Edge and identity
Caddy terminates TLS and reverse-proxies every service; Authentik provides single sign-on across the stack.
Work
Self-Hosted Infrastructure Stack
Around 30 Docker stacks, about 25 running containers: reverse proxy, SSO, VPN egress, GPU photo ML, documents, search, and an LLM gateway.
Running continuously; my daily-driver personal cloud
Why it exists
The problem
Renting every service means renting your data, your uptime, and your roadmap. I wanted the alternative to be real rather than theoretical. It is a full personal cloud I administer myself, and it doubles as the proving ground for every infrastructure decision I recommend.
If you are hiring me
If you would rather own your stack than rent it, this is the setup I run daily.
Architecture
How it is built
Applications
Immich for photos with CUDA-accelerated machine learning, Paperless-ngx for documents, SearXNG for private search, Gotify for push notifications.
AI plumbing
LiteLLM as a unified gateway in front of LLM providers, and crawl4ai for structured web crawling. These are the same building blocks the automation work runs on.
Operations
gluetun routes selected egress through VPN, Watchtower handles automated image updates, and Portainer gives fleet visibility.
Stack
What it runs on
Related
Where this connects
Service Self-hosted infrastructure
Next step
Want a system like this built for you?
Tell me what you are trying to automate. A call is usually enough to scope it.