My own server
One Hetzner server that I set up and run with Coolify. It hosts my apps, this site and its monitoring.
What runs on it
Measured 30 September 2026Visitors
through Cloudflare
One server, run with Coolify8 services, 2 databases
Tailscale only
encrypted
Admin and SSH
Backups in EU storage
How it is set up
Measured 30 September 2026- Admin pages and SSH answer only inside my private Tailscale network.
- Public traffic to the apps goes through Cloudflare, which also serves the DNS, with Turnstile against bots.
- Database dumps are encrypted with age and stored in R2 object storage in the EU. I have tested decrypting them.
- Mail goes out through Scaleway, with SPF, and DMARC set to reject.
- Beszel watches the host, ntfy tells me when a process is killed for lack of memory, and healthchecks.io runs an off-host dead-man’s switch.
- One Cloudflare setup script, and running it twice changes nothing.
Limits
- One server, so one point of failure.
- No staging server, and no continuous database archiving.
- A full restore from R2 has not been rehearsed yet.
- No uptime monitor for the apps.
- No infrastructure as code yet.