The XDA piece on replacing an outdated self-hosted stack lands because most of us have exactly that stack: a Nextcloud install from 2019, a Piwigo gallery no one has opened in two years, a stubborn ownCloud volume that will not die. Each one worked well enough at the time, but 2026 has real replacements that boot in seconds, get updates weekly, and do the same job with a fraction of the babysitting.
We tested seven modern self-hosted apps in 2026 that either drop in for legacy tools or take over jobs your current stack barely handles. Every pick has been released or matured within the last two years, ships regularly, and slots into a Docker Compose file next to what you already run.
What to look for in a refreshed self-hosted app
- Release cadence. A project shipping monthly and answering issues is a project that will be here in three years. Anything last released in 2023 belongs on the “polite but no” list.
- Docker Compose first. If the install docs open with a page-long systemd config, expect a bad time. Every pick below drops into Compose with one file.
- Real migration paths. Immich imports from Google Photos and Nextcloud; Vaultwarden speaks the Bitwarden API; Karakeep imports from Hoarder, Raindrop, and Pocket. Migration is where “modern” earns its name.
- Cold-boot resource use. On a $100 mini-PC, RAM matters. Every pick below runs on a Raspberry Pi 5 or a low-power Intel N100 mini-PC without complaint.
- Auth story. If the app supports Pocket ID or Authelia, one login covers your whole stack. That is table stakes now.
Quick comparison
| App | Replaces | Docker Compose | Native mobile | Rough RAM |
|---|---|---|---|---|
| Immich | Google Photos, Nextcloud Photos, PhotoPrism | Yes | iOS, Android | 1 GB |
| Karakeep | Hoarder, Pocket, Raindrop | Yes | iOS, Android | 300 MB |
| Vaultwarden | Bitwarden self-hosted | Yes | Any Bitwarden client | 60 MB |
| Pocket ID | Authelia, Authentik lite | Yes | Passkey-first | 60 MB |
| Actual Budget | Firefly III, YNAB | Yes | iOS, Android | 200 MB |
| Dozzle | Portainer container logs | Yes | Web only | 20 MB |
| Coolify | Traefik plus Portainer plus Nginx Proxy Manager | Yes | Web only | 400 MB |
The 7 best apps for refreshing an outdated self-hosted stack
1. Immich — best replacement for Nextcloud Photos, PhotoPrism, Google Photos
Immich is the photo-management app that finally beat the “just leave it on Google Photos” argument. Face grouping runs on device metadata; the mobile app auto-uploads exactly like Google Photos; the web UI is fast, clean, and searchable. The 2026 releases marked it as production-ready, and the migration importer for Google Takeout and Nextcloud is now reliable.
Where it falls short: ML backend needs decent CPU (or a GPU); face grouping on a Pi 5 works but takes days to catch up. First-time indexing is slow on huge libraries.
Pricing: Free and open source (AGPL-3.0).
Platforms: Linux, Docker; clients for iOS and Android.
Download: immich.app · GitHub
Bottom line: The photo stack you already wish you had. Priority upgrade over Nextcloud Photos and PhotoPrism.
2. Karakeep — best replacement for Hoarder, Pocket, Raindrop
Karakeep (formerly Hoarder) is the bookmark-and-read-later app that captures full-page snapshots, extracts key details with a local LLM, and organises everything by tags and lists. The rename came with a rewrite; the mobile share sheet actually works; and imports from Pocket (RIP), Raindrop, and Hoarder land cleanly.
Where it falls short: LLM features need a local Ollama or a hosted key to shine. Without one, the app still works but tag suggestions are manual.
Pricing: Free and open source (AGPL-3.0).
Platforms: Docker; mobile apps for iOS and Android.
Download: karakeep.app · GitHub
Bottom line: The bookmark app worth committing to after Pocket’s shutdown.
3. Vaultwarden — best replacement for legacy Bitwarden self-host
Vaultwarden is the unofficial Rust reimplementation of the Bitwarden server that has become the default for self-hosted password management. A single container, sub-100 MB of RAM, and every official Bitwarden client (browser, mobile, desktop) connects to it. Includes SSO, Yubikey, and passkey support.
Where it falls short: Not officially blessed by Bitwarden; some enterprise features are stubbed. Not a concern for personal or small-team use.
