file library
Seafile
Store, sync, and share files on your own server. Add OnlyOffice when those files also need browser-based editing.
Alpha · selected public modules
Choose tools around the work, not the other way around.
A Platform Zero module is more than an installer. It brings the runtime definition, configuration templates, dependencies, tests, and component metadata a service needs to join the generated stack. Your site manifest selects only the modules you want and pins their exact Git revisions. This page is a practical tour; the source catalogue is the complete, current inventory.
Alpha software: module contracts, catalogue entries, and upgrade paths can change. Use exact revisions, validate the generated Podman bundle before activation, and test a full restore before trusting a deployment with important data.
- SelectStart with an end-to-end workflow, then choose only the services it requires.
- PinRecord exact module revisions so the same source inputs can be rebuilt and audited.
- ExtendWrap a new repository in the same contract instead of adding another one-off host script.
Coordinate
Files, documents, chat, and the work around them.
Combine only the pieces your team needs, from a shared file library and browser editing to an incident room or public update feed.
team handbook
BookStack
Organize internal documentation into shelves, books, chapters, and pages instead of another unstructured folder.
document editing
OnlyOffice
Edit Word, spreadsheet, and presentation files in the browser while the documents remain in private storage.
Matrix chat + calls
Element
Host Matrix rooms, direct messages, files, federation, and calls. The captured room keeps a cutover and restore handoff in one thread.
kanban planning
Planka
Track projects on boards with lists, cards, due dates, labels, and assigned owners.
mail + calendar
SOGo
Give people webmail, shared calendars, and address books through one browser interface.
business operations
ERPNext
Run structured CRM, accounting, inventory, and internal approval workflows without moving the records to a SaaS account.
recurring work
Donetick
Assign recurring maintenance and household or team routines, with owners and schedules everyone can see.
federated publishing
Mastodon
Run a federated social presence on your own domain. The captured profile publishes concrete delivery and restore updates.
Operate
Know what is running, what changed, and whether you can recover.
Identity, metrics, dashboards, alert delivery, and backups become parts of the same deployment instead of separate afterthoughts.
single sign-on
Keycloak
Manage users and groups once, then give each OIDC client an explicit redirect path and required credentials.
metrics
Prometheus
Scrape service and host metrics into one queryable time-series store for health checks, dashboards, and alerts.
dashboards
Grafana
Turn metrics and application data into dashboards. This one tracks 36 market instruments and the health of all four source feeds.
alert routing
Alertmanager
Group related alerts, route them to the right destination, and silence expected noise during a maintenance window.
push notifications
ntfy
Send stack events to desktop and mobile through a private topic you operate, including high-priority restore and incident alerts.
backup + restore
Kopia
Create encrypted, deduplicated snapshots, set retention policies, and verify that a useful restore point actually exists.
Build
Code, notebooks, and controlled technical work.
Keep repositories, automation, and interactive compute close to the data while separating the workloads that can create containers of their own.
Git hosting
Forgejo
Host private repositories, issues, pull requests, releases, and team review on infrastructure you control.
CI execution
Forgejo Runner
Run repository jobs through a dedicated rootless user and Podman socket instead of granting CI access to the main application runtime.
personal notebooks
Jupyter Notebook
Work through data, experiments, and repeatable technical notes in an interactive Python notebook.
multi-user compute
JupyterHub
Give multiple people separate notebook sessions while the hub’s workload control stays outside the main Podman domain.
managed transfers
qBittorrent
Manage long-running downloads through a private web interface when controlled transfers are part of the technical workflow.
Extend
Search, per-user automation, live media, and whatever comes next.
A module can be broad or deliberately narrow. The active catalogue now includes private metasearch and operator-managed per-user workloads alongside specialist APIs and application services.
index + search
OpenSearch
Index and query logs or application records through a private search cluster with an API your services can build on.
active · rootless metasearch
SearXNG
Run the official SearXNG container behind the shared Caddy and Keycloak route, with both browser and JSON search output.
active · per-user workloads
Workload Spawner
Create persistent per-user n8n instances on wildcard subdomains, with Caddy edge SSO and a separate Postgres role and database for each instance.
model context
Legal Research MCP
Expose a focused legal-research capability to compatible AI clients without turning it into a general-purpose application.
real-time media
LiveKit
Provide audio, video, and low-latency data transport for applications that need calls or other live sessions.
shared credentials
Vaultwarden
Host a Bitwarden-compatible vault for passwords, passkeys, and controlled credential sharing.
physical automation
Home Assistant
Connect sensors, devices, dashboards, and local automations without making a vendor cloud the centre of the system.
your repository
Your Module
Declare its runtime files, configuration, dependencies, and tests; pin the source; then let it follow the same build and verification path.
Behind the scenes
Some of the most important modules never get a browser tab.
Edge security, log collection, shared runtime setup, mail transport, and test execution still need owners and contracts. Packaging them as modules keeps those decisions versioned, selectable, and testable too.
edge defence
CrowdSec
Read edge traffic logs, identify abusive patterns, and feed remediation decisions back to the public edge.
deployment proof
Test Runners
Run full-stack checks in a dedicated rootless Podman domain so test workloads do not share the application socket.
shared runtime
Stack Foundation
Provide the networks, paths, and common runtime pieces selected services need before their own units start.
log storage
Loki
Keep service logs in one queryable store so operators can move from a Grafana panel to the relevant records.
telemetry collection
Alloy
Collect host and service metrics and logs, then forward them to Prometheus-compatible and Loki backends.
mail transport
Mailserver
Handle private mail submission, delivery, and mailbox access when email belongs inside the stack.