Self-hosted infrastructure
European servers we manage ourselves, with automatic deployments, and email, cloud storage, video calls and passwords kept in-house.
- Stack
- Coolify, Docker, Traefik, nginx, PostgreSQL, restic
- Area
- Software
Where we started
Every project on this page runs on servers we manage ourselves, in Europe. It wasn’t always like this. Until summer 2026 our services were spread across three different providers: the business platform on a small cloud server with a single shared processor, some WordPress sites on shared hosting, and other services with a third provider. Each provider had its own panel, its own contracts and its own way of making backups.
We wanted to know exactly where our clients’ data is, be able to write that down in the record of processing activities that GDPR requires, and stop paying subscriptions for services we can run ourselves.
What we did
We brought everything together with a single European provider, with servers in Germany and Austria. The machines aren’t split by type of program but by type of data: public websites on one, the business platform and client documents on another, email and the password vault on a third. If one machine were breached, the others stay separate.
Websites are published with Coolify: on every code change the site is rebuilt and put back online automatically, and Traefik handles the addresses and SSL certificates.
We replaced several external services with open source programs that we install ourselves. Email runs on Stalwart, with spam filtering based on public lists and antivirus scanning on attachments. Documents live on Nextcloud. The team’s passwords are in Vaultwarden, which works with the official Bitwarden apps. Video calls go through Jitsi Meet, with recording and transcription. The PDF tools run on Stirling-PDF on the same machine as the business platform, so contracts and identity documents never travel across the network.
For backups we use restic: copies are encrypted before they leave, so whoever stores them can’t read them. On top of that, the servers swap the most recent copy with each other.
How it’s built
- Coolify and Traefik: automatic website publishing and SSL certificates
- Stalwart: mail server with spam filtering, antivirus and DKIM signatures for every domain
- Nextcloud: document archive, connected to the business platform
- Vaultwarden: shared password manager
- Jitsi Meet: video calls with recording and transcription
- Stirling-PDF: merge, split, sign and convert PDFs
- RustDesk: remote computer support, on our own server
- restic backups, encrypted, with 14 daily and 12 monthly copies
- Monitoring from the business platform dashboard and an external check
Outcome
The services that used to depend on three providers now sit on servers we control, in European Union countries listed in the record of processing activities. Email, documents, passwords, video calls and PDF tools need no subscriptions to external services. It’s the same infrastructure we offer to clients who want to keep their data in-house.