Services

Every tool actually chosen for this stack, evaluated by what it does, its licensing, and how it behaves once you control the infrastructure it runs on. These aren't purely "applications" in the tech-stack layers sense — a real choice like Coolify or Terraform's credential source is informed by infrastructure constraints and design decisions just as much as by what runs in a container, so it gets its own top-level section instead of being nested three levels deep under one layer.

Knowledgebase

App	License	FOSS problems	SSO	Users	Tested
BookStackHierarchical wiki platform organized into shelves, books, chapters, and pages with a clean WYSIWYG editor.	MITPermissive license. Preserve the copyright notice. Applies only to the covered code — your surrounding project can stay under any license.	—	✅	Unlimited	✅
DocmostReal-time collaborative wiki and documentation platform with rich text editing and page nesting.	AGPLv3Copyleft license. If you modify it and run it as a service, you must publish your changes. Surrounding linked code must also be open.	Open Washing	❌	Unlimited	✅
DocusaurusStatic site generator by Meta optimized for documentation sites, with versioning, search, and MDX support.	MITPermissive license. Preserve the copyright notice. Applies only to the covered code — your surrounding project can stay under any license.	—	—	—	✅
OutlineTeam knowledge base and wiki with real-time collaboration, Markdown editing, and a clean Notion-like interface.	BSL 1.1Source available license. Source available under restricted terms until a conversion date, after which it becomes open source. Each project sets its own restrictions.	Open Washing	✅	Unlimited	✅

Cloud

App	License	FOSS problems	SSO	Users	Tested
NextcloudSelf-hosted productivity platform covering file sync, calendar, contacts, video calls, and hundreds of community apps.	AGPLv3Copyleft license. If you modify it and run it as a service, you must publish your changes. Surrounding linked code must also be open.	Copyleft License with CLA	✅	Unlimited	✅

Identity Providers

App	License	FOSS problems	SSO	Users	Tested
AuthentikFeature-rich identity provider supporting SAML, OAuth2, and LDAP with a flexible policy engine and SSO.	MITPermissive license. Preserve the copyright notice. Applies only to the covered code — your surrounding project can stay under any license.	Open-Core	✅	Unlimited	✅
RauthyLightweight, security-first OIDC authentication server with a minimal footprint and strong hardening defaults.	Apache-2.0Permissive license. Like MIT, but each contributor grants users a patent licence covering their contribution, preventing later suits.	—	✅	Unlimited	❌
Pocket IDSimple OIDC provider with passkey support, designed for easy self-hosting with minimal configuration.	MITPermissive license. Preserve the copyright notice. Applies only to the covered code — your surrounding project can stay under any license.	—	✅	Unlimited	❌

AI

App	License	FOSS problems	SSO	Users	Tested
Open WebUISelf-hosted web interface for running and chatting with local LLMs via Ollama or any OpenAI-compatible API.	MITPermissive license. Preserve the copyright notice. Applies only to the covered code — your surrounding project can stay under any license.	—	✅	Unlimited	✅

Design

App	License	FOSS problems	SSO	Users	Tested
PenpotOpen-source design and prototyping tool built for collaboration between designers and developers, with SVG-native files.	MPL-2.0Copyleft license. Only the covered files must stay open — surrounding proprietary code in separate files is permitted.	—	❌	Unlimited	✅

Dev

App	License	FOSS problems	SSO	Users	Tested
ForgejoCommunity-driven Git forge with issues, pull requests, CI/CD pipelines, and a package registry.	MITPermissive license. Preserve the copyright notice. Applies only to the covered code — your surrounding project can stay under any license.	—	✅	Unlimited	✅

Deployment Platforms

App	License	FOSS problems	SSO	Users	Tested
CoolifySelf-hosted Heroku/Netlify alternative for deploying apps, databases, and services from Git with zero lock-in.	Apache-2.0Permissive license. Like MIT, but each contributor grants users a patent licence covering their contribution, preventing later suits.	—	✅	Unlimited	✅
YunoHostServer OS that simplifies self-hosting with a one-click app catalog, built-in SSO, and automated updates.	AGPLv3Copyleft license. If you modify it and run it as a service, you must publish your changes. Surrounding linked code must also be open.	—	✅	Unlimited	❌
CloudronManaged app hosting platform with automated backups, SSL, updates, and a curated catalog of self-hostable apps.	EULAProprietary license. No obligation to share source code. Terms of use set entirely by the vendor; redistribution and production use typically require a paid subscription.	Not FOSS	✅	Paid tiers	❌
AnsibleAgentless configuration management — SSH-based YAML playbooks that install, configure, and update whatever's already running on a server.	GPL-3.0Copyleft license. If you distribute it, modified or not, you must publish the source. Running it as a network service without distributing it doesn't trigger that.	—	—	Unlimited	❌

