Authentik
Full-featured identity provider: OIDC, SAML, LDAP outpost, and a visual flow builder.
Requires: Redis
Authelia
Lightweight single sign-on and 2FA portal that sits in front of your other apps.
Paperless-ngx
Scans, OCRs, and indexes documents so paper stops piling up.
Immich
Self-hosted photo and video backup with on-device-style mobile auto-upload.