Most Popular Self-Hosted AI Apps

Ranked landscape for the June–September 2026 window, with homelab fit and adoption best practices for a guard-chained Podman/Quadlet fleet.

Date 2026-09-22 Stars + licenses GitHub API, 2026-09-22 Trend signal release cadence, Jun–Sep 2026 Fleet 2× GPU servers + macOS mini

The self-hosted AI stack in mid-2026 consolidated into a few very large, very active projects, and the center of gravity shifted hard toward agents over the last quarter. Star counts are exact (GitHub API, 2026-09-22); "trending" is evidenced by release activity dated June–September 2026, since GitHub does not expose star-growth rate.

390,235
OpenClaw — most-starred, fastest-growing repo; 2.0 shipped 2026-09-01
15
apps ranked, all with Jun–Sep 2026 release activity
5
audio honorable mentions (TTS/STT)
11
adoption best practices for a guard-chained homelab

Summary

1. Agents are the category of 2026. OpenClaw (390,235★, MIT) is the single most-starred self-hosted AI project and the fastest-growing repo on GitHub; it shipped a major 2.0 rewrite on 1 September 2026 (933 contributors, 16,000+ PRs). Nous Research's Hermes Agent (247,907★, MIT) is a close second and releases weekly. Both are model-agnostic orchestration layers that run on your own hardware and can point at local llama.cpp/vLLM/Ollama endpoints.

2. The inference + UI layer is mature and huge. Ollama (181,444★), llama.cpp (129,149★), and vLLM (92,405★) are the runtimes; Open WebUI (152,784★) is the dominant chat UI; ComfyUI (134,407★, GPL-3.0) is the dominant image/video-gen GUI. All release frequently in the window.

3. RAG/agent-platforms and the audio stack round out the field. Dify (156,835★), RAGFlow (91,138★), AnythingLLM (66,318★) for RAG/workflows; whisper.cpp (53,852★) + faster-whisper (25,512★) for STT; Chatterbox (26,515★), Piper (11,287★), Kokoro-82M (8,933★) for TTS; Unsloth (76,560★) for fine-tuning.

Strongest fits for this fleet: Open WebUI (chat UI over the existing llama.cpp/vLLM endpoints), ComfyUI (image gen, already integrated with Open WebUI), Ollama (OpenAI-compatible runtime), Dify and RAGFlow (RAG/agent platforms), and whisper.cpp / Piper / Kokoro for a local voice stack. OpenClaw and Hermes are the highest-buzz new arrivals, well-suited to a homelab server, with the caveat that they are tool/shell-access agents and need the strongest isolation.

Ranked List — Top 15 by Popularity

OpenClaw
390.2k
Hermes Agent
247.9k
Ollama
181.4k
Dify
156.8k
Open WebUI
152.8k
ComfyUI
134.4k
llama.cpp
129.1k
vLLM
92.4k
RAGFlow
91.1k
LobeChat
82.7k
Unsloth
76.6k
AnythingLLM
66.3k
whisper.cpp
53.9k
LibreChat
44.6k
Tabby
33.9k
#AppCategoryStarsLicenseLatest in window
1OpenClawAgents390,235MITv2026.9.5 (09-19); 2.0 (09-01)
2Hermes AgentAgents247,907MITv2026.9.21 (09-21)
3OllamaLLM runtime181,444MITactive (pushed 09-21)
4DifyAgent platform / RAG156,835Modified Apache-2.01.17.1 (09-10)
5Open WebUIChat UI152,784Open WebUI License (BSD-3)v0.11.4 (09-21)
6ComfyUIImage / video gen134,407GPL-3.0v0.37.0 (09-21)
7llama.cppLLM runtime129,149MITactive (pushed 09-22)
8vLLMLLM inference engine92,405Apache-2.0active (pushed 09-22)
9RAGFlowRAG engine91,138Apache-2.0v0.27.2 (09-10)
10LobeChatChat UI / agent ops82,748LobeHub Community Licenseactive (pushed 09-22)
11UnslothFine-tuning76,560Apache-2.0active (pushed 09-22)
12AnythingLLMRAG / local agent66,318MITactive (pushed 09-21)
13whisper.cppSpeech-to-text53,852MITactive (pushed 09-22)
14LibreChatChat UI44,608MITactive (pushed 09-22)
15TabbyAI coding assistant33,889Apache-2.0 (ee/ separate)last push 2026-06-30

Per-App Breakdown

OpenClaw ISOLATE

390,235★ · MIT · Agents

Self-hosted personal AI agent / orchestration layer (not a model). Connects to cloud APIs, subscriptions, API providers, and local models; drives files, browser, terminal/shell, and messaging channels. 2.0 rebuilt the browser app as the primary interface, added shared cloud sessions, simplified onboarding. Node 24 (22.14+) + Docker; minimal footprint for API-based LLMs (2 vCPU / 2–4 GB RAM). Caveat: community reaction to 2.0 was mixed — migration problems, broken gateways, lost automations, model-auth issues (InfoQ). Tool/shell-access agent → strongest isolation.

Hermes Agent ISOLATE

247,907★ · MIT · Agents

Nous Research's personal agent, centered on persistent memory and cross-platform messaging (Mac, iOS, web, voice, email, Telegram, Slack). Model-agnostic; Docker/Podman; config in ~/.hermes/config.yaml. Releases weekly. Tool-access agent → isolate. Already on this fleet (see [[Hermes]] in the vault).

Ollama EXCELLENT

181,444★ · MIT · LLM runtime

The de-facto standard local LLM runtime; OpenAI-compatible API (default :11434) that nearly every app in this list consumes. The default provider for JobSync, Resume Matcher, AnythingLLM, and more. The easiest way to expose local models to other containers.

Dify GOOD

156,835★ · Modified Apache-2.0 · Agent platform / RAG

Full LLMOps/agent platform: prompt IDE, RAG pipeline, agent/workflow builder, model management. docker compose full stack. Modified Apache-2.0: commercial use allowed, but multi-tenant operation requires a commercial license (one tenant = one workspace) — fine for a single-workspace homelab.

Open WebUI EXCELLENT

152,784★ · Open WebUI License (BSD-3) · Chat UI

The dominant ChatGPT-style chat UI: multi-user auth, model switching, tools, pipelines, RAG, image gen (ComfyUI as engine), agents. Single container; connect to Ollama / llama.cpp / vLLM via base-URL. Already this fleet's chat frontend, wired to ComfyUI for image gen.

ComfyUI EXCELLENT

134,407★ · GPL-3.0 · Image / video gen

Node-based image and video generation (SD/SDXL/Flux/LLaDA/Qwen-Image). The most popular local image-gen frontend in 2026. Repo moved to the Comfy-Org org. Already running on this fleet (Qwen-Image 2.1 GGUF) and wired as the Open WebUI image engine.

llama.cpp EXCELLENT

129,149★ · MIT · LLM runtime

The reference GGUF inference engine; llama-server exposes an OpenAI-compatible endpoint. Backbone of this fleet's frank-small/frank-large endpoints. Runs on CPU, CUDA, ROCm, Vulkan, Metal.

vLLM EXCELLENT

92,405★ · Apache-2.0 · LLM inference engine

High-throughput PagedAttention serving with an OpenAI-compatible API; the multi-GPU option (frank-medium runs vLLM tensor-parallel across two R9700s).

RAGFlow GOOD

91,138★ · Apache-2.0 · RAG engine

RAG engine with deep document understanding (PDFs, spreadsheets, scans) and source citations. docker compose full stack; runs fully against local models (Ollama). Budget disk for the document index.

LobeChat GOOD

82,748★ · LobeHub Community License · Chat UI / agent ops

Polished chat UI grown into an agent-operations layer (plugins, agents, scheduled tasks). LobeHub Community License: commercial use allowed, but distributing a derivative requires a commercial license.

Unsloth ONE-OFF

76,560★ · Apache-2.0 · Fine-tuning

The leading open-source fine-tuning library (LoRA/QLoRA/SFT) + GGUF quantization + a local run/train UI. GPU required; a batch job, not a long-running service. Run transiently on a GPU server, then serve the resulting GGUF via llama.cpp.

AnythingLLM GOOD

66,318★ · MIT · RAG / local agent

Local-first RAG + agent workspace: document ingestion, chat over your data, agent mode, multi-user. Ollama first-class. Single container, low footprint — a good local RAG entry point.

whisper.cpp GOOD

53,852★ · MIT · Speech-to-text

OpenAI Whisper in C/C++; lightweight fully-local STT on CPU / Metal / CUDA; whisper-server for an HTTP API. No cloud, no telemetry. Put it behind Caddy for a LAN transcription API.

LibreChat GOOD

44,608★ · MIT · Chat UI

Multi-provider, multi-user chat UI with agents, MCP, and actions. docker compose (app + MongoDB + Redis).

Tabby GOOD

33,889★ · Apache-2.0 (ee/ separate) · AI coding assistant

Self-hosted AI coding assistant (Copilot-style) against your own models. Apache-2.0 core; ee/ directory under a separate enterprise license. Last push 2026-06-30 (quieter since).

Audio honorable mentions (TTS/STT)

AppCategoryStarsLicense
ChatterboxTTS26,515MIT
faster-whisperSTT25,512MIT
Piper TTSTTS11,287MIT
Kokoro-82MTTS8,933Apache-2.0
MisoTTSTTS3,239Modified MIT

Homelab Fit (Podman/Quadlet + Caddy + local LLM endpoints)

AppFitNotes for this fleet
Open WebUIEXCELLENTSingle container; point at existing llama.cpp/vLLM/Ollama via base-URL. Already the fleet's chat frontend.
ComfyUIEXCELLENTGPU container (already running for Qwen-Image 2.1 GGUF). Serves the Open WebUI image-gen path.
OllamaEXCELLENTEasiest OpenAI-compatible runtime for the other apps; expose on LAN / host.containers.internal.
DifyGOODcompose → Quadlet. Multi-tenant restriction moot for single-workspace. Heavier stack (DB + Redis + vector store).
RAGFlowGOODcompose → Quadlet. Runs fully against local models. Budget disk for the document index.
AnythingLLMGOODSingle container, Ollama-first, low footprint. Good local RAG entry point.
LibreChatGOODcompose (app + Mongo + Redis) → Quadlet. Multi-user, MCP/agents.
LobeChatGOODSingle Postgres-backed container. Watch the Community License if redistributing a derivative.
whisper.cpp / faster-whisperGOODLightweight STT; whisper-server behind Caddy for a LAN transcription API. CPU-fine.
Piper / Kokoro / ChatterboxGOODLocal TTS; pair with whisper.cpp for a fully-local voice loop. Chatterbox wants a GPU; Piper/Kokoro run on CPU.
TabbyGOODcompose → Quadlet; self-hosted coding assistant against local models.
UnslothONE-OFFFine-tuning is a batch job, not a service. Run transiently, then serve the GGUF via llama.cpp.
OpenClaw / HermesISOLATENode.js / container agent pointing at local LLMs. Highest buzz, but tool/shell access — non-root, restricted network, vetted skills, behind the guard chain.
GPU co-tenancy note: ComfyUI, vLLM, Unsloth, and Chatterbox all want VRAM. Size new containers against the existing LLM endpoints' held VRAM to avoid OOMing a production endpoint. The macOS mini is a natural home for the low-footprint, CPU-friendly apps (Open WebUI, AnythingLLM, whisper.cpp, Piper/Kokoro, LibreChat, LobeChat) via Metal-backed llama.cpp/Ollama.

Best Practices — Adopting a New App Into a Guard-Chained Homelab

  1. Route everything through the existing guard chain. Put the app behind Caddy under the same Anubis+Authentik chain the fleet runs. Do not expose a new port directly; use the published-port cutover gate (confirm the port is free before starting, or pasta's bind fails and the failure hides behind Restart=on-failure).
  2. Enable app-native auth and add SSO on top. Turn on the app's built-in multi-user auth and gate it with Authentik SSO at the proxy. Defense in depth: the app's session + the outpost's claim-based auth.
  3. Prefer local endpoints for the AI; keep PII on-prem. Point RAG/chat/agent apps at local llama.cpp/vLLM/Ollama (base-URL override) so prompts and documents never leave the LAN. Reach the host runtime via host.containers.internal, not localhost.
  4. Use Quadlet for boot persistence. Convert every compose/docker run to Quadlet units. Remember the anonymous-volume trap — use named volumes for all app data.
  5. Pin image tags and track release notes. The window's clearest lesson: OpenClaw 2.0 (2026-09-01) caused migration problems, broken gateways, and lost automations for some users. Pin tags, read release notes, stage upgrades (test on the mini / a spare server first).
  6. Isolate agents aggressively. OpenClaw and Hermes have tool/shell/browser access. Non-root, restricted network, vetted skills/plugins only (supply-chain risk), full logging of tool execution.
  7. Treat ingested content as untrusted (prompt injection). RAG and agent apps ingest documents/web pages. Keep a human review step before any action; scope agent tool access to the minimum.
  8. Protect the secrets the app stores. API keys in env vars (or a vault), never committed. For apps that encrypt stored keys, set the encryption key before adding keys, never change it after.
  9. Budget VRAM and co-tenancy. Measure a new GPU container's VRAM against the endpoints already resident on the card.
  10. Back up the data volumes. Snapshot the app's data volume; agents store memory/state that is expensive to rebuild.
  11. Mind the license. ComfyUI is GPL-3.0; Dify and LobeChat are modified-Apache with multi-tenant / derivative restrictions; Tabby has an ee/ directory. Fine for a single-workspace, non-redistributed homelab, but note them before derivative work.