felhom.eu/documentation/audits/licences-2026-10-02/read-2.md

Licence read, part 2 of 2 (R-787) — READ at each pinned tag, 2026-10-02 (subagent, verbatim in substance)

Apps: n8n navidrome nextcloud onlyoffice opengist outline paperless-ngx papra plant-it plex privatebin radarr radicale rallly recipe-importer romm seerr sonarr sparkyfitness tandoor termix uptime-kuma vaultwarden vikunja wanderer wger wishlist zipline grimmory (held WIP) metube (new). Upstream LICENSE files read from raw.githubusercontent.com at the pinned tag, except Plex (ToS page 403 — quoted from a search snippet) and the rows marked inferred.

app	image:tag	licence (SPDX)	OSI	limiting clause (quoted)	plain meaning	evidence
n8n	n8nio/n8n:2.42.1	custom: Sustainable Use License 1.0 (+ .ee. files: n8n Enterprise License)	no	"You may use or modify the software only for your own internal business purposes or for non-commercial or personal use. You may distribute the software or provide it to others only if you do so free of charge for non-commercial purposes."	the household's private use is allowed; Felhom charging while "providing it to others" is a grey zone (pulling the official image unchanged is arguably not distributing — inferred)	github.com/n8n-io/n8n/blob/n8n@2.42.1/LICENSE.md
navidrome	deluan/navidrome:0.64.2	GPL-3.0	yes	–	–	github.com/navidrome/navidrome/blob/v0.64.2/LICENSE
nextcloud	nextcloud:34.0.4-apache	AGPL-3.0	yes	–	–	github.com/nextcloud/server/blob/v34.0.4/COPYING
nextcloud	mariadb:12.3	GPL-2.0	yes	–	–	MariaDB COPYING
nextcloud, outline, paperless-ngx, romm	redis:7-alpine (→ 7.4.11)	RSALv2 OR SSPL-1.0	no	RSALv2: "You may not make the functionality of the Software or a Modified version available to third parties as a service"	an internal cache on the customer's own box, not Redis offered as a service — inferred not to bite; Valkey (BSD) or redis:8 (AGPL option) removes the question	github.com/redis/redis/blob/7.4.11/LICENSE.txt
onlyoffice	onlyoffice/documentserver:9.4.0	AGPL-3.0 + §7 terms (logo, no trademark licence)	yes (base)	§7 keep the logo / no trademark licence	the image runs unchanged, so the terms are met	github.com/ONLYOFFICE/DocumentServer/blob/v9.4.0/LICENSE
opengist	ghcr.io/thomiceli/opengist:1.15	AGPL-3.0	yes	–	–	github.com/thomiceli/opengist/blob/v1.15.0/LICENSE
outline	outlinewiki/outline:1.10.1	BUSL-1.1 (Change Date 2030-09-09 → Apache-2.0)	no	"you may not use the Licensed Work for a Document Service. A 'Document Service' is a commercial offering that allows third parties (other than your employees and contractors) to access the functionality of the Licensed Work by creating teams and documents controlled by such third parties."	the household's own instance on its own hardware is not a Document Service; Felhom hosting it for paying third parties itself would be — inferred	github.com/outline/outline/blob/v1.10.1/LICENSE
outline, paperless-ngx, rallly, sparkyfitness	postgres:18-alpine	PostgreSQL	yes	–	–	postgres COPYRIGHT
paperless-ngx	ghcr.io/paperless-ngx/paperless-ngx:2.20.15	GPL-3.0	yes	–	–	github.com/paperless-ngx/paperless-ngx/blob/v2.20.15/LICENSE
papra	ghcr.io/papra-hq/papra:26.6.2-rootless	AGPL-3.0	yes	–	–	github.com/papra-hq/papra (tag @papra/app@26.6.2) LICENSE
plant-it	msdeluise/plant-it:0.10.0	GPL-3.0	yes	–	–	github.com/MDeLuise/plant-it/blob/0.10.0/LICENSE.txt
plex	plexinc/pms-docker:1.41.4.9463-630c9f557	proprietary (Plex Terms of Service)	no	"personal (non-commercial), revocable, limited, non-exclusive, nontransferable, and non-sublicensable license to access and use the Plex Solution" (search snippet; the page 403'd)	the household uses it under its own Plex account; Felhom gets no right and installs it only as the household's agent; selling Plex or a Plex Pass is not covered	plex.tv/about/privacy-legal/plex-terms-of-service/
privatebin	privatebin/pdo:2.0.6	Zlib (bundled GPL-2.0, BSD-3, MIT, Apache, CC-BY)	yes	–	–	github.com/PrivateBin/PrivateBin/blob/2.0.6/LICENSE.md
radarr	lscr.io/linuxserver/radarr:6.4.4	GPL-3.0	yes	–	–	github.com/Radarr/Radarr LICENSE
