My Stack
Services I self-host, grouped by region. Updated after a migration or a round of cleanup.
Europe
Two nodes in Finland and Germany; most daily-use services live here.
US West
Cheap Los Angeles nodes for US egress and a few legacy services.
Infrastructure
Networking
- Traefik — Reverse proxy with automatic HTTPS
- Cloudflare — CDN, DDoS protection and Access login
- Fail2ban — Bans brute-force IPs
- Cloudflare R2 — Image hosting
Deployment
- Docker Compose — Every service is deployed the same way
- 1Panel — For the occasional GUI task
Backup
- Restic — Snapshots to the main EU node over SFTP, mirrored to OSS
- OneDrive — Key config files
Evaluating
Testing, or seriously considering.
- Headscale — Self-hosted Tailscale control server to mesh all nodes
- Pangolin — Tunneled reverse proxy; may replace Cloudflare Access
- Podman — Rootless replacement for Docker
- SearXNG — Privacy-friendly meta search
- Radicale — Calendar and contacts sync
- Zotero — References, and probably read-it-later too
- Wakapi — Coding time tracker
- Changedetection.io — Alerts when a page changes
Retired
What I dropped and why. Usually I set it up because I could, not because I needed it.
Stirling PDF— Rarely usedGlance— Rarely usedOpenClaw— Rarely usedPaperless-ngx— Scanning was too much frictionAuthentik— SSO wasn't worth the upkeepYOURLS— Replaced by ShlinkWallos— Rarely openedFile Browser— Replaced by Cloudreven8n— A need I made up; Dagu is enoughKarakeep / Linkwarden— Rarely used; Zotero fits betterAudiobookshelf— Apple Podcasts is enoughActual Budget— Apple's built-in apps are enoughtldraw / Excalidraw— Rarely openedMemos— Rarely usedUmami— Never checked the numbersCrowdSec— Too heavy; Fail2ban is enough
Last updated: 2026-10-23