Charts

166 charts

Hardened Helm charts

Each chart deploys our hardened image pinned by its signed digest, with sensible production defaults. Cosign-signed and published as an ArtifactHub verified publisher. 166 charts.

D 44
n8n
Fair-code workflow automation platform — build integrations and automations across 400+ apps via a visual node editor, with native AI/LLM agent…
chart v · app v2.32.7
WorkflowstandardLicenseRef-n8n-Sustainable-Use-License-1.0
C 3
NATS
Lightweight, high-performance messaging system for cloud-native pub/sub and request-reply, with optional JetStream persistence and streaming.
chart v · app v2.14.5
MessagingstandardApache-2.0
A 1
navidrome
Self-hosted music server and streamer compatible with the Subsonic/OpenSubsonic API, with a modern web UI. From source (React UI embedded,…
chart v · app v0.64.0
Media & streamingstandardGPL-3.0
F 7
Neo4j
Graph database for highly connected data, queried with Cypher for traversals and relationship-heavy workloads. Community edition is GPLv3.
chart v · app v2026.05.0
GraphlowGPL-3.0
C 8
nextcloud
Nextcloud, the self-hosted file-sync and content-collaboration platform. Reconstructed clean-room on a hardened Wolfi php-8.4-fpm + nginx runtime…
chart v · app v34.0.3
Apps & productivitystandardAGPL-3.0
C 5
nginx
High-performance web server, reverse proxy, and load balancer for serving static content and fronting application backends.
chart v · app v1.30.4
GatewaycriticalBSD-2-Clause
A+
nginx-gateway-fabric
NGINX Gateway Fabric control plane: the F5/NGINX Gateway API implementation. Watches GatewayClass, Gateway, HTTPRoute and its own gateway.nginx.org…
chart v · app v2.6.7
GatewaystandardApache-2.0
A+
nsq
Realtime distributed messaging platform. Ships nsqd, nsqlookupd, and nsqadmin as static Go binaries on a hardened nonroot Wolfi base; nsqd data path…
chart v · app v1.3.0
MessagingstandardMIT
C 6
ntfy
Simple HTTP-based pub-sub notification service for sending push notifications to phones and desktops from any script. From source with the web UI…
chart v · app v2.28.0
MessagingstandardApache-2.0
A 1
oauth2-proxy
Reverse-proxy authentication layer that secures upstream apps by delegating sign-in to OIDC and OAuth2 providers.
chart v · app v7.15.4
Secrets & identitystandardMIT
0 CVE
observability-stack
Hardened, operator-free observability stack: Prometheus + Grafana + Alertmanager + kube-state-metrics + node-exporter + cAdvisor, wired together for…
chart v0.0.14 · app v2.20.0
StacksstandardUnknown
A 1
ollama
Local LLM runtime that pulls, runs, and serves open models (Llama, Gemma, Qwen, DeepSeek, and more) behind a simple REST API. CPU-only image; the…
chart v · app v0.34.0
Machine learning & AIstandardMIT