Leaderboard

https://docs.hexos.com/release-notes/command-deck/2026-08-07 Pretty significant update and groundwork has been laid for buddy backups (coming soon)!

I would like to propose a pair of features that would work in tandem. A dynamic DNS system (like DuckDNS) run by Eshtek could work wonders for users that have not purchased a domain name and might find it confusing to set up CNAME records to point multiple services to the same address. The cost of running DuckDNS is apparently negligible, so hopefully there would not need to be a subscription for the service (or if so, then maybe only a few pounds per year). Combine this with a built-in reverse proxy like Caddy -- which can automatically provision LetsEncrypt SSL certificates -- and curated apps would then be able to be made securely accessible over the internet via an address like: ${service-name}.${user-chosen-name}.hexos.com Apps could then advertise this as their address in the dashboard, making secure configuration of user apps significantly easier. The only user-configurable step that would be required would be to open ports 80/443 on the user's router, something that Eshtek cannot control, but crucially, something that the HexOS Deck *would* be able to check for, notifying users if their router is configured correctly. Since there is already a web service running on ports 80/443, this reverse proxy would need alternative ports, but most routers can receive a connection on one port and map it to a different port internally, so this is unlikely to present a major problem.

New Curations We have curated 3 financial apps this week. Vote for your favorite here on Hexos Hub or on reddit. Actual Budget - Actual Budget is a super fast and privacy-focused app for managing your finances. Firefly III - Firefly III is a free and open source personal finance manager. Sure - Sure is an all-in-one personal finance platform. Curation info Actual Budget Experimental curation that uses self signed https certificate. Users can expect to see certificate warnings regularly. Curation Updates Syncthing Bug fix - Media, Movies and Shows folders are now connected as intended. Special Acknowledgments khowe085 Reported the Syncthing bug

Yes, still the plan. The UI is already mobile responsive, so it works well on phones, but we definitely plan to have an app in the future. Aside from being a native app to use to navigate the UI/UX, there are some other features we're thinking about that would be uniquely available through the app that wouldn't apply to simple browser-based management. Not ready to reveal all of that just yet.

I lvoe getting a sneak peek into the next features by translating HexOS -- Buddy Backup beeing the obviuos (and known) feature, but there are so many small (and some bigger) things i can gleam from the translations...I can't wait to see them come to a public build (and no, i will not spoil them - you will need to start translating to find them....) Thank you for your work Hades

Botom line up front: Nextcloud is not listed as an experimental app anymore, so I would hope that it wouldn't be possible to break it by clicking update in the HexOS app overview. Slightly longer version: I was running nextcloud 32.0.0, app version 2.0.34. Hadden't updated it in a while, and HexOS showed the option to update to 34.0.2 (app version 2.3.50). However, nextcloud only supports upgrading 1 major version at a time. So after upgrading, the docker immages are trying to spin up, but keep repeating that the upgrade from 32.0.0 to 34.0.2 isn't supported, and failing. I'm having to rollback to a snapshot and ry to do this update another way, not requesting halp in doing so, but I would have hoped that it isn't possible to need to do a rollback after clicking update brings the app into a unrecoverable state.

Yes, that is indeed the case. I'm more refering to the fact that HexOS does not account for this limitation, just happily upgrades from 32 to 34 and in the process bricks the installation. In fact, it doesn't even have a method of performing such a sequential update, I needed to go into TrueNAS Scale in order to do updates 1 major version at a time. The "can't skip major versions" of Nextcloud's update process should be well known by now, and the app is not marked experimental. HexOS's update process shouldn't allow an update skipping major versions to be performed at all.

Fantastic - thank you! Loving th thematic release of all 3 together. Do you have any plans to incorporate the Data Importer tool for Firefly? https://github.com/firefly-iii/data-importer

more new app curations Read more about it here https://docs.hexos.com/en/release-notes/command-deck/2026-07-26

HexOS would greatly improve by offering VPN services as curated one‑click apps, similar to Jellyfin or Nextcloud. Support for all major commercial VPNs with GUI and their signature features: NordVPN (Meshnet & dedicated IP), ExpressVPN, Surfshark, ProtonVPN, Private Internet Access (PIA), CyberGhost, Mullvad, VyprVPN, TunnelBear, and others. Support for open‑source solutions: WireGuard and OpenVPN. One‑click installation and configuration without complex manual steps. Option to route traffic from specific containers or apps through the chosen VPN, or all server traffic via VPN or a dedicated IP (useful for game servers). Include key features offered by these VPNs, such as a killswitch to block traffic if the VPN connection drops (preventing leaks), split tunneling, multi‑hop, obfuscation, and other advanced options. Ideally, make all NordVPN features available, since NordVPN is widely used and unique features like Meshnet are especially valuable for secure access outside the home network. This would enhance usability, privacy, and flexibility. If these features are implemented, I am ready to migrate my TrueNAS pools to HexOS.

This would be a nice feature. A lot of people struggle with reverse proxy setup.

+1. the amount of time I've spent trying to configure things through njinx proxy manager and have it not work is silly. If they offered a solution, even if it only worked with official apps at first, I'd reinstall Hex right away

Integrated default reverse proxy for docker apps so all apps available on 443 inside home network. integrated DNS to support app name.internaldomain.com with reverse proxy (this puts all apps on 443) Lets encrypt SSL by default for all apps all user has to do is buy domain name and enter it above and all just works support for split horizon DNS consider running the DNS service for folks to allow tight integration (this shouldn't preclude use of other dns services) this is not me advocating for how to expose anything externally, that's not an argument i want to get into 😉