Collection of Helm charts for self-hosted applications in my personal homelab. These charts are designed for Kubernetes deployments with focus on simplicity, security and functionality.
Add the repository to your Helm:
# Add the repository
helm repo add cubancodelab https://helms.cubancodelab.net
# Update repositories
helm repo update
| Chart | Description | Version | App Version |
|---|---|---|---|
| actual-server | Self-hosted personal finance management with Actual Budget (supports OpenID Connect) | 0.2.0 | 25.8.0 |
| bazarr | Subtitle management for TV shows and movies, companion to Sonarr/Radarr | 0.1.0 | latest |
| flaresolverr | Cloudflare bypass proxy for indexers with headless browser automation | 1.0.0 | latest |
| pihole | Network-wide DNS ad-blocker with DNSCrypt-proxy integration | Latest | 2025.08.0 |
| prowlarr | Centralized indexer manager for all *arr applications | 0.1.0 | latest |
| qbittorrent | Secure BitTorrent client with integrated NordVPN for safe downloading | 0.2.0 | 5.1.2 |
| radarr | Movie collection manager with simplified media volume configuration | 0.2.0 | latest |
| sonarr | TV series collection manager with automated episode monitoring | 0.1.0 | latest |
Deploy your own personal finance management system:
# Basic installation
helm install actual-budget cubancodelab/actual-server
# With custom domain and TLS
helm install actual-budget cubancodelab/actual-server \
--set ingress.host=budget.yourdomain.com \
--set ingress.tls.enabled=true
# With persistent storage
helm install actual-budget cubancodelab/actual-server \
--set persistence.enabled=true \
--set persistence.size=10Gi
# With OpenID Connect authentication
helm install actual-budget cubancodelab/actual-server \
--set actualBudget.loginMethod=openid \
--set actualBudget.openid.enabled=true \
--set actualBudget.openid.discoveryUrl="https://auth.example.com/.well-known/openid_configuration" \
--set actualBudget.openid.clientId="your-client-id" \
--set actualBudget.openid.serverHostname="https://budget.yourdomain.com"
Deploy network-wide ad-blocking with encrypted DNS:
# Basic installation
helm install pihole cubancodelab/pihole
# With custom domain and static IP
helm install pihole cubancodelab/pihole \
--set ingress.host=dns.yourdomain.com \
--set services.dns.loadBalancerIP=192.168.1.100 \
--set password.value=MySecurePassword
# Without DNSCrypt-proxy sidecar
helm install pihole cubancodelab/pihole \
--set sidecar.dnscrypt.enabled=false \
--set config.dnsUpstreams="8.8.8.8,1.1.1.1"
Each chart includes:
Feel free to submit issues and enhancement requests. This is a personal homelab setup, but contributions are welcome.
All charts follow Kubernetes security best practices: