INFRASTRUCTURE

Infrastructure as part of the product.

A self-hosted laboratory for deployment, networking, containers, backup and recovery. The public view shows roles without exposing sensitive topology.

STACK

Tools chosen for specific problems.

Not a generic cloud-stack list.

Tailscale

private mesh / access

Connect machines across different networks without publishing administrative services to the public internet.

Cloudflare Tunnel

edge / routes / access

Publish only services that need public routes while keeping origins behind the edge.

Docker

containers / compose

Keep services isolated, movable and recoverable through reproducible definitions.

Restic + SFTP

backup / verify / restore

Keep versioned snapshots, verify integrity and treat restore as the acceptance criterion.

Nginx / Caddy

reverse proxy / TLS

Use explicit control where needed and simpler TLS/reverse proxying for smaller services.

Uptime Kuma

monitoring / checks

Turn “it should be online” into observable checks and history.

Pterodactyl

games / operations

Separate game-server lifecycle from the general web stack.

SSH

ops / recovery

Keep a low-level path for diagnosis, maintenance and recovery.