Private cloud · Open-source stack

The open-source stack.

Mature, widely used open-source projects, chosen and configured for what you need. None of it is our own invention, so none of it ties you to us.

Start an assessment

The exact stack varies by customer. We choose from these projects to fit what you need; no customer automatically gets every service.

Core services

What you use day to day.

  • Files and collaboration

    Nextcloud

    Syncs and shares files across computers and phones, with calendars, contacts, and shared editing for teams and families.

    Nextcloud project site

  • Photos

    Immich

    Backs up photos and videos from phones and organizes them into a searchable library you can browse and share.

    Immich project site

  • Media

    Jellyfin

    Streams your own movies, shows, and music to apps on TVs, phones, tablets, and web browsers.

    Jellyfin project site

  • Documents

    Paperless-ngx

    Turns scanned paperwork into a searchable archive, reading the text so you can find a document by what it says.

    Paperless-ngx project site

  • Passwords

    Vaultwarden

    A lightweight, unofficial server that works with the Bitwarden password manager apps and browser extensions.

    Vaultwarden project site

Platform and operations

What keeps it running.

You rarely see these parts, but they decide whether the system is easy to maintain, back up, and hand over.

  • Operating system

    Debian or Ubuntu Linux

    Stable, long-supported Linux distributions that run the whole system.

  • Service packaging

    Docker Compose

    Runs each service in its own container from a written configuration, so the setup is documented and can be moved or rebuilt.

    Docker Compose project site

  • Reverse proxy and TLS

    One front door that sends each request to the right service and encrypts connections with HTTPS certificates.

  • Remote access

    WireGuard

    A modern VPN that creates an encrypted tunnel, so you can reach the system away from home or the office.

    WireGuard project site

  • Backups

    Restic

    Makes encrypted, deduplicated backups to a separate drive or remote storage, and restores from them.

    Restic project site

  • Monitoring

    Uptime Kuma

    Checks that each service is responding and sends an alert when one is not.

    Uptime Kuma project site

  • Storage and health checks

    Regular checks on drive health and free space, so a failing disk is noticed before it loses data.

Stack diagram

How the pieces fit.

  1. How you connect

    • Apps and browsers on your devices
    • WireGuard for access away from home
    • Reverse proxy with TLS

  2. Services

    • Nextcloud
    • Immich
    • Jellyfin
    • Paperless-ngx
    • Vaultwarden

  3. Platform

    • Docker Compose
    • Debian or Ubuntu Linux

  4. Storage and safety

    • Drives with health checks
    • Restic backups to a second copy
    • Uptime Kuma monitoring
A typical arrangement. Your system includes only the services you choose.

Freedom guarantee

You should be able to leave any vendor, including us, with your data intact.

  • Built on open-source software, so your data stays in formats other tools can read.
  • Accounts and admin access in your name, not ours.
  • Documentation handed over, so another qualified provider can take over.
Back to private cloud

Next step

Find out which parts you need.

Answer a few questions about what you store and who uses it, and we will recommend the services that fit. There is no obligation.

Start an assessment

Prefer to talk first? Contact us