For anyone passionate about digital sovereignty and homelabbing, setting up a private home server on a Single Board Computer (like a Raspberry Pi 5, Orange Pi) or a Proxmox home lab is one of the most rewarding engineering projects.
However, anyone who has managed a growing homelab knows the friction that comes with it:
docker-compose.yml files
To solve this, I built NjordDeploy — a lightweight, agentless, metadata-driven deployment orchestrator with 100 tested, production-ready service templates, dual Docker/Rootless Podman support, and a 100% Local AI component generator (Ollama & European sovereign AI).
In this article, I want to share the architectural decisions, lessons learned, and why treating container stacks as "vessels steered into a safe home port" shaped this open-source project.
In Norse mythology, Njörðr (Njord) is the god of the sea, seafaring, wind, and calm, safe harbors (from his mythological haven Nóatún, "haven of ships").
In modern DevOps, nautical metaphors are everywhere:
NjordDeploy carries this tradition forward: it acts as your sovereign navigator, steering your container stacks, storage volumes, and reverse proxies safely through turbulent technical waters and docking them cleanly into the calm harbor of your own private server.
NjordDeploy is the continuation of the PiSelfhosting project I started more than a year ago. I also started the Sovereign Stack Project, also on Github as a testing environment for PiSelfhosting.
As the project got bigger and bigger, I needed another name as the project is not only for the Rasberry Pi.
One of the most important architectural rules of NjordDeploy is Target Purity:
+-------------------------------------------------------------+
| Control Machine (Laptop / PC / Workstation) |
| - NjordDeploy 3-in-1 Suite (Configurator, Editor, Web UI) |
| - Local AI Engine (Ollama: Llama 3 / Mistral / Loes.ai) |
| - Deterministic Jinja2 Macro Renderer & Port Manager |
+-------------------------------------------------------------+
|
[Agentless SSH Tunnel]
|
+-------------------------------------------------------------+
| Target Server (Raspberry Pi / Orange Pi / Proxmox VM / LXC) |
| - NO background agents / NO custom background daemons |
| - NO Python runtime requirements on host |
| - Pure Docker CE or Rootless Podman Engine |
| - Standard Docker Compose / Podman Compose stacks |
+-------------------------------------------------------------+
docker compose up -d commands.
Starting from a small set of basic utilities, the NjordDeploy catalog recently expanded to 100 fully verified and tested service templates across 8 core domains:
| Category | Popular Examples Included |
|---|---|
| Media & Entertainment | Jellyfin, Audiobookshelf, Immich, Navidrome, Radarr, Sonarr, Prowlarr, SABnzbd, Calibre-Web |
| Smart Home & IoT | Home Assistant, Zigbee2MQTT, Frigate (AI NVR), Scrypted, ESPHome, Node-RED, UniFi Controller |
| Productivity & Cloud | Nextcloud, Paperless-ngx, Stirling PDF, Actual Budget, Vikunja, Focalboard, Flatnotes, Mealie |
| AI & LLM Services | Open WebUI, Ollama LLM Engine, LiteLLM AI Gateway, LibreChat, Voicebox TTS/STT, n8n |
| Privacy & DNS | AdGuard Home, Pi-hole, Technitium DNS, Unbound DNS, Vaultwarden |
| Monitoring & System | Uptime Kuma, Netdata, Beszel, Grafana Stack, Prometheus, Portainer, Dockge, Semaphore UI |
| Reverse Proxies | Traefik, Caddy, Nginx Proxy Manager |
| Utilities & Storage | MinIO S3, Syncthing, Headscale, Changedetection.io, CyberChef, IT-Tools, SearXNG, Gotify |
Every component includes automated volume path resolution (/var/njorddeploy/volumes), deterministic port conflict avoidance, healthchecks, and optional reverse proxy domain binding with automated Let's Encrypt certificates.
What happens when you want to self-host a brand new open-source repository that isn't in any template catalog yet?
Traditionally, you'd have to read the repo's README, hunt down container image tags on Docker Hub, figure out environment variables, port conflicts, volume permissions, and write YAML by hand.
NjordDeploy solves this with an AI-Assisted Component Generator designed for strict data sovereignty:
[ Git URL (GitHub / GitLab / Gitea / Forgejo) ]
│
▼
[ Deep Context Ingestion (README, Compose, OCI Tags) ]
│
▼
[ Strict "Air Traffic Control" Validation Prompt ]
│
▼
[ Local LLM: Ollama (Llama 3, Mistral, Qwen) OR Loes.ai (EU) ]
│
▼
[ Automated OCI Registry Verification & Jinja2 Template Output ]
To ensure that service templates work reliably across different operating environments, we built an automated 4-Way Cross-Validation Testing Matrix on Proxmox VE:
┌───────────────────────┬────────────────────────┐
│ Docker CE Engine │ Rootless Podman Engine │
┌─────────────────┼───────────────────────┼────────────────────────┤
│ Debian 12 LXC │ Run 1: Docker on LXC │ Run 2: Podman on LXC │
├─────────────────┼───────────────────────┼────────────────────────┤
│ QEMU Linux VM │ Run 3: Docker on VM │ Run 4: Podman on VM │
└─────────────────┴───────────────────────┴────────────────────────┘
Each of the 100 templates undergoes automated lifecycle testing:
NjordDeploy is free for self-hosting and homelabs (BSL-1.1 licensed) and available as a portable standalone application for Linux, macOS, and Windows.
I would love to hear your thoughts and feedback! What self-hosted services are you running in your homelab, and what templates would you like to see added next?