azerothcore-base
A Docker base image that compiles AzerothCore via the mod-playerbots fork. It includes the mod-playerbots module. Used as a dependency image for the azerothcore image.
azerothcore
A Docker image that runs AzerothCore. It ships a single azerothcore CLI binary that acts as the container entrypoint and dispatches to one of five subcommands: init handles first-run bootstrapping, authserver, worldserver, and dbimport configure their runtime environment and then exec into the corresponding binary, and web serves a small admin UI for account management.
bucket-sync
A Kubernetes controller that automates periodic synchronization between object storage buckets using scheduled or on-demand rclone-based sync jobs. It manages the complete lifecycle of each sync operation — distributed locking to prevent concurrent runs, Kubernetes Job creation and monitoring, and resource cleanup — allowing bucket syncs to be managed declaratively alongside other cluster infrastructure.
dynamic-dns
Periodically detects your public IP address and updates Cloudflare DNS A records to keep them in sync with your dynamic IP. Designed to run in a restricted Kubernetes pod security context — no root access, no filesystem writes, minimal capabilities — making it a safe drop-in replacement for traditional dynamic DNS tools like ddclient.
gateway-route-sync
A Kubernetes controller that automatically generates Gateway listeners from the hostnames and protocols declared in attached routes. By keeping listeners in sync with routes, it eliminates manual listener management and ensures cert-manager can derive TLS certificates for every hostname — even as routes are added or changed.
home-assistant
A Docker image extending the official Home Assistant container with the Frigate NVR integration pre-installed, providing smart home automation with built-in camera and object detection capabilities in a single image. Configured through Home Assistant's native YAML files and UI; no additional runtime environment variables are required beyond those supported by the upstream Home Assistant image.
linstor-provision-disk
An init container for LINSTOR satellite pods that automatically detects when a satellite's ID has changed and reinitializes the storage layer accordingly — cleaning up stale LVM physical volumes, volume groups, and logical volumes before provisioning fresh storage. This makes cluster resets on satellite nodes fully hands-off.
lvm2
A minimal Docker image providing the lvm2 suite of tools (pvcreate, vgcreate, lvcreate, lvextend, etc.), built from source at a pinned version. Used as a dependency image for linstor-provision-disk; not intended to be run standalone.
mdns-reflector
A Kubernetes DaemonSet that forwards mDNS (Multicast DNS) broadcast packets between network interfaces on each node, enabling service discovery to work across network segments that would otherwise be isolated. It runs with minimal privileges (NET_RAW capability only) and supports automatic source interface detection from the default route.
palworld
A Docker image that downloads and runs a Palworld dedicated server (fetched via Steam on first boot and cached), with a small admin web UI for editing gameplay/balance settings and rebooting the server to apply them - without restarting the container. "Server management" settings (SERVERNAME, ADMINPASSWORD, etc.) are set via env var/flag and not editable through the UI, by design; everything else (world/gameplay balance) is edited live through the UI. See the Palworld Server Guide for the full settings reference and REST API docs.
pvc-restore
A Kubernetes controller that automates PVC restoration from volsync backups. Annotate a PVC with a snapshot selector and the controller handles everything: scaling down workloads that use the PVC, syncing backup data via a temporary ReplicationDestination, scaling workloads back up, and cleaning up temporary resources.
router-policy-sync
A Kubernetes controller that synchronizes Cilium network policies with MikroTik router firewall rules. When a CiliumClusterwideNetworkPolicy is annotated for sync, the controller automatically extracts the allowed source IPs, discovers the gateway IP from the matching LoadBalancer service, and keeps the corresponding MikroTik firewall filters, NAT rules, and address lists up to date.
seven-days-to-die
A Docker image that manages a Seven Days to Die dedicated server. Game content and mods are downloaded on first run and cached so subsequent container restarts skip re-downloading. The image handles Steam-based installation, optional mod installation from URLs, deletion of default mods, and configurable auto-restart on a fixed interval.
single-player-tarkov
A Docker image that manages a Single Player Tarkov (SPT) server. Game content and mods are downloaded on first run and cached so subsequent container restarts skip re-downloading. The image handles SPT server installation at a specified version, optional mod installation from URLs, JSON config patching, and preservation of selected data subdirectories across reinstalls.
toolbox
A minimal Docker image based on debian:bookworm-slim that bundles a small set of commonly needed tools. Intended as a lightweight debug or init container where you need basic network and archive utilities without pulling in a full general-purpose base image.
vault-push-secrets
Periodically exports Vault secrets, roles, and policies to a Bitwarden Secrets Manager secret. Its purpose is enabling rapid cluster recovery: a single Bitwarden secret contains everything needed to restore Vault to its previous state.
vault-unseal
A sidecar container that automatically unseals Vault whenever its pod starts, eliminating the need for manual vault unseal commands after pod restarts, node maintenance, or cluster failures. It polls until Vault is reachable, checks the seal status, and unseals using a key file provisioned by an init container, Kubernetes Secret, or persistent volume.