Pricing: Free and open source (AGPL-3.0).
Platforms: Docker on any OS.
Download: github.com/dani-garcia/vaultwarden
Bottom line: The lightest, easiest self-hosted password manager going. Zero regret.
4. Pocket ID — best replacement for a legacy auth server
Pocket ID is a purpose-built passkey-first SSO server for homelab. It shipped in 2025 and became a defining tool in 2026 because it does exactly what most self-hosters need (one login across services, WebAuthn, OIDC), and skips the Authelia or Authentik configuration mountain.
Where it falls short: Small feature surface: no user directory, no complex policy engine. If you need those, Authentik is still the pick.
Pricing: Free and open source (BSD-3.0).
Platforms: Docker on any OS.
Download: pocket-id.org · GitHub
Bottom line: The auth server for people who want SSO without spending a Saturday configuring it.
5. Actual Budget — best replacement for Firefly III
Actual Budget is the envelope-budget app that runs entirely on your server, syncs to iOS and Android, and imports Firefly III and YNAB CSVs. It shipped its 2026 milestone with a rewritten sync engine and native passkey support.
Where it falls short: No bank sync out of the box; you import statements manually or run a bank-scraper container next to it (GoCardless integration if you are in Europe).
Pricing: Free and open source (MIT).
Platforms: Web, iOS, Android, Docker.
Download: actualbudget.org · GitHub
Bottom line: The best free envelope budget you can host, period.
6. Dozzle — best replacement for Portainer logs
Dozzle is a real-time container log viewer in a web UI. It boots in a second, uses 20 MB of RAM, and is often the answer to “why did I install Portainer for this?” for people who only wanted to tail logs. The 2026 releases added multi-host mode; one Dozzle can now see logs across every Docker host on your LAN.
Where it falls short: Logs only. No container start/stop from the UI (deliberately).
Pricing: Free and open source (MIT).
Platforms: Docker on any OS.
Download: dozzle.dev · GitHub
Bottom line: Install alongside your existing Portainer or replace it if logs were 90 percent of your usage.
7. Coolify — best replacement for Traefik plus Portainer plus Nginx Proxy Manager
Coolify is the self-hosted Heroku-alike that took over the “PaaS for homelab” niche in 2025. Git push, TLS certs, reverse proxy, container orchestration, and backups behind one dashboard. It replaces the trio of Traefik plus Portainer plus Nginx Proxy Manager for most solo homelab operators.
Where it falls short: All-in-one tools are all-in-one problems: if something breaks, the blast radius is bigger than three focused tools. Backup Coolify carefully.
Pricing: Free self-hosted; a paid cloud version exists for people who want managed.
Platforms: Linux; Docker.
Download: coolify.io · GitHub
Bottom line: The single best “start over” upgrade if your reverse proxy plus container UI plus letsencrypt setup is held together with tape.
How to pick the right one
- Photos on Google or old PhotoPrism: Immich.
- Bookmarks anywhere else: Karakeep.
- Passwords with any legacy self-hosted setup: Vaultwarden.
- Any legacy Authelia or plain HTTP basic auth: Pocket ID.
- Budgeting anywhere: Actual Budget.
- You touch Portainer only for logs: Dozzle.
- Duct-taped Traefik plus Portainer plus Nginx Proxy Manager: Coolify.
FAQ
Can I run these alongside my existing tools during migration?
Yes. Every pick is a separate container. Bring Immich up next to Nextcloud, migrate a couple of years of photos, verify, then decommission the old stack. Same pattern for the rest.
Do these apps work behind a reverse proxy?
Every one of them is designed to sit behind Traefik, Caddy, Nginx Proxy Manager, or Coolify’s built-in proxy. HTTPS is expected in production.
Is Immich a real replacement for Google Photos?
Feature-for-feature, close enough. Face recognition, search by object and location, shared albums, memories, and auto-upload all work. The one caveat is ML backend performance on low-end hardware.
What is the lightest option on this list?
Dozzle at around 20 MB of RAM. Pocket ID and Vaultwarden are close behind.
Can Coolify manage my other containers?
Yes. Coolify treats external Docker services as first-class citizens, so you can migrate services into it one at a time rather than all at once.
