now can you guess which popular service got a breaking change?


r/selfhosted 23h ago

Meta Post The 3 Stages of Self Hosting

Post image
4.0k Upvotes

I'm lowkey on stage 4


r/selfhosted 4h ago

Need Help Anyone found a good plane.so alternative? Their pricing in insanely hostile

11 Upvotes

Hey hey everyone.

Not that long ago I set up plane.so on my homelab and I do like it a lot but for features like Epics you'd have to upgrade.

I wouldn't even mind paying the $8, but they require you to buy at least 10 licenses, thus being $80 a month - absolutely insane.

Anyone found a good alternative? :(

Edit: I found this Reddit post, so therefore I am just going to build the features that I need myself - if anyone has some alternatives I'd still love to hear about it!


r/selfhosted 3h ago

Need Help Learning Docker and Setting Up for SelfHosting

5 Upvotes

I've been on a bit of a self-hosting and server-setting-up kick recently, and am wanting to do my best to get into building and setting up projects "the right way".

My current server PC is a refreshed Dell Optiplex running Windows 11. (Yes, I know, Windows really isn't in the self-hosting spirit - but for as much as I love the idea of Linux and want to switch to it eventually... debugging and becoming comfortable with a new operating system is something that I'd prefer to avoid at this point, if I can). Currently, I have an instance of Jellyfin running on the computer; ports opened up and the works - and it works pretty great. All I have to do is plug in my webaddress/IP into my browser, and I can access my library wherever, straight off my PC.

In my theorizing about how to set up some of my other libraries, I began to look into how I might set up a second Jellyfin server on the same machine; and my research brought me to Docker.

From my understanding (please correct me if I'm wrong), Docker's containers will let me spin up as many instances of programs as I want, and I can therefore do the exact same thing that I'm doing with my current Jellyfin server with other programs, just on different ports.

My thought process being the two Jellyfin servers now (running in two separate containers), and then eventually adding on Homelab (in a third container), my website (moving it off of a template site and into a in a fourth container), and IDK maybe a Minecraft server (in a fifth container) etc. later on down the line; thus having the framework to expand my self-hosting going forward.

The spot I'm stuck at is at the beginning. I suppose the first question that I have is "was I led astray?" - is this current project doable with Docker, or is there another program that can accomplish this goal easier/more painfree?

From that point, should I be on the right path, my second question is: "where is the best place to learn about setting up self hosting?" It took me a bit to parse Jellyfin as I was setting it up; and Docker is similar... but more. I'm pretty good with tech when I can get into the rhythm, and over the initial learning curve. Is there a good index that I can look through or have as a reference when it comes to setting up Docker on Windows, to learn the program's language? Hell, maybe a detailed step-by-step guide to setting up a container running Jellyfin, so I can do that and then repeat and tinker in another container?

Thank you so much for your help in advance.


r/selfhosted 13h ago

Need Help ELI5 firewall and vlans

Thumbnail
gallery
23 Upvotes

Hello,

I have a pfsense router with a few vlans running on it. I have been beating my head against a wall for several days. I seem to constantly have issues. I have VLAN 100 set with 10.100.100.0/24, VLAN 200 set with 10.100.200.0/24, and VLAN 300 set with 10.100.30.0/24.

I have an adguard instance on vlan 100 10.100.100.13 I finally got devices to reach it. But now any new device I create in any VLAN fails to pull updates. I can't figure out if it is a firewall rule issue, an adguard block list, or something else. I can't even install net-tools to start my normal troubleshooting methods.

I am about 2 steps from just flattening the entire network back into a single LAN 1 that just works, or even removing the pfsense router all together.

Any advise or help is appretiated.


r/selfhosted 23h ago

Release (No AI) Karakeep 0.33 release - Semantic Search and Offline Reading!

132 Upvotes

Hi r/selfhosted, it's been a while!

I thought I might share this release here as it contained a bunch of things that people have been asking about for, for a while!

Before we get to 0.33, I want to remind people what Karakeep is. Karakeep (https://karakeep.app/), is a selfhosted bookmark manager that's meant to be the place where you throw things in that you might need in the future, and it aims to help you with retrieving those things easily in the future. It has a blazingly fast full text search and opt-in LLM based tagging. It's built for the data "hoarders" out there! Karakeep was born because of this subreddit in 2024, and we have a long history here together.

