In my opinion it might be best to move the apps to docker images/containers. There are already dockers out there that would cover the apps and then some: http://tools.linuxserver.io/dockers are the guys I use for most things.
This would allow 1) quickly bringing apps into QB 2) would allow each user to each have their own container of each app. You’d just need to do the mappings for disk and network.
I dont see a lot of negatives with doing this. There is even a docker out there that will reverse proxy the other docker containers automatically and a tag along one that works with Lets Encrypt. They work REALLY well.