Ubuntu Server
The operating system on the one machine that runs the whole company.
服務
團隊所使用的各項工具，依其功能分類。每張卡片皆連結至使其得以實現的開源專案。
Foundation
The layer everything else stands on. One Linux server, containers for every service, one front door with automatic HTTPS.
Docker
Every service runs in its own container, described in a Compose file under version control.
Nginx Proxy Manager
The single front door. Routes every domain to the right service and renews certificates automatically.
Let's Encrypt
Free, automatic HTTPS certificates for every site and for the mail server.
Portainer CE
A visual overview of every container, for quick checks from a browser.
Watchtower
Keeps containers up to date on a schedule, with databases pinned to safe versions.
Homarr
The team's start page, with every internal tool one click away.
Identity & security
One login for the team, a password vault, a private VPN for staff and encrypted traffic everywhere.
Keycloak
Single sign-on. One account per team member opens most of the services below.
Passbolt CE
The shared password vault, end-to-end encrypted per team member.
WireGuard
A private VPN so staff reach internal tools as if they were in the office.
Gluetun
Routes selected services through an outbound VPN tunnel, isolated from the rest.
docker-mailserver
Our own mail server for company addresses, with DKIM, DMARC and SPF.
Collaboration
The office. Files, wiki, notes, project planning, whiteboards and video calls, without a single SaaS subscription.
Nextcloud
Files, calendars and contacts for the team.
Outline
The company wiki, where processes and decisions are written down.
Trilium Notes
A personal knowledge base for deep notes and research.
Windshift
Project planning with boards, roadmaps and public progress boards, helped by our local AI.
Penpot
Design and prototyping for the web and the games.
Jitsi Meet
Video meetings in the browser, no account needed for guests.
Excalidraw
A shared whiteboard for quick sketches, with live collaboration.
draw.io
Architecture and flow diagrams, like the one on the Stack page.
Everyday tools
The small tools a team reaches for every day, from PDFs and translation to bookmarks, search and CVs.
Paperless-ngx
Scans, OCRs and files every invoice and letter so it can be found in seconds.
BentoPDF
Merge, split and edit PDFs without uploading them anywhere.
LibreTranslate
Machine translation that runs on our own hardware.
SearXNG
A private search engine that doesn't track the team.
Karakeep
Bookmarks, articles and notes, tagged automatically.
Reactive Resume
CVs and resumes, kept up to date and exported to PDF.
Postiz
Plans and publishes posts to every social network from one place.
Omni Tools
A drawer of small utilities for text, images and data.
FileBrowser Quantum
Browses and shares the file archive from the web.
Slink
Image and GIF sharing with short links.
wger
Workout and nutrition tracking. A healthy team is a productive team.
Development & AI
Where the software gets made. Git hosting, databases and a local AI lab that never sends a prompt outside the building.
Forgejo
Git hosting for every project, with issues, reviews and CI planned.
PostgreSQL
The database behind most services, one instance per application.
Valkey & Redis
Fast caches and queues that keep the apps responsive.
pgAdmin
Database administration, reachable only from inside the network.
Open WebUI
A private ChatGPT-style assistant for the team, running local models.
OpenVINO Model Server
Serves language, speech and embedding models on an Intel Arc GPU.
Playwright
A headless browser the AI tools use to read the web.
Media & content
Live streams, video on demand, photo archives and a media library, all on our own hardware.
Owncast
Our own live-streaming channel with chat, no platform in between.
PeerTube
Video on demand, federated and uncensored.
Broadcast Box
Sub-second WebRTC streaming for watch parties. We maintain our own fork with extra features.
Jellyfin
The media library, streamed to any screen.
Immich
The photo and video archive, with face and object search done locally.
MeTube
Saves reference videos for offline use.
Komga
A library for comics, manga and books.
Building & automation
The office itself is automated. Sensors, cameras and routines run locally, not in someone else's cloud.
Home Assistant
Automates lights, climate and energy in the office, all locally.
Frigate
Camera recording with on-device object detection.
Mosquitto
The MQTT message bus the sensors talk over.
AdGuard Home
Network-wide ad and tracker blocking for the office.
Community & commerce
The places where customers, friends and players meet us.
Medusa
The commerce engine behind the webshops we build for clients.
Discourse
The public forum, with single sign-on for the team and the same look as this site.
YAGPDB
Moderation and automation for our Discord community.
Game servers
Dedicated servers for community game nights, spun up per game in their own containers.
Hugo
The static site generator behind this website and the engine's site.