What it actually runs
Every service here is open source and named. You can look up its security history, read its code, run it yourself, or hand the whole estate to another administrator without asking me for anything.
That is the point of the list, not a boast about the choices. Software nobody else can name is software nobody else can take over.
The foundation
Your own address on your own domain, in the mail app you already use, with junk mail filtered out.
Runs: Stalwart / mox
Your documents on every computer and phone, always the same everywhere, shared with whom you choose and nobody else.
Runs: Nextcloud
One password opens everything here. If a phone is lost, you shut it out once, everywhere.
Runs: Zitadel
A safe for your passwords on phone and computer, with shared safes for the family or the office. Not even I can open it.
Runs: Vaultwarden
Your calendars and address book, the same on iPhone, Android, Outlook and Thunderbird.
Runs: CalDAV / CardDAV
Every photo from every phone, saved by itself, found again by face or place, with albums you can share.
Runs: Immich
An encrypted copy every night, another in a different building, and a page that shows whether everything is running.
Runs: Restic + Gatus
Available on request
Reach everything here from anywhere, as safely as from home.
Runs: WireGuard
Ask questions about your own documents; nothing leaves the machine. That much is in the price. The version built around your work and kept current every quarter is the premium service — see the price.
Runs: Ollama + Open WebUI
Scan a letter once: it is read, filed, and found again by any word in it.
Runs: Paperless-ngx
Household or office accounts, budgets and reports, kept on the machine.
Runs: Firefly III
Shared to-do lists and boards for the household or the office.
Runs: Vikunja
Your own films and music on any screen, with no licence that runs out.
Runs: Jellyfin
When something on your computer goes wrong, I fix it on your screen, and only once you let me in.
Runs: RustDesk
Every version of your code or documents kept, with a wiki for writing things down. For those who need it.
Runs: Forgejo
What is deliberately not here
No hyperscaler
Not AWS, not Azure, not Google Cloud. The premise of the service is that your data is not sitting in an account somebody else controls, and renting the machine back from Amazon would defeat it.
No private tooling
Nothing here is written by me and understood only by me. Every component has documentation you can read and a community that maintains it.
No proprietary licences that expire
If I disappear, nothing stops working because a subscription lapsed.
How the machine is secured, who holds which key and where it physically sits are on the security page.
If you have run some of this yourself and it turned into a second job, there is a page on what changes when someone else keeps it running.
One more thing about this list. Every project on it is maintained by people who are not me, and part of what a client pays goes back to them as donations. A project that loses the people who maintain it becomes my problem, and then yours.