radicale	ghcr.io/kozea/radicale:3.8.1	GPL-3.0	yes	–	–	github.com/Kozea/Radicale/blob/v3.8.1/COPYING.md
rallly	lukevella/rallly:4.15.3	AGPL-3.0	yes	–	–	github.com/lukevella/rallly/blob/v4.15.3/LICENSE
recipe-importer	gitea.dooplex.hu/admin/recipe-importer:v0.9.11	none (all rights reserved — Felhom's own)	n/a	no licence file	Felhom owns it; dependencies (Flask, gunicorn, requests, bs4, lxml) permissive — inferred from requirements.txt	/home/kisfenyo/git/recipe-importer
romm	rommapp/romm:5.3.1	AGPL-3.0	yes	–	–	github.com/rommapp/romm/blob/5.3.1/LICENSE
romm	mariadb:11.8	GPL-2.0	yes	–	–	MariaDB COPYING
seerr	fallenbagel/jellyseerr:2.7.3	MIT	yes	–	–	github.com/fallenbagel/jellyseerr/blob/v2.7.3/LICENSE
sonarr	lscr.io/linuxserver/sonarr:4.0.20	GPL-3.0	yes	–	–	github.com/Sonarr/Sonarr LICENSE.md
sparkyfitness	codewithcj/sparkyfitness(_server):v0.17.3	custom non-commercial	no	"The Software may not be used, directly or indirectly, in any product, service, or project primarily intended for or resulting in commercial advantage or monetary compensation, without prior written permission from the author." §7 terminates on a breach	offering it in a paid install-and-care service is commercial use: written permission needed (decision 65)	github.com/CodeWithCJ/SparkyFitness/blob/v0.17.3/LICENSE
tandoor	ghcr.io/tandoorrecipes/recipes:2.6.15	AGPL-3.0 WITH Commons Clause v1.0 (custom)	no	"the License does not grant to you, the right to Sell the Software… 'Sell' means… to provide to third parties, for a fee or other consideration (including without limitation fees for hosting or consulting/ support services related to the Software), a product or service whose value derives, entirely or substantially, from the functionality of the Software."	charging for installing or supporting Tandoor is what the clause names, if the paid service's value comes "substantially" from Tandoor; permission from the author, or keep it out of what Felhom charges for	github.com/TandoorRecipes/recipes/blob/2.6.15/LICENSE.md
tandoor	postgres:17-alpine	PostgreSQL	yes	–	–	–
termix	ghcr.io/lukegus/termix:2.8.0	Apache-2.0	yes	–	–	github.com/Termix-SSH/Termix LICENSE
uptime-kuma	louislam/uptime-kuma:2.5.5	MIT	yes	–	–	github.com/louislam/uptime-kuma/blob/2.5.5/LICENSE
vaultwarden	vaultwarden/server:1.36.0-alpine	AGPL-3.0 (web-vault GPL-3.0)	yes	–	–	github.com/dani-garcia/vaultwarden/blob/1.36.0/LICENSE.txt
vikunja	vikunja/vikunja:2.6.0	AGPL-3.0	yes	–	–	github.com/go-vikunja/vikunja/blob/v2.6.0/LICENSE
wanderer	flomp/wanderer-web/-db:v0.20.0	AGPL-3.0 (db = PocketBase MIT — inferred)	yes	–	–	github.com/Flomp/wanderer/blob/v0.20.0/LICENSE
wanderer	getmeili/meilisearch:v1.36.0	MIT AND BUSL-1.1 (EE modules)	core yes; EE no	LICENSE-EE: "non-production purposes only… Production use of the Licensed Work requires a commercial license"	Enterprise modules only (e.g. sharding); plain search is the MIT core — fine unless an EE feature is on (inferred)	github.com/meilisearch/meilisearch/blob/v1.36.0/LICENSE
wger	wger/server:2.7	AGPL-3.0	yes	–	–	github.com/wger-project/wger/blob/2.7/LICENSE.txt
wishlist	ghcr.io/cmintey/wishlist:v0.67.1	MIT	yes	–	–	github.com/cmintey/wishlist/blob/v0.67.1/LICENSE
zipline	ghcr.io/diced/zipline:4.8.0	MIT	yes	–	–	github.com/diced/zipline/blob/v4.8.0/LICENSE
zipline	postgres:16-alpine	PostgreSQL	yes	–	–	–
grimmory	ghcr.io/grimmory-tools/grimmory:v3.4.1	AGPL-3.0	yes	–	–	github.com/grimmory-tools/grimmory/blob/v3.4.1/LICENSE
grimmory	mariadb:11.4	GPL-2.0	yes	–	–	MariaDB COPYING
metube	ghcr.io/alexta69/metube:2026.09.29	AGPL-3.0	yes	–	–	github.com/alexta69/metube/blob/2026.09.29/LICENSE

Not OSI-approved (part 2): tandoor (Commons Clause — the most serious: it names paid hosting and support), sparkyfitness (non-commercial; decision 65), n8n (Sustainable Use — grey zone), plex (proprietary, personal use; the household is the licensee), outline (BUSL-1.1 — only a commercial "Document Service"), redis:7-alpine 7.4.11 in four apps (RSALv2/SSPL — internal cache), meilisearch v1.36.0 EE modules (wanderer — not used), recipe-importer (Felhom's own, no licence file).