aicoolies logo

Zero-Trust Self-Hosted Infrastructure Stack

$20/mo

A modern self-hosted infrastructure stack for teams and homelabbers who want secure remote access, container management, SSH workflows, and lightweight authentication without enterprise complexity or subscription costs. All tools are open source and deployable on minimal hardware.

Share

What This Stack Does

Self-hosting has become increasingly viable as open-source tools reach production quality across networking, authentication, and container management. This stack assembles the essential infrastructure for securely running and accessing self-hosted services from anywhere, replacing expensive VPN subscriptions, SSH client licenses, and enterprise identity platforms.

Secure Networking and Remote Access

NetBird creates an encrypted WireGuard mesh network between all your devices and servers, enabling secure access without exposing ports to the internet. Unlike traditional VPNs that route all traffic through a central server, NetBird establishes direct peer-to-peer connections wherever possible, minimizing latency. Access policies control which devices can communicate, providing zero-trust security without complexity.

Termix provides a modern web-based SSH management interface that replaces subscription-based clients like Termius. It stores connection configurations centrally, supports team sharing of server access, and includes built-in SFTP for file management. Self-hosted deployment ensures your SSH credentials never leave your infrastructure.

Container Development and Authentication

Apple Containerization or OrbStack handles local container development on macOS, providing lightweight alternatives to Docker Desktop. Apple Containerization uses the native Virtualization framework for minimal overhead, while OrbStack offers a more polished experience with Kubernetes support. Either choice delivers faster, lighter container workflows than Docker Desktop.

Tinyauth or Authentik provides the authentication layer. For simple setups, Tinyauth delivers lightweight OIDC authentication that protects services behind a login page with minimal configuration. For more complex requirements with multi-factor authentication and SAML support, Authentik provides a full-featured identity platform that remains self-hostable.

The Bottom Line

This stack costs nothing in software licenses and runs comfortably on a single VPS or home server with 4GB RAM. The total monthly cost is limited to hosting infrastructure — typically $5-20/month for a cloud VPS or zero for home lab hardware. It replaces hundreds of dollars in monthly subscriptions for VPN services, SSH clients, and identity platform licenses.

Stack Overview

ToolRolePricingOpen Source
NetBirdZero-Trust WireGuard Mesh NetworkingFree for up to 5 users — paid plans from $7/user/moYes
TermixSelf-Hosted SSH & Server ManagementFree and self-hosted — no subscription requiredYes
Apple ContainerizationNative macOS Container RuntimeFree and open source under Apache-2.0 licenseYes
AuthentikSelf-Hosted Identity & AuthenticationFree open-source; Enterprise edition with premium featuresYes
Zero-Trust Self-Hosted Infrastructure Stack — aicoolies