aicoolies logo

Zero-Trust Self-Hosted Infrastructure Stack

$20/mo

A modern self-hosted infrastructure stack for teams and homelabbers who want secure remote access, container management, SSH workflows, and lightweight authentication without enterprise complexity or subscription costs. All tools are open source and deployable on minimal hardware.

NetBirdZero-Trust WireGuard Mesh Networking
Free for up to 5 users — paid plans from $7/user/mo
TermixSelf-Hosted SSH & Server Management
Free and self-hosted — no subscription required
Apple ContainerizationNative macOS Container Runtime
Free and open source under Apache-2.0 license
AuthentikSelf-Hosted Identity & Authentication
Open Source free; Enterprise $5/user/month + $0.02/external user/month; Enterprise Plus custom

What This Stack Does

Self-hosting has become increasingly viable as open-source tools reach production quality across networking, authentication, and container management. This stack assembles the essential infrastructure for securely running and accessing self-hosted services from anywhere, replacing expensive VPN subscriptions, SSH client licenses, and enterprise identity platforms.

Secure Networking and Remote Access

NetBird creates an encrypted WireGuard mesh network between all your devices and servers, enabling secure access without exposing ports to the internet. Unlike traditional VPNs that route all traffic through a central server, NetBird establishes direct peer-to-peer connections wherever possible, minimizing latency. Access policies control which devices can communicate, providing zero-trust security without complexity.

Termix provides a modern web-based SSH management interface that replaces subscription-based clients like Termius. It stores connection configurations centrally, supports team sharing of server access, and includes built-in SFTP for file management. Self-hosted deployment ensures your SSH credentials never leave your infrastructure.

Container Development and Authentication

Apple Containerization or OrbStack handles local container development on macOS, providing lightweight alternatives to Docker Desktop. Apple Containerization uses the native Virtualization framework for minimal overhead, while OrbStack offers a more polished experience with Kubernetes support. Either choice delivers faster, lighter container workflows than Docker Desktop.

Tinyauth or Authentik provides the authentication layer. For simple setups, Tinyauth delivers lightweight OIDC authentication that protects services behind a login page with minimal configuration. For more complex requirements with multi-factor authentication and SAML support, Authentik provides a full-featured identity platform that remains self-hostable.

The Bottom Line

This stack costs nothing in software licenses and runs comfortably on a single VPS or home server with 4GB RAM. The total monthly cost is limited to hosting infrastructure — typically $5-20/month for a cloud VPS or zero for home lab hardware. It replaces hundreds of dollars in monthly subscriptions for VPN services, SSH clients, and identity platform licenses.

Stack Overview

NetBirdZero-Trust WireGuard Mesh Networking
Pricing
Free for up to 5 users — paid plans from $7/user/mo
Open Source
Yes
TermixSelf-Hosted SSH & Server Management
Pricing
Free and self-hosted — no subscription required
Open Source
Yes
Apple ContainerizationNative macOS Container Runtime
Pricing
Free and open source under Apache-2.0 license
Open Source
Yes
AuthentikSelf-Hosted Identity & Authentication
Pricing
Open Source free; Enterprise $5/user/month + $0.02/external user/month; Enterprise Plus custom
Open Source
Yes