Monitoring

App	License	FOSS problems	SSO	Users	Tested
BeszelLightweight server monitoring with historical charts for CPU, memory, disk, and network per host.	MITPermissive license. Preserve the copyright notice. Applies only to the covered code — your surrounding project can stay under any license.	—	❌	Unlimited	✅
DockhandDocker container monitoring tool that tracks image staleness and alerts when newer versions are available.	BSL 1.1Source available license. Source available under restricted terms until a conversion date, after which it becomes open source. Each project sets its own restrictions.	Open Washing	❌	Unlimited	❌
Uptime KumaSelf-hosted uptime monitoring with public status pages, notifications, and support for HTTP, TCP, DNS, and other check types.	MITPermissive license. Preserve the copyright notice. Applies only to the covered code — your surrounding project can stay under any license.	—	❌	Unlimited	❌

Password Manager

App	License	FOSS problems	SSO	Users	Tested
Proton PassPassword manager and secrets vault, used here to source infrastructure credentials at runtime via its CLI instead of storing them in flat files.	EULAProprietary license. No obligation to share source code. Terms of use set entirely by the vendor; redistribution and production use typically require a paid subscription.	Clients are open source, but it's a hosted vault — not self-hostable	❌	Paid tiers	✅
InfisicalOpen-source secrets management platform for storing and injecting API keys, credentials, and environment variables — a self-hostable alternative to a SaaS vault.	MITPermissive license. Preserve the copyright notice. Applies only to the covered code — your surrounding project can stay under any license.	Open-Core	✅	Unlimited	❌

Infrastructure as Code

App	License	FOSS problems	SSO	Users	Tested
TerraformThe infrastructure-as-code tool used to provision this project's server, network, storage, and DNS from `.tf` config.	BUSL 1.1	Relicensed from MPL 2.0 to BUSL in 2023	—	Unlimited	✅
OpenTofuCommunity-governed, Linux Foundation fork of Terraform at the last MPL-licensed commit, kept fully open source.	MPL-2.0Copyleft license. Only the covered files must stay open — surrounding proprietary code in separate files is permitted.	—	—	Unlimited	✅
PulumiInfrastructure as code using general-purpose languages (TypeScript, Python, Go, C#, Java) instead of a dedicated config format.	Apache-2.0Permissive license. Like MIT, but each contributor grants users a patent licence covering their contribution, preventing later suits.	—	—	Unlimited	❌
OpenStack HeatOpenStack's own native orchestration service — YAML templates reconciled server-side against the cloud itself, no separate tool or state backend.	Apache-2.0Permissive license. Like MIT, but each contributor grants users a patent licence covering their contribution, preventing later suits.	—	—	Unlimited	❌

Databases

OLTP

App	License	FOSS problems	SSO	Users	Tested
PostgreSQLGeneral-purpose relational database with strong standards compliance, JSONB, and an extension ecosystem covering geospatial and vector search.	PostgreSQL LicensePermissive license. An MIT/BSD-style permissive license — use, modify, and redistribute freely, including in proprietary products, with no obligation to share changes.	—	—	Unlimited	✅
MariaDBCommunity-governed fork of MySQL, created after Oracle's acquisition of Sun Microsystems, staying close to drop-in compatible.	GPLv2Copyleft license. If you distribute it, modified or not, you must publish the source under GPLv2 too. No network-service clause — running it as a hosted service doesn't trigger that.	—	—	Unlimited	❌
MySQLWidely deployed relational database, dual-licensed and owned by Oracle since its 2010 acquisition of Sun Microsystems.	GPLv2Copyleft license. If you distribute it, modified or not, you must publish the source under GPLv2 too. No network-service clause — running it as a hosted service doesn't trigger that.	Dual-licensed, Oracle-owned, commercial tier gated behind a separate license	—	Unlimited	❌
SQLiteSelf-contained, serverless, file-based database engine — the whole database is one file, with no separate server process to run.	Public DomainPublic domain license. No rights reserved — copyright is waived entirely. No conditions, no attribution required, use it however you want.	—	—	Unlimited	❌

OLAP

App	License	FOSS problems	SSO	Users	Tested
ClickHouseColumn-oriented database built for fast analytical queries over very large datasets, rather than transactional application state.	Apache-2.0Permissive license. Like MIT, but each contributor grants users a patent licence covering their contribution, preventing later suits.	—	—	Unlimited	❌

Backups

App	License	FOSS problems	SSO	Users	Tested
BackrestSelf-hosted web UI over restic, handling off-site encrypted backups with built-in scheduling and retention.	MITPermissive license. Preserve the copyright notice. Applies only to the covered code — your surrounding project can stay under any license.	—	❌	Unlimited	❌
OpenStack Snapshot SchedulerIn-house container bundling the OpenStack CLI and cron to schedule Cinder volume snapshots — no turnkey tool does this the way Backrest bundles restic.	Custom (in-house)	—	—	Unlimited	❌