10 Self-Hosted Servers Worth Running at Home

A home lab is not just somewhere to tinker, it is also one of the best ways to actually improve your own security instead of just reading about it. These ten are a genuinely useful starting point, picked for real benefit rather than novelty.

Home
›
AI Homelab Projects
›
10 Self-Hosted Servers Worth Running at Home

Reading is great. Tracking makes it stick. Sign up for a free Dashboard to tick off tasks and see your Security Score.

Get my free Dashboard →

CE: All⏱ 7 min read

Cyber Nova AI helps you prepare for Cyber Essentials. It doesn't award or certify it. Follow the steps here to get ready, then apply for certification through an accredited Cyber Essentials body when you're set.

Why run these at all

None of this needs enterprise hardware. Most of these run happily on a single low-power machine or a handful of containers on something like Proxmox. The point is not to collect software for its own sake, each one below solves a specific problem: what is on your network, who can get into your accounts, and whether you would notice if something went wrong.

1. Pi-hole or AdGuard Home

A DNS-level blocker that filters ads and trackers for every device on your network, not just one browser. It also doubles as a simple window into what your devices are actually contacting.

Runs comfortably on something as small as a Raspberry Pi
The query log is a genuinely useful early warning if a device starts phoning somewhere unexpected
Set it as your router’s DNS server so it covers phones, smart TVs and IoT kit automatically

3 steps

Set Up Pi-hole at Home

2. OPNsense or pfSense

A dedicated firewall distribution that replaces your ISP router as the thing actually controlling traffic in and out of your network. This is what makes real network segmentation possible.

Lets you put smart devices, guests and your main network on properly separated VLANs
Gives you real logging of what is being blocked or allowed, which most consumer routers hide from you
Needs a spare PC or a small dedicated appliance, budget mini PCs handle it fine for home use

3 steps

Put Smart AI Devices on Their Own Network

3. Wazuh

A free, open source security monitoring platform. It collects logs from your other machines and flags things worth a second look, the kind of visibility that businesses pay a lot of money for.

Good first real step into learning how proper security monitoring works
Comes with prebuilt rules for common attack patterns, you do not have to write your own on day one
Worth running on a machine with a bit of spare RAM, it is heavier than most of the others on this list

3 steps

4. Vaultwarden

A self-hosted, lightweight server that speaks the same protocol as Bitwarden, so you can use the official Bitwarden apps and browser extensions while your actual password data stays on your own network.

Works with the same apps you may already know from Bitwarden, nothing new to learn on the client side
Keeping your password vault off a third-party server removes one more thing that could be breached without your knowledge
Back it up properly, this is the one piece of self-hosted kit where losing the data is genuinely painful

3 steps

Self-Hosting Vaultwarden: What You Need to Know

5. WireGuard

A modern, fast VPN that lets you reach your home network securely from outside, without opening ports directly to the services themselves.

Simpler to set up and audit than older VPN protocols
Means you never need to expose things like Ollama or Home Assistant directly to the internet
Widely supported, including built-in clients on most phones and desktop operating systems

3 steps

Check if Your Home AI Server Is Exposed

6. Portainer

A web dashboard for managing Docker containers. If you are running more than one or two self-hosted services, this is what stops your setup turning into a mystery.

Shows you everything currently running, including anything you might have forgotten about
Makes it easy to stop or update a container without digging through the command line each time
Good habit builder: an unused, unpatched container is exactly the kind of thing that quietly becomes a weak point

3 steps

Set Up Portainer at Home

7. Uptime Kuma

A self-hosted monitoring tool that checks your other services and tells you the moment one goes down, or becomes reachable when it should not be.

Simple to set up, checks are configured through the web interface, no config files needed
Can send alerts to email, a phone app or several chat platforms
Doubles as an early warning if a service you expect to be private suddenly becomes reachable from outside

3 steps

Set Up Uptime Kuma at Home

8. Authelia

Sits in front of your other self-hosted apps and adds a proper login screen with two-factor authentication, even for tools that were never built with that in mind.

One login and one set of two-factor codes covers everything behind it, rather than juggling separate logins per app
Genuinely raises the bar for anything reachable from outside your network
Pairs naturally with a reverse proxy, if you have already set one up for another service this slots in alongside it

3 steps

Add a Login Screen to Ollama

9. Nextcloud

Your own private file storage and sync, doing the job of a commercial cloud drive without your files leaving your network.

Supports the same kind of syncing and sharing people are used to from commercial cloud services
You control retention and backups directly, rather than trusting a third party’s policies
Worth pairing with a proper backup plan of its own, self-hosted does not mean automatically backed up

3 steps

10. Suricata

A network intrusion detection engine that watches traffic for known attack patterns, the same job a business-grade firewall appliance does, running on your own hardware.

Heavier to configure than the others on this list, worth tackling once the basics above are already running
Works well paired with OPNsense, which can run Suricata directly as a plugin
A good next step once you are comfortable with what normal traffic on your network actually looks like

3 steps

Where to start

Do not try to run all ten at once. Pi-hole and Vaultwarden give the fastest, lowest-effort improvement for the time invested. OPNsense is the biggest single upgrade but also the biggest change to your network, plan for an evening with it. Wazuh and Suricata are worth saving until the simpler pieces are already bedded in.

Frequently asked questions

Do I need powerful hardware to run these?

No. Most of them, including Pi-hole, Vaultwarden and Uptime Kuma, run comfortably on something as small as a Raspberry Pi or an old laptop. Wazuh and Suricata benefit from a bit more RAM and CPU.

Which one should I set up first?

Pi-hole or AdGuard Home is the easiest starting point with an immediate, visible benefit. Vaultwarden is a close second if you are not already using a password manager.

Is it risky to run security tools I do not fully understand yet?

Running them locally on your own network carries far less risk than exposing services to the internet without understanding them. Start with the tool itself before opening any of it up beyond your home network.

Related guides

Put Smart AI Devices on Their Own Network →
Securing Self-Hosted AI Tools Like Ollama →
Check if Your Home AI Server Is Exposed Online →

Track your AI safety progress. Free.

Create a free account to tick off tasks, see your Security Score improve, and know exactly what you've done and what's still to do.

Start your free security check

← Back to AI Homelab Projects Hub