Lin Song

setup-ipsec-vpn. Set up your own IPsec VPN server in just a few minutes, with IPsec/L2TP, Cisco IPsec and IKEv2. Supports Ubuntu, Debian, CentOS/RHEL, Alpine Linux and Raspberry Pi OS. Includes client config and management scripts.

docker-ipsec-vpn-server. Docker image to run an IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2. Auto-generates server config and supports VPN client setup on Linux, Windows, macOS, iOS and Android.

wireguard-install. WireGuard VPN server installer for Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS, Fedora, openSUSE and Raspberry Pi OS. Includes interactive setup and client management.

openvpn-install. OpenVPN server installer for Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS, Fedora, openSUSE, Amazon Linux and Raspberry Pi OS. Includes interactive setup and client management.

setup-ghost-blog. Script to install your own Ghost blog, with Nginx and ModSecurity/Naxsi web application firewall. Supports multiple blogs.

self-hosted-ai-stack. Deploy a complete self-hosted AI stack with Docker Compose: Ollama, LiteLLM, AnythingLLM, Whisper, WhisperLive, Kokoro, Embeddings, Docling and MCP Gateway. Local-first, private by default, with lightweight stacks, optional HTTPS and NVIDIA CUDA acceleration. Multi-arch: amd64, arm64.

docker-whisper. Docker image for a self-hosted Whisper speech-to-text server with speaker diarization and OpenAI-compatible transcription and translation APIs. Powered by faster-whisper. Supports all Whisper models, NVIDIA GPU (CUDA) acceleration, JSON/SRT/VTT output, SSE streaming, offline mode, and multi-arch (amd64, arm64).

docker-kokoro. Docker image to run a self-hosted Kokoro TTS server with an OpenAI-compatible audio speech API. 50+ voices across 9 languages, streaming support, all major audio formats, NVIDIA GPU (CUDA) acceleration, offline mode, and persistent model cache. Multi-arch: amd64, arm64.

vpn-extras. Extra files for VPN projects

docker-openvpn. Docker image to run an OpenVPN server with automatic PKI setup and client config generation. Managed via a helper script. Based on Alpine Linux with OpenVPN and EasyRSA. Supports amd64, arm64 and arm/v7.

docker-whisper-live. Docker image for a self-hosted WhisperLive real-time speech-to-text server, powered by faster-whisper. Provides WebSocket streaming for live audio transcription and an OpenAI-compatible REST API. Supports all Whisper models, VAD, NVIDIA GPU (CUDA) acceleration, offline mode, and multi-arch (amd64, arm64).

docker-wireguard. Docker image to run a WireGuard VPN server. Auto-generates server and client configs on first start, with QR code for easy mobile setup. Client management via a helper script. Supports amd64, arm64 and arm/v7.

docker-headscale. Docker image to run a Headscale server, a self-hosted, open-source Tailscale-compatible mesh VPN coordination server. Auto-generates config and pre-auth key on first start. MagicDNS support, helper script for user/node management. Multi-arch: amd64, arm64.

headscale-install. Headscale server installer for Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS, RHEL, Fedora and openSUSE. Set up your own self-hosted Tailscale-compatible coordination server in minutes.

docker-litellm. Docker image for a self-hosted LiteLLM AI gateway proxy. Unified OpenAI-compatible API for 100+ LLM providers. Features auto-config on first start, virtual key management, spend tracking, and persistent data via Docker volume.

docker-ollama. Docker image to run an Ollama local LLM server. Secure by default, all API requests require a Bearer token (auto-generated on first start). OpenAI-compatible API. Supports first-start model pre-pull, NVIDIA GPU (CUDA) acceleration, and persistent model storage. Multi-arch: amd64, arm64.

whisper-install. Whisper speech-to-text server installer for Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS, RHEL and Fedora. OpenAI-compatible transcription and translation APIs powered by faster-whisper. Supports all Whisper models, word-level timestamps, JSON/SRT/VTT output, SSE streaming and offline mode.

docker-embeddings. Docker image to run a self-hosted text embeddings and reranking server powered by Hugging Face TEI, with an OpenAI-compatible API. Supports BGE, Nomic, MiniLM and other models. Features optional reranking via cross-encoder models, API key auth, model management, offline/air-gapped mode, and persistent model cache.

docker-docling. Docker image for a self-hosted Docling document parsing server. Converts PDF, DOCX, PPTX, HTML, and more to Markdown/JSON. Powered by IBM Docling. Features sync/async conversion, chunking for RAG, NVIDIA GPU (CUDA) acceleration, optional web UI, offline mode, and persistent model cache. Multi-arch: amd64, arm64.

docker-mcp-gateway. Docker image to run a self-hosted MCP (Model Context Protocol) gateway with Bearer token auth. Multi-server hub powered by MCPHub + Caddy. Streamable HTTP + SSE transport. Access filesystem, fetch, GitHub, Brave Search, Git, PostgreSQL, memory, and more from a single endpoint. Multi-arch: amd64, arm64.

badges.

ai-stack-extras. Extra files for AI stack projects