Atomic, durable file writes for Go: temp -> fsync -> rename with path validation

Composable auth for Go web services: sessions, API keys, passwords, OIDC, WebAuthn/passkeys

Automatically converts PEM certificates to PFX format whenever they renew — set it and forget it

Shared reusable GitHub Actions workflows, composite actions, and canonical lint/format configs

Decrypt age-encrypted .env files in your repo at deploy time — Go binary on distroless

Caddy with Cloudflare DNS-01 and CrowdSec bouncer plugins, built with xcaddy

Find and deduplicate files on a schedule — reclaim wasted disk space automatically

Minimal Alpine image for keepalived (VRRP failover/HA) — bring your own keepalived.conf

Monitor your UPS and let networked machines shut down gracefully during power outages

Minimal Alpine image for radvd (IPv6 Router Advertisement Daemon) with HA-aware entrypoint

Always-on Renovate in a Go scheduler wrapping the official image — interval or exec-triggered

Scheduled rsync+ssh push of local dirs to a remote — Go scheduler on Alpine, interval or exec-run

Point all your services at one container for outbound email — no per-app SMTP setup needed

Tiny ~30 KB static file server — darkhttpd, statically compiled with hardening flags, on scratch

Zero-dependency health-check endpoint and marker-file probe for Go services

Resilient outbound HTTP for Go: retry, jittered backoff, Retry-After, transient-error classification

Zero-dependency Prometheus text-format metrics for Go

On-demand PostgreSQL backup sidecar: verified network pg_dump, no root, no Docker socket.

See what your Plex server is doing in Grafana — sessions, libraries, bandwidth, transcoding

Set preferred audio and subtitle languages per show — every new episode follows automatically