Der Stack
Ein geführter Rundgang durch den technischen Unterbau von datendrang — Schicht für Schicht, von der eigenen Hardware bis zu den wenigen Außenposten in fremder Cloud.
Infrastruktur — das Fundament
Der Boden, auf dem alles steht: eigene Hardware, virtualisiert und containerisiert. Proxmox trägt die Maschinen, Docker die Dienste — reproduzierbar, in eigener Hand.
| Technologie | Cluster | Krit. | Verbr. | Reife | Souveränität |
|---|---|---|---|---|---|
| Proxmox VE | Virtualisierung | 5 | 8 | prod | self-hosted |
| Docker | Container | 5 | 6 | prod | self-hosted |
| LXC | Container | 5 | 2 | prod | self-hosted |
| LXC (Linux Containers) | Container | 5 | 2 | prod | self-hosted |
| LXC (containerd/pct) | Container | 5 | 2 | prod | self-hosted |
Daten — das Gedächtnis
Wo die Wahrheit liegt: relationale Kerne, Analytik und Suche. Von PostgreSQL über DuckDB bis Directus — die Datenschicht ist bewusst offen und selbst gehostet.
| Technologie | Cluster | Krit. | Verbr. | Reife | Souveränität |
|---|---|---|---|---|---|
| PostgreSQL | Datenbank | 5 | 15 | prod | self-hosted |
| Meilisearch | Suche | 4 | 10 | prod | self-hosted |
| Redis | Datenbank | 3 | 9 | prod | self-hosted |
| PostgreSQL (pgvector) | Datenbank | 4 | 6 | prod | self-hosted |
| Nextcloud | Storage | 4 | 4 | prod | self-hosted |
| ZFS | Storage | 4 | 4 | prod | self-hosted |
| TimescaleDB | Datenbank | 4 | 4 | prod | self-hosted |
| Apache Tika | Suche | 3 | 5 | prod | self-hosted |
| DuckDB | Datenbank | 3 | 4 | prod | self-hosted |
| pgvector | Datenbank | 4 | 3 | prod | self-hosted |
| NextExplorer | Storage | 3 | 3 | prod | self-hosted |
| wildsearch | Suche | 3 | 3 | prod | self-hosted |
| SQLite | Datenbank | 2 | 4 | prod | self-hosted |
| Unternehmenssuche | Suche | 3 | 2 | prod | self-hosted |
| MongoDB | Datenbank | 2 | 3 | staging | self-hosted |
| ChromaDB | Datenbank | 3 | 2 | prod | self-hosted |
| SFTPGo | Storage | 3 | 2 | prod | self-hosted |
| Apache Solr | Suche | 3 | 2 | prod | self-hosted |
| Syncthing | Storage | 3 | 2 | prod | self-hosted |
| Wildsearch API | Suche | 3 | 2 | prod | self-hosted |
| SeaweedFS | Storage | 2 | 3 | prod | self-hosted |
| Syncthing Discovery | Storage | 2 | 2 | prod | self-hosted |
| Filebrowser | Storage | 2 | 2 | prod | self-hosted |
| QNAP NAS | Storage | 3 | 1 | prod | self-hosted |
| MySQL | Datenbank | 3 | 1 | prod | self-hosted |
| SearXNG | Suche | 1 | 2 | legacy | self-hosted |
Netz & Sicherheit — die Grenzen
Verschlüsselte Wege und kontrollierte Tore: Mesh-VPN statt offener Ports, eigener Reverse-Proxy, Identität und Firewall in Eigenregie. Souveränität beginnt am Netzrand.
