Self-Hosting Made Easy. Early Access Pricing.
Hyper-Converged Sovereign Appliance
All-in-one private cloud, E2EE messaging, & vault, protected by WireGuard
Essential protection for individuals and small teams, deployed on a logically isolated virtual machine.
$4,950 $3,396
one time set up
✓
Defguard VPN Gateway + OpenID SSO
✓
WireGuard with Biometric 2FA
✓
Nextcloud Private Cloud Storage
✓
Euro-Office Document Co-Editing
✓
Rust-based Tuwunel Matrix Homeserver
✓
Ntfy.sh Self-Hosted Push Gateway
✓
LiveKit SFU + Coturn for WebRTC Conferencing
✓
Vaultwarden Zero-Knowledge Password Manager
Most popular. Simplest to administer Docker-based option on single-tenant bare metal. Eliminates noisy neighbors & shared hardware security risks.
$6,717 $4,633
one time set up
✓
Everything in Cloud plus…
✓
Strict Physical Hardware Boundary
✓
100% Raw Compute Performance (No Hypervisor Tax)
✓
Streamlined Flat-Directory Application Management
✓
Hybrid NVMe/SSD/HDD Storage supported with LVM/LUKS
✓
Cold Boot Protection via RAM encryption (SME/TME) *
✓
DMA Attack Protection via Hardware IOMMU *
Your own private cloud hypervisor. Built for advanced multi-VM isolation, snapshot recovery, and custom networking configs.
$9,235 $6,370
& up (custom quote)
✓
Dedicated single-tenant hardware plus…
✓
Full Proxmox VE Private Cloud Infrastructure
✓
Isolated Multi-VM Architecture Segregation
✓
Software-Defined Network (SDN) Routing Zones
✓
Hypervisor-Level Snapshots & Rollbacks
✓
Confidential VMs (SEV/TDX) *
✓
vTPM Measurement & UKI Remote Attestation (on request) *
The only self-hosted PGP mail server with automated key discovery and incoming email encryption.
$3,500 $2,842
one time add-on
✓
End-to-end Encryption with PGP
✓
Zero Access Storage with Stalwart Mail
✓
IMAP and JMAP Syncing
✓
Automated SPF/DKIM/DMARC Management
✓
Outgoing Mail with Smart Hosts
✓
Opportunistic Encryption with Web Key Discovery (WKD)
✓
Interoperates with ProtonMail and any other PGP mail client
New! The self-hosted Airtable or Smartsheet alternative combining relational database integrity with spreadsheet usability – for your structured data.
$2,266 $1,840
one time add-on
✓
Relational Database Engine with Grist Core
✓
Zero-Trust Perimeter via WireGuard & Defguard SSO
✓
Native Forward Auth with Just-In-Time (JIT) Provisioning
✓
Dual Sub-Domain Edge Routing for Public Forms
✓
Full Python 3 Formula & Automation Runtime
✓
Cell, Column, & Row-Level Granular Access Rules
✓
Per-Document SQLite Sovereignty & Direct Export
New! The bring-your-own-key (BYOK) Perplexity and NotebookLM alternative for private agentic search and document RAG – on your unstructured / semi-structured data.
$2,931 $2,380
one time add-on
✓
Private RAG & Conversational AI with AnythingLLM
✓
Zero-Trust Perimeter via WireGuard & Defguard SSO
✓
Custom Reverse Proxy SSO Gateway (No Per-Seat Limits)
✓
Departmental Workspace & Vector Context Boundaries
✓
Autonomous Agentic Web Search & Real-Time Scraping
✓
Supports Local GPUs, or Zero-Log-Retention Inference APIs
✓
Embedded LanceDB Vector Store with Full-Disk Encryption
Ops & Intelligence Bundle: Add both Grist and AnythingLLM for $3,690 (Save $530).
We use TLS encryption in transit and LUKS encryption at rest to protect all tiers. Additionally, Matrix, Vault, and Mail are protected by zero-knowledge encryption. You retain 100% direct ownership of your hosting accounts. Our engineers provision the environment via temporary, fully revocable credentials – leaving you with total infrastructure custody.
* Requires hardware support for AMD SME, SEV/SNP and Intel TME/TDX features.
Why is a sovereign appliance this affordable?
Traditional enterprise IT vendors charge exorbitant, recurring per-user fees to fund massive sales teams and bloated support desks. We don’t do that. Because RemoteRails is built on a highly optimized, semi-automated provisioning pipeline, we have eliminated traditional deployment overhead. We pass that architectural efficiency directly to you. You pay a single, flat deployment fee for the machine—no ongoing software tax, no mandatory retainers, and no bloated corporate infrastructure.
Deployment Options
Choose your deployment path
The Hyper-Converged Virtual Appliance supports any cloud instance, VPS, or dedicated server running a distribution of Linux with the latest stable Docker Engine. We recommend Debian Linux provisioned through Debootstrap, for our standard deployment.
System Requirements
Operating System: Debian 13 (or modern Linux distributions with 6.x+ kernel)
Container Runtime: Containerd/runC on latest stable Docker Engine
CPU Features: AES-NI hardware acceleration required (for LUKS and Crypto/TLS)
For dedicated tiers, IOMMU (AMD-Vi / Intel VT-d) required, AMD SME/Intel TME recommended
AMD SEV-SNP/Intel TDX recommended for Dedicated Hypervisor
Motherboard Features: UEFI Secure Boot support
Minimum: 4 vCPUs / 8 GB RAM / 160 GB SSD
Typical: 6 (Dedicated) vCPUs / 12 GB RAM / 240 GB SSD, or better
Storage:
For dedicated tiers, RAID 1 recommended for OS/DB/Apps (PostgreSQL and RocksDB) volume on NVMe or SSDs. RAID 1 minimum and RAID 10 recommended for Data volume (Drive shares and Mail attachments) on HDDs.
Connectivity:
1 x public IPv4 required for VPS/Cloud or Dedicated Bare Metal
2 x required, 3 x recommended for Dedicated Hypervisor
Minimum 250 Mbps uplink, 1 Gbps or better recommended
Cloud Instance / VPS
Quickest deployment for personal & small team use.
Dedicated Bare Metal
Simplest to administer, Docker on bare metal option.
Best price/performance
Dedicated Hypervisor
Virtual environment control & advanced security.
On-Premises VM
For existing KVM, Proxmox, VMware environments
On-Premises Bare Metal
For institutional and regulated environments