How it works: each service, shown doing its job

Fifteen short drawings, one per service. Tap one and it plays once, in six to eight seconds, then stays on its last picture: that last picture is what you keep.

The names and addresses in the drawings are made up. Under each one, the plain words, and a link to the page that answers for the claim.

The foundation

Email

  1. A letter arrives at your own address
  2. It is on your phone and your laptop at once
  3. Junk is turned away at the door

Tap to see it happen

The address is yours, on your own domain (like rossi.example), and the mail app you already use keeps working. The machine that receives the mail runs for you alone, and junk mail is filtered out before it reaches you.

Who can reach your data Runs: Stalwart

Files

  1. You save a document on the laptop
  2. A moment later it is on the phone and the tablet
  3. One person gets a link to it, nobody else

Tap to see it happen

Your files stay the same everywhere because every device talks to your own machine, not to a company's cloud. Sharing is a link you hand to someone, and you can take it back.

Who can reach your data Runs: Nextcloud

One sign-in

  1. One sign-in opens every door
  2. A laptop is lost
  3. You close it once; it is out of all of them

Tap to see it happen

One password, and the same account, for mail, files, photos and the rest (single sign-on, SSO). Losing a device is one action, not a tour of eight settings pages.

Who can reach your data Runs: Zitadel

Passwords

  1. A password saved on the phone is in the safe, then on the laptop
  2. The family's shared drawer fills the same way
  3. My own key stops at the door

Tap to see it happen

The safe (a password manager) is locked with a master password only you know, so what is inside is unreadable to anyone else, including me. Shared drawers hold the passwords the family or the office uses together.

Who can reach your data Runs: Vaultwarden

Calendar & contacts

  1. An invitation arrives from outside
  2. It lands in the calendar on every device, at the same hour

Tap to see it happen

Calendars and the address book live on your machine and sync to iPhone, Android, Thunderbird and classic Outlook for Windows (CalDAV and CardDAV, the open standards they all speak). Invitations from outside keep arriving as invitations.

The three things that break when leaving Google Runs: Nextcloud

Photos

  1. A photo taken on the phone is on your machine within the minute
  2. At night a copy goes to another building

Tap to see it happen

Every phone in the family uploads by itself, as it did to Google or Apple; the difference is where the photos live. They are found again by face or place, and albums can be shared with whom you choose.

What you hold if I stop Runs: Immich

Backups

  1. A file is deleted at noon
  2. It comes back from last night's copy
  3. The status page shows everything running

Tap to see it happen

Every night an encrypted copy is made, and a second copy goes to another building. Twice a year a restore is tested and the result is written into the report you receive. Sync keeps files the same everywhere; a backup keeps yesterday, which is what you need when today's copy is the wrong one.

Service levels Runs: Restic + Gatus

Add what fits

Private network (VPN)

  1. From a café, the laptop reaches your machine through a sealed tube
  2. Whoever is on the café's network sees nothing

Tap to see it happen

A private network (VPN) makes any connection as safe as the one at home: everything between the device and your machine is encrypted, and your machine is the only place it goes.

Who can reach your data Runs: WireGuard

Private AI

  1. You ask a question about your own documents
  2. It is answered on your machine, with the source named
  3. Nothing goes out

Tap to see it happen

The model (an LLM, the kind of software behind the well-known chat assistants) runs on a graphics card inside your machine, so the documents and the questions never leave it. For the larger models there is a machine built for the purpose.

Private AI Runs: Ollama + Open WebUI

Paper archive

  1. A letter goes through the scanner
  2. It is filed on your machine
  3. One word finds it again

Tap to see it happen

The text is read off the scan (OCR), so a search for a name, a date or an amount finds the page. The paper can go in a box.

What it runs Runs: Paperless-ngx

Accounts and budgets

  1. Receipts go into the ledger on your machine
  2. The month's bar grows to the budget line and stops

Tap to see it happen

Household or office accounts and budgets, kept where your other data is. It is not an invoicing program.

What it runs Runs: Firefly III

Tasks

  1. A task moves to “done” on the laptop
  2. It moves the same way on the phone

Tap to see it happen

Shared to-do lists and boards for the household or the office, the same on every device.

What it runs Runs: Vikunja

Films and music

  1. The same film starts on the television and the tablet, from the one machine
  2. There is no licence that runs out

Tap to see it happen

Your own films and music, streamed inside the house or over the private network, on any screen.

What it runs Runs: Jellyfin

Remote support

  1. Something on your screen is wrong
  2. You let me in, and a cursor fixes it
  3. The door closes behind it

Tap to see it happen

Remote support works only while you allow it, and you watch what is done. When the session ends, the door is shut until you open it again.

Service levels Runs: RustDesk

Version history

  1. Every version of a document is kept
  2. A wrong edit is made
  3. Yesterday's version is lifted back to the top

Tap to see it happen

Version history (git) for code or documents, with a wiki beside it for writing things down. For those who need it.

What it runs Runs: Forgejo

Write to me

I read every message myself and reply within two working days.