| Technologie | Cluster | Krit. | Verbr. | Reife | Souveränität |
|---|---|---|---|---|---|
| NetBird | Netzwerk/VPN | 5 | 8 | prod | self-hosted |
| Authentik | Identity/Auth | 5 | 7 | prod | self-hosted |
| Caddy | Reverse-Proxy | 5 | 7 | prod | self-hosted |
| OPNsense | Netzwerk/VPN | 5 | 6 | prod | self-hosted |
| WireGuard | Netzwerk/VPN | 5 | 5 | prod | self-hosted |
| Vaultwarden | Security | 5 | 5 | prod | self-hosted |
| OpenResty | Reverse-Proxy | 5 | 4 | prod | self-hosted |
| Wazuh | Security | 4 | 4 | prod | self-hosted |
| nginx | Reverse-Proxy | 2 | 5 | staging | self-hosted |
| Active Directory | Identity/Auth | 5 | 2 | prod | self-hosted |
| Authentik Outpost | Identity/Auth | 4 | 2 | prod | self-hosted |
| HAProxy | Reverse-Proxy | 4 | 2 | prod | self-hosted |
| Unbound DNS | Netzwerk/VPN | 4 | 2 | prod | self-hosted |
| OpenVPN | Netzwerk/VPN | 3 | 2 | prod | self-hosted |
| RustDesk Server | Netzwerk/VPN | 3 | 2 | prod | self-hosted |
| Bitwarden CLI | Security | 3 | 2 | prod | self-hosted |
| Secret-Inbox | Security | 3 | 2 | prod | self-hosted |
| Sophos UTM | Security | 3 | 2 | legacy | self-hosted |
| osctrl | Security | 2 | 3 | experimental | self-hosted |
| RustDesk (client) | Netzwerk/VPN | 2 | 2 | prod | self-hosted |
| osquery | Security | 2 | 2 | experimental | self-hosted |
| UniFi | Netzwerk/VPN | 3 | 1 | prod | self-hosted |
Betrieb — das Maschinenhaus
Was den Laden am Laufen hält: Automatisierung, Monitoring, Backup. Die unscheinbare, kritische Schicht, die aus Einzelteilen einen verlässlichen Betrieb macht.
| Technologie | Cluster | Krit. | Verbr. | Reife | Souveränität |
|---|---|---|---|---|---|
| GitLab | DevOps/Automation | 5 | 5 | prod | self-hosted |
| TacticalRMM | DevOps/Automation | 4 | 5 | prod | self-hosted |
| Ansible | DevOps/Automation | 4 | 4 | prod | self-hosted |
| Zabbix | Monitoring | 4 | 4 | prod | self-hosted |
| MeshCentral | DevOps/Automation | 3 | 5 | prod | self-hosted |
| Proxmox Backup Server | Backup | 5 | 3 | prod | self-hosted |
| Matomo | Monitoring | 3 | 4 | prod | self-hosted |
| Headwind MDM | DevOps/Automation | 3 | 4 | prod | self-hosted |
| UrBackup | Backup | 4 | 3 | prod | self-hosted |
| Proxmox Backup Server (PBS) | Backup | 5 | 2 | prod | self-hosted |
| OPC-UA | Sonstiges | 3 | 3 | prod | self-hosted |
| Graylog | Monitoring | 3 | 3 | prod | self-hosted |
| vzdump | Backup | 4 | 2 | prod | self-hosted |
| systemd | DevOps/Automation | 4 | 2 | prod | self-hosted |
| Playwright | DevOps/Automation | 2 | 4 | prod | self-hosted |
| sanoid | Backup | 3 | 2 | prod | self-hosted |
| Uptime Kuma | Monitoring | 3 | 2 | prod | self-hosted |
| DevChef | DevOps/Automation | 3 | 2 | prod | self-hosted |
| Kerberos/WinRM | DevOps/Automation | 3 | 2 | prod | self-hosted |
| n8n | DevOps/Automation | 3 | 2 | prod | self-hosted |
| PegaProx | Monitoring | 3 | 2 | prod | self-hosted |
| MCP Hub | DevOps/Automation | 3 | 2 | prod | self-hosted |
| Metabase | Monitoring | 2 | 2 | prod | self-hosted |
| Odoo-MCP | DevOps/Automation | 2 | 2 | prod | self-hosted |
| yt-dlp | Sonstiges | 1 | 4 | prod | self-hosted |
| ntfy | Monitoring | 2 | 2 | prod | self-hosted |
| Atuin | DevOps/Automation | 2 | 2 | prod | self-hosted |
| Grafana | Monitoring | 2 | 2 | prod | self-hosted |
| Playwright (Node) | DevOps/Automation | 3 | 1 | prod | self-hosted |
| Karaoke Eternal | Sonstiges | 1 | 3 | prod | self-hosted |
| ffmpeg | Sonstiges | 1 | 2 | prod | self-hosted |
| Vite | DevOps/Automation | 2 | 1 | prod | self-hosted |
| MermaidDash | Monitoring | 1 | 2 | experimental | self-hosted |
| macmcp | DevOps/Automation | 2 | 1 | prod | self-hosted |
| homelable | Monitoring | 1 | 2 | experimental | self-hosted |
| Music Assistant | Sonstiges | 1 | 2 | experimental | self-hosted |
| Home Assistant MCP | DevOps/Automation | 1 | 2 | experimental | self-hosted |
| drawio MCP | DevOps/Automation | 1 | 2 | experimental | self-hosted |
| Node-RED | DevOps/Automation | 1 | 2 | experimental | self-hosted |
Applikationen — die Werkstätten
Wo gearbeitet wird: ERP, Commerce und Fachanwendungen. Das Geschäft selbst — vom Auftrag bis zur Rechnung, so weit wie möglich auf eigenem Boden.
| Technologie | Cluster | Krit. | Verbr. | Reife | Souveränität |
|---|---|---|---|---|---|
| Odoo | App/ERP | 5 | 10 | prod | self-hosted |
| AutomationX | App/ERP | 5 | 3 | prod | self-hosted |
| Medusa | E-Commerce | 3 | 4 | staging | self-hosted |
| Odoo (Entwicklung) | App/ERP | 4 | 2 | prod | self-hosted |
| Odoo 18 (de) | App/ERP | 4 | 2 | prod | self-hosted |
| Wildfind | App/ERP | 4 | 2 | prod | self-hosted |
| Documenso | App/ERP | 3 | 2 | prod | self-hosted |
| Kunden-App (Fitness) | App/ERP | 3 | 2 | prod | self-hosted |
| Versicherungs-API | App/ERP | 2 | 2 | staging | self-hosted |
| Odoo 18 (demo) | App/ERP | 2 | 2 | staging | self-hosted |
| FastAPI / uvicorn | App/ERP | 2 | 2 | prod | self-hosted |
| Ohne Etikett API | App/ERP | 2 | 2 | experimental | self-hosted |
| OnlyOffice | App/ERP | 3 | 1 | prod | self-hosted |
| Grist | App/ERP | 3 | 1 | prod | self-hosted |
| Uvicorn | App/ERP | 2 | 1 | prod | self-hosted |
| Odoo 13 | App/ERP | 2 | 1 | legacy | self-hosted |
Frontend — die Schaufenster
Was Menschen sehen: die Oberflächen und ihr Baukasten. Editorial statt Framework-Einheitsbrei — Radius null, kein Schatten, klare Sicht.
| Technologie | Cluster | Krit. | Verbr. | Reife | Souveränität |
|---|---|---|---|---|---|
| Directus | CMS/Frontend | 5 | 16 | prod | self-hosted |
| Next.js | CMS/Frontend | 5 | 5 | prod | self-hosted |
| Puck | CMS/Frontend | 4 | 4 | prod | self-hosted |
| FastAPI | CMS/Frontend | 3 | 5 | prod | self-hosted |
| SvelteKit | CMS/Frontend | 3 | 3 | prod | self-hosted |
| Kundenprojekt (Web) | CMS/Frontend | 3 | 2 | prod | self-hosted |
| Flutter | CMS/Frontend | 3 | 2 | prod | self-hosted |
| Django | CMS/Frontend | 2 | 2 | prod | self-hosted |
| GSAP | CMS/Frontend | 2 | 2 | staging | self-hosted |
| React | CMS/Frontend | 2 | 2 | prod | self-hosted |
| Astro | CMS/Frontend | 4 | 1 | prod | self-hosted |
| Onlook | CMS/Frontend | 1 | 3 | experimental | self-hosted |
| Plain CSS | CMS/Frontend | 2 | 1 | prod | self-hosted |
| D3 | CMS/Frontend | 2 | 1 | prod | self-hosted |
| Three.js | CMS/Frontend | 2 | 1 | prod | self-hosted |
| Tailwind CSS | CMS/Frontend | 2 | 1 | prod | self-hosted |
KI & Wissen — die Denkfabrik
Modelle und Gedächtnis: ein eigenes AI-Gateway vor lokalen und fremden Modellen, plus selbstgebaute Memory-Systeme. Kreativität, ohne die Datenhoheit abzugeben.
| Technologie | Cluster | Krit. | Verbr. | Reife | Souveränität |
|---|---|---|---|---|---|
| LiteLLM | KI/LLM | 4 | 10 | prod | self-hosted |
| Wissensberg | Wissens-/Memory | 4 | 4 | prod | self-hosted |
| Ollama | KI/LLM | 3 | 5 | prod | self-hosted |
| Honcho | Wissens-/Memory | 3 | 5 | prod | self-hosted |
| Mempalace | Wissens-/Memory | 4 | 3 | prod | self-hosted |
| BookStack | Wissens-/Memory | 3 | 3 | prod | self-hosted |
| RAG-Anything | KI/LLM | 2 | 2 | experimental | self-hosted |
| Wildsearch Embed | KI/LLM | 2 | 2 | prod | self-hosted |
| OpenWiki | Wissens-/Memory | 2 | 2 | prod | self-hosted |
| XWiki | Wissens-/Memory | 2 | 1 | experimental | self-hosted |
| SilverBullet | Wissens-/Memory | 1 | 1 | legacy | self-hosted |
Kommunikation — die Nervenbahnen
Wie geredet wird: eigene Matrix, eigener Mailserver, eigene Kanäle. Nachrichten gehören nicht in fremde Silos.
| Technologie | Cluster | Krit. | Verbr. | Reife | Souveränität |
|---|---|---|---|---|---|
| mailcow | Kommunikation | 4 | 4 | prod | self-hosted |
| Etherpad | Kommunikation | 3 | 5 | prod | self-hosted |
| OpenArchiver | Kommunikation | 3 | 3 | prod | self-hosted |
| Matrix-Bridge | Kommunikation | 3 | 2 | prod | self-hosted |
| ForwardEmail | Kommunikation | 3 | 2 | prod | self-hosted |
| Element / Matrix-Bot | Kommunikation | 3 | 2 | prod | self-hosted |
| Mailpiler | Kommunikation | 3 | 2 | prod | self-hosted |
| Matrix-Bot | Kommunikation | 3 | 2 | prod | self-hosted |
| Matrix (Synapse) | Kommunikation | 3 | 2 | prod | self-hosted |
| Open-Archiver | Kommunikation | 3 | 2 | prod | self-hosted |
| PrivateBin | Kommunikation | 2 | 2 | prod | self-hosted |
| Cypht | Kommunikation | 2 | 2 | prod | self-hosted |
| Inbox Zero | Kommunikation | 2 | 2 | prod | self-hosted |
| Matrix Synapse | Kommunikation | 4 | 1 | prod | self-hosted |
| Element | Kommunikation | 3 | 1 | prod | self-hosted |
| mautrix (matrix bridge) | Kommunikation | 3 | 1 | prod | self-hosted |
| aiohttp | Kommunikation | 2 | 1 | prod | self-hosted |
| Matrix bridge (teams) | Kommunikation | 2 | 1 | experimental | self-hosted |
Cloud — die Außenposten
Was wir NICHT selbst betreiben: eine kleine Insel im Meer. Zahlungs-, Druck- und Modell-Dienste, an denen eine bewusste, begrenzte Abhängigkeit besteht — sichtbar gemacht, statt versteckt.
| Technologie | Cluster | Krit. | Verbr. | Reife | Souveränität |
|---|---|---|---|---|---|
| Mistral | KI/LLM | 4 | 4 | prod | cloud |
| Printful | E-Commerce | 3 | 4 | prod | cloud |
| Stripe | E-Commerce | 3 | 3 | staging | cloud |
| Anthropic Claude | KI/LLM | 4 | 2 | prod | cloud |
| WordPress | CMS/Frontend | 3 | 2 | prod | hybrid |
| WooCommerce | E-Commerce | 3 | 2 | prod | hybrid |
| ESET | Security | 3 | 2 | prod | cloud |
| Gemini | KI/LLM | 2 | 3 | prod | cloud |
| fal.ai | KI/LLM | 2 | 2 | prod | cloud |
| Harvest | App/ERP | 2 | 2 | prod | cloud |
| DeepSeek | KI/LLM | 1 | 2 | experimental | cloud |
| OpenRouter | KI/LLM | 1 | 2 | legacy | cloud |
Konsolidierung
Wo etwas abgelöst wird oder werden könnte — der Weg zu weniger, aber bewussteren Bausteinen.
- TimescaleDB — TimescaleDB→Postgres (evaluated in untold)
- Mistral — Mistral→Ollama/self-hosted
- BookStack — OpenWiki/wissensberg
- Sophos UTM — Sophos UTM→OPNsense
- WooCommerce — WooCommerce→Medusa
- SilverBullet — OpenWiki