The hub and server infrastructure

A one-person studio's agents, services and code needed a home server, private source hosting and a private network that one person can run and keep secure.

Period

2026-08 to present

Status

Live

Stack

Proxmox, Ubuntu 24.04, Tailscale, git, bash, PowerShell, systemd

Ownership

Sole builder

Problem

Agent sessions, background services and 21 repositories cannot live on one workstation that gets rebooted. They need a server that is always on, reachable from anywhere without opening ports, and small enough for one person to administer.

Role

Kavish chose the hardware, installed and configured every layer, and operates it. Scripts and service units were drafted by AI coding agents from his specs, under his review.

Built

A home hub on Proxmox

A small mini PC runs Proxmox with a hub VM on Ubuntu 24.04. The hub runs Cokpit’s session daemon, the personal finance tracker (Postgres 16 under systemd) and a job watcher. Lab VMs beside it include a Windows evaluation VM used for clean-install tests of his own installers.

A private network, no open ports

Every machine sits on a Tailscale tailnet with Tailscale SSH; nothing is exposed to the public internet. The VPS that fronts the client sites was hardened the same way, with its origin reachable only through Cloudflare.

Source hosting with secret scanning

21 repositories moved to private GitHub with gitleaks pre-