-
Rigorous Cross-Platform Validation of a Matrix Stack: Edge-Case Testing WebRTC, VPNs, and Push Notifications
Self-hosting your communication infrastructure shouldn’t mean accepting a subpar user experience. When organizations move away from Big Tech infrastructure—specifically by stripping Google’s Firebase Cloud Messaging (FCM) out of their Android fleets—the common wisdom is that they must sacrifice battery life and reliability in the name of privacy. We recently set out to prove that assumption…
-
Securing RemoteRails with Defguard: An Enterprise WireGuard VPN with Biometric 2FA
When building a self-hosted cloud appliance like RemoteRails, securing access is the first and most critical architectural decision. The instinct of many in the homelab and self-hosting communities is to reach for modern, popular mesh VPNs like Tailscale or NetBird. They are incredibly polished, “zero-config” tools that magically connect devices across complex NATs and firewalls.…
-
Sovereign Email Simplified: Insights from Deploying Stalwart Mail
Deploying a self-hosted email server used to be a daunting task involving complex configurations across Postfix, Dovecot, and SpamAssassin, often feeling like a full-time job. However, modern solutions like Stalwart Mail have dramatically simplified this experience, offering an all-in-one, secure, and highly performant email server. In this post, we’ll share our technical insights and “gotchas” from integrating…
-
The Death of the Local Account: Building a Sovereign Identity Layer with Defguard OIDC
One of the most persistent architectural failures in the self-hosted ecosystem is “identity sprawl.” When engineers first begin building out a private infrastructure stack, they inevitably stand up a dozen disparate services: a chat server, a file sync instance, an email relay, and a password manager. By default, every single one of these services maintains…