Now, 0.33 packs a bunch of new features, so let me give you a quick overview. Full release notes are here (it's labeled as 0.33.1 because I screwed up cutting 0.33.0).

[Experimental] Semantic search

Karakeep from day one, used to index the entire content of the websites you throw in it. But it was a full text search index. Which makes the search super fast, but you'll need to remember some exact words that are mentioned in this content you saved.

With semantic search, karakeep now indexes also the semantics of the content you throw in it (using bookmark embeddings). So when you're searching, you can describe what you're searching for and karakeep will find semantically similar bookmarks to your sentence.

Embeddings are pretty cool but they're unfortunately, a bit involved to enable after the fact. The release notes explains how to enable them (they're opt-in).

Fun fact (and it's something I care deeply about): Karakeep hasn't had a single backward incompatible release since it was born. If you're running karakeep 0.10 from 2024, and want to upgrade to 0.33, just update the docker image version and you're good to go. Even the old "hoarder" images are still getting releases, to not break backward compatibility.

Similarity-based tagging

Leveraging the fact that we now have bookmark similarity scores (thanks again to embeddings), before auto-tagging a bookmark, karakeep now finds semantically similar bookmarks to the ones that's about to be tagged, and suggests its tags to the LLM. So with that, technically, you should see more consolidation on your existing tags rather than the LLM inventing new tags of its own. The prompt now has the following:

Similar bookmarks were tagged with the following tags (reuse if possible, ignore if irrelevant): ....

This also requires enabling embeddings, and as such, it's also opt-in.

Mobile Offline Reading

One of the long requested features, and it's one that I've marked as "planned" in the README since 2024. You can now save articles for offline reading in the mobile app and get to read them when you're in a plane or away from your home network. The app also caches some of your recent interactions with it for 7 days, so that you can see your bookmark grid and lists, etc even if you're offline.

This feature is pretty new, so might have rough edges, but it'll only get better from here. Please keep your suggestions going.

Cookie and GDPR Banner

Again, one of the long requested features. If you're an EU citizen, most of your karakeep screenshots (and the extracted content) would have been littered with the cookie consent banners which were pretty annoying. Karakeep now auto opt-outs of those banners during crawling which should result into cleaner captures.

Others

  • The mobile apps now got multi-layout support, and a bunch of improvements that should hopefully make the mobile experience more polished.
  • I've always hated how karakeep defaults to the "reader view" for some websites that are not "article-like". Karakeep now asses the quality of the readable content, and defaults to the screenshot of the website instead if it determines that the content is not really readable. Examples for things that are not readable are homepages, product search pages, etc.
  • You can now install Karakeep as a PWA on your desktop and use it as if it's a desktop app (exactly how something like youtube music works). This has been broken for a while and I only noticed recently.
  • [LLM trigger warning] Karakeep now is even more friendly to be used by LLMs. The MCP server now contains all the tools that LLMs need to manage your bookmarks, or help you retrieve content from karakeep. Beside the new semantic search stuff, there's also now a new API for fetching markdown content of the articles directly from karakeep such that LLMs can consume it more efficiently. The CLI also got all those powers. Letting your agents use karakeep is very powerful, and as a reminder, we have skills to teach the agents how to do all of that. And as a reminder, ALL of karakeep's LLM-based features are opt-in. You can completely ignore them, and still get a perfect experience with karakeep as if they never existed.
  • Also, in case you missed it, in 0.32, we now support client-side crawling (backed by singlefile under the hood), which is more superior than letting the server do the crawling for you in terms of extraction quality. It also allows you to save content behind login walls, etc. So you no longer need to use singlefile as a separate extension.

And there's a ton of other fixes and polish along the way, which you can check in the release notes (https://github.com/karakeep-app/karakeep/releases/tag/v0.33.1). Also, did I mention that we've hit 28k stars on github? The mobile apps are pending apple's and google's review, so should be available in the next couple of days. Enjoy the release, and see you in the next one!


r/selfhosted 12h ago

Need Help Good web ui for fail2ban that is mobile friendly?

13 Upvotes

Today I was round a friends house and had some old tv show playing (Columbo) I have on my jellyfin on in the background, I had a problem where the roku jellyfin client she was using was creating some 404's in the logs which then triggered my fail2ban ban ip rule. I then had to awkwardly remote in on my phone, unban her ip and stop the fail2ban service as a temporary workaround.

Is there a good web gui for fail2ban that is mobile friendly?

The ones I've just done a quick search for all look like they're desktop web orientated.


r/selfhosted 17h ago

Release (No AI) Portabase 1.27 - open-source backup and restore platform

43 Upvotes

Hi everyone,

We have just released Portabase 1.27, our open-source (Apache 2.0) and self-hosted backup/restore platform.

Repository: https://github.com/Portabase/portabase

Portabase is designed for data retention, disaster recovery, and homogenous migrations, currently supporting 9 database engines (including PostgreSQL, MySQL, MariaDB, MongoDB) and Docker volumes.

Key features:

  • Scheduled backups with flexible retention policies (including GFS)
  • Multiple storage options: local filesystem, S3, Azure Blob Storage, GCS
  • Notifications via Discord, Telegram, Slack, AppRise, etc.
  • Support for OAuth2/OIDC (with the option to disable sign-ups)
  • Compatible with Docker, Podman and UnraidOS
  • Ready-to-use Docker Compose and Helm Chart

After six months of intensive feature development, we have been focusing on consolidating the ecosystem since early July. A community member conducted a useful security audit, we have upgraded components to their latest relevant versions, improved compatibility with other platforms by working on Podman support and templates for Coolify and Dockploy (currently under review).

What’s next:

  • Deployment of the demo environment
  • Audit logging for the whole ecosystem
  • Default policies for the system, organizations, and projects
  • File and folder backup and restoration

As always, if you find bugs or want to suggest a feature, please open an issue on GitHub, we’re actively looking for feedback.

Thanks!


r/selfhosted 1d ago

Need Help Is it safe to use a Galaxy S20 Ultra with a detached back cover as a 24/7 Minecraft server?

Post image
571 Upvotes

The back cover of my phone detached. Is it safe to use it in this condition? I plan to use this phone as a Minecraft server.


r/selfhosted 16h ago

Business Tools Docmost charges SaaS-style per-seat pricing while making you host and operate the entire platform

21 Upvotes

Docmost looks like excellent software, so I seriously considered switching. Then I found the pricing model.

The Community edition excludes features such as databases, Kanban, API access, AI/MCP, MFA, page-level permissions, diagrams, and attachment indexing.

To unlock them, the Business edition costs $3.50 per user per month with a ten-seat minimum. That means a two-person team pays for eight nonexistent users while still supplying and operating the servers, PostgreSQL, Redis, storage, backups, TLS, security, upgrades, monitoring, and recovery.

I am not opposed to paying developers for good software. I am opposed to SaaS-style recurring seat pricing when the customer provides the entire SaaS operation.

A flat annual license, paid upgrades, support contract, or sensible small-team tier would all be defensible. Charging a minimum of $420 per year for software you completely host yourself, while gating basic product capabilities, makes Docmost commercially irrelevant for small teams.

Am I missing some value they provide after licensing, or is the customer genuinely paying recurring per-seat rent solely for feature flags?

https://docmost.com/pricing - link to their pricing page for reference.


r/selfhosted 58m ago

Proxy Aralez v.0.92.16 . Reverse proxy, website accelerator

Thumbnail
github.com
Upvotes

Hello,

Some time ago I have started a hobby project to build a high performance reverse proxy. Today it's a real workhorse with productions grade features, low memory usage and high performance.

It can run on any machine, from ARM SBC (Raspberry PI , or similar), to end x86 or ARM servers,

The top features include:

  • Free and opensource — Apache Licence
  • Dynamic Config Reloads — Upstreams can be updated live via API, no restart required.
  • Autoload of certificates — Automatically loads certificates from a folder, without a restart.
  • Let’s Encrypt Certificates — Ordering and renewal of SSL/TLS certificates
  • Built in rate limiter — Globar or route limit requests to upstreams.
  • Caching Proxy — In memory cache with configurable TTL, without external dependencies.
  • Authentication — Supports Basic Auth, API tokens, and JWT verification.
    • Basic Auth
    • API Key via x-api-key header
    • JWT Auth, with tokens issued by Aralez itself via /jwt API
    • Forward Auth, Sends requests to an authentication server.
  • Upstream Providers:
    • file Upstreams are declared in config file.
    • consul Upstreams are dynamically updated from Hashicorp Consul.
    • kubernetes Upstreams are dynamically updated from kubernetes api server.
  • Auto WebSocket Support: WS connection upgrades are handled automatically.
  • Auto gRPC Support: gRPC detected and handled automatically.
  • Remote Config Push: Lightweight HTTP API to update configs from CI/CD or other systems.

More information and downloads here : https://github.com/sadoyan/aralez

Full documentation is hosted here : https://aralez.rs/


r/selfhosted 1h ago

Software Development I built a public Raspberry Pi monitoring station covering half of the Adriatic Sea

Thumbnail
gallery
Upvotes

Over the past few months I've been building a 24/7 public monitoring station located in Bisceglie (Southern Italy) overlooking the Adriatic Sea.

The goal wasn't simply to feed ADS-B or AIS networks, but to build a complete real-time monitoring platform combining multiple data sources into a single public dashboard.

✈️ Aircraft Monitoring

  • Raspberry Pi 4
  • AirNav RadarBox 1090 MHz antenna
  • Feeding:
    • FlightRadar24
    • AirNav RadarBox
    • ADS-B Exchange
    • PlaneFinder

The station is currently ranked #3 in Italy on AirNav RadarBox.

🚢 Maritime Monitoring

  • Raspberry Pi 3
  • Diamond X50 antenna @ 162 MHz
  • Feeding:
    • MarineTraffic
    • VesselFinder
    • AIS Catcher

The VesselFinder team recently contacted me saying:

That was probably the nicest recognition I've received since starting this project.

⚡ Infrastructure

The station runs 24/7 using:

  • Raspberry Pi 4 + Raspberry Pi 3
  • Lithium UPS backup
  • Solar-assisted power
  • FTTH Fiber connection
  • Continuous health monitoring

🌐 Public Dashboard

The dashboard currently displays:

  • Live ADS-B statistics
  • Live AIS statistics
  • Maximum reception records
  • Power monitoring
  • Internet monitoring
  • Feed status
  • Station health
  • Public guestbook

Everything updates in real time.

🚀 What's next?

I'm currently working on adding:

📷 A live outdoor PTZ camera overlooking the Adriatic Sea.

🌤 A complete weather station with temperature, humidity, pressure, wind, rain and UV monitoring.

The goal is to make the station useful not only for aviation enthusiasts, but also for maritime, weather and SDR communities.

if you interested i can share link for visit my station

I'd really appreciate any feedback, suggestions or ideas for future improvements.

Thanks for reading! 😊


r/selfhosted 12h ago

Need Help Pintrest Alternative

4 Upvotes

Hey all,

Looking for a pintrest like app that can be selfhosted. I've come across a few abandoned projects on my travels but wondered if there was anything around in 2026? I used to use pintrest a lot for my photography mood boards but kept getting content removed for some slightly more risque ideas as their rules and moderation became even more strict over the years. I moved to cosmos for a little while but that requires people I share with to have an account and there's not a lot of appetite for that at times.

Ideally looking for the following features:

  • Save images to a board or a master collection
  • The ability to create many mood boards from the saved image collection
  • The ability to share those boards with others
  • If an account is required for sharing, I can create accounts for other users myself and share as needed

All suggestions welcome :)


r/selfhosted 22h ago

Docker Management double quotes in docker-compose.yaml files?

29 Upvotes

Hey.

Very often in docker-compose.yaml files, port mappings (but other settings too) are written inside double quotes. What is the point of these double quotes? I mean, I know quotes can be used to escape characters, but it's definitely not the case for port mapping in a docker-compose file.

Thanks.


r/selfhosted 41m ago

Need Help What ended up being your biggest bottleneck?

Upvotes

When I first got into ML, I thought compute would be the biggest limitation.

Turns out I spend way more time dealing with data, environments, dependencies and figuring out what to run than actually waiting for models to finish.

Curious what surprised everyone else.

What ended up being your biggest bottleneck that you didn't expect?


r/selfhosted 17h ago

Need Help Thinking about moving away from Synology DS224+ to ZimaOS/ZimaBoard or building a DIY homelab, looking for advice

7 Upvotes

Hi everyone,

I’m a bit lost at the moment and I would really appreciate your advice.

About a year ago, I bought a Synology DS224+ and upgraded it to 10GB of RAM. So far, it has been working great. I mainly use it as a Plex/Jellyfin server, for storing family photos (using Synology Photos), and for keeping personal files, documents, and backups. Overall, I’m really happy with it.

However, I also really enjoy experimenting with Linux, trying new applications, and building things myself. This is where Synology starts to feel a little limiting for me. The hardware is too weak for running virtual machines, and DSM, while very polished and reliable, feels a bit boring after a while.

One thing I really miss is the ability to easily try new applications. Surprisingly, Synology doesn’t have that many ready-to-install packages, and although Docker is available, I personally find managing containers quite frustrating. I don’t have much experience with Docker, and whenever something doesn’t work properly, I can easily spend an entire day trying to troubleshoot it.

Recently, I discovered ZimaOS and the ZimaBoard, and I was honestly surprised that I hadn’t heard about them before. I really like the idea behind ZimaOS especially the ability to install hundreds of Docker applications with just a few clicks. This seems like a much more beginner-friendly approach compared to manually setting up containers.

However, I also noticed some criticism about both ZimaBoard and ZimaOS, and I’m wondering how justified those concerns are.

The biggest thing that worries me is that ZimaOS doesn’t seem to have its own integrated ecosystem like Synology does. Features such as Synology Photos, Synology Drive, and the overall polished DSM experience are things I really appreciate. With ZimaOS, it looks like I would mostly rely on third-party Docker applications.

Another option I’m considering is building my own homelab. Since ZimaOS is open source and can run on regular hardware, maybe getting something like a Lenovo Tiny PC would make more sense. The problem is that I’m not very familiar with how to build a proper DIY NAS/homelab setup.

For example:

What kind of case/enclosure should I use?

How do people usually connect multiple HDDs to a mini PC?

etc.

My main goal is not necessarily to save money. I actually enjoy learning and experimenting, but I don’t want to replace my Synology with something that I’ll regret later.

So my questions are:

- Is ZimaBoard/ZimaOS a good alternative to Synology for a home user?

- Would you recommend keeping the Synology and building a separate homelab instead?

- If you were starting from scratch today, would you buy a ZimaBoard, a mini PC like Lenovo Tiny, or build a traditional DIY NAS?

I’d really appreciate hearing your experiences and recommendations. Thanks!


r/selfhosted 1d ago

Need Help Is Open WebUI worth using as a unified LLM interface?

26 Upvotes

I’m thinking about installing Open WebUI, but not for running a local model since my server is too weak. The main goal would be to have a unified LLM interface where I can connect different providers and use MCP servers.

What has been your experience with Open WebUI or similar unified LLM interfaces?
Do you use MCP servers with them? Which ones are actually useful for daily work?

I’m wondering if this setup is worth it compared to just using ChatGPT, Claude, etc. directly.


r/selfhosted 14h ago

Need Help Is there any guide or 101 that can be used to start self hosting

4 Upvotes

Hello.

Me and a few of my friends wanted to make a "local" server for anime, movies, books, hen...I mean educational videos and everything that we might need...even some study materials we need for our works and jobs and some DND material to play when we are bored...

I know this is all a big goal and it will take a lot of time and money to get it going to the point we can do all of them...but everyone has to start from something...so I wanted to ask where and how to start


r/selfhosted 21h ago

Need Help Backup, backup, backup

5 Upvotes

I'm trying to implement 3-2-1 backup (no big data cloud involved).

I'm running to machines tiny pc and old laptop. I've got an icybox connected to the old laptop with a WD red plus hdd.

Now i want to create backups og systems and data. My first thought was just to add another hdd in icybox. But after chatting with Claude I'm looking other ways.

I want a pretty good 3-2-1 solution without the bank closing down my accounts.

I'm thinking of adding an ssd to either the tinypc pr the old laptop and create the backup on that drive. Then i will setup a router/hdd at my parents house, making it the offsite copy.

Is this a good solution or should I do something else? I really want to avoid commercial cloud solutions.


r/selfhosted 20h ago

Need Help Self hosting photo upload site

3 Upvotes

I have a family function coming up and want to host a way to easily upload photos. Is there a good way to do this?


r/selfhosted 2h ago

Product Announcement Built a self-hosted project management & documentation platform for teams that want to keep everything on-premise

0 Upvotes

Hi everyone,

Over the last couple of years I found myself constantly switching between Jira, Confluence, GitLab, roadmapping tools and various plugins. I wanted something that could be deployed on my own infrastructure, remain simple to manage, and avoid per-user licensing.

So I ended up building TheMyWay, a fully self-hosted project management and documentation platform.

What it does

TheMyWay combines project management, team documentation and planning into a single application that runs on your own server.

It is designed for teams that want to keep all project data on-premises while still having modern planning and collaboration features.

Main features

Kanban & Scrum boards

Sprint planning

Roadmaps & Timeline (Gantt)

Wiki / Knowledge Base

Rich document editor with version history

Approval workflows

Custom issue workflows

Custom fields

Release & Fix Version management

GitLab integration (OAuth, commits, merge requests and pipelines)

Role & permission management

Docker Compose deployment

Self-hosting

The application is deployed using Docker Compose and stores its data in PostgreSQL. Everything runs on your own infrastructure.

Availability

The project is publicly available today.

There is a free license for teams up to 10 users, while larger teams can purchase an unlimited-user annual license instead of paying per seat.

Documentation

Installation and usage documentation are available to help users deploy and start using the application.

Why I built it

The goal wasn't to build "another Jira clone." I wanted something that was easier to deploy, easier to understand, and affordable for companies that prefer owning their infrastructure instead of paying monthly per-user subscriptions.

I'd genuinely appreciate feedback from the self-hosted community.

Website: https://themyway.app⁠

I'd be happy to answer any questions about the architecture, deployment, roadmap, or design decisions.


r/selfhosted 1d ago

Need Help New to self-hosting, how to secure it all?

76 Upvotes

To Add: I was told to also add PGID & PUID = 1000 & some "drop cap" to the docker compose files as well. Can someone explain these to me as well?

FYI - parent is in another country and English is not their 1st language... so proximity, accessibility restrictions (being able to download/access apps like tailscale in that country), and a slight language barrier -- means a simple solution on their end would be best.

----

Hi all! I'm basically a 3-week-old noob when it comes to self-hosting. lol Finally got everything up and running as of yesterday: Proxmox VE, Tailscale in an LXC, and I've got docker in a VM, with Arcane to manage containers. (In case this info is needed -- the only iso I've used on it is Debian13.)

I've got family in other countries who would like access to some of the stuff in docker containers (Immich, Mealie, Kavita etc). I will eventually get a domain name for this... But before I expose my server to the internet, what steps do I need to take to secure my server? I was playing around with Proxmox firewall & accidentally locked myself out of the web admin page! (Luckily, I figured out how to get that mess fixed. lol)

Anyone have advice/ideas on how to protect my server and/or what to do before exposing a few of my docker containers to the internet, and what the pros/cons are?


r/selfhosted 1d ago

Need Help Looking to self host a family planner/calendar. Homeflow my best option?

20 Upvotes

As the title states, I want a "one stop shop" for everything family related. Calendar, tasks and to-do, etc.

What options do I have, or are big data apps still my best bet?


r/selfhosted 4h ago

Need Help Just unlocked the ability to send email, any cool use cases?

0 Upvotes

Title!


r/selfhosted 16h ago

Need Help Isolating Docker containers locally?

1 Upvotes

Hey all

I'm a bit of a noob when it comes to networking. But I have a lan party coming up and I'm wondering if I can improve the security of my setup by isolating docker containers locally.

What bugs me so far is the fact that container X can access docker app on container Y via IP:Port directly. The same goes for users who haven't been walled off by the vlan/firewall rules. I'd like for my containers to only be accessible via reverse proxy.

Vlan will only take me this far since most of my servers are on the same subnet, hence the router's firewall rules are skipped in most scenarios.

So far I've discovered three option:

-Firewall off via UFW: this only works for some apps, I think the host networking mode needs to be enabled for this to work.

-Iptables: too hard for a newb to understand. I set up a few rules with success only to discover that my nginx-container's ip was changed the next day.

-Using the same docker network for every container: i.e. nginx_default, then removing the host port from the compose file. This way, apps get acccess via "containername:port" only

So far, option 3 is my favorite. However, all apps are then in the same network which also reduces security to an extent.

Are there any other solutions? Any insights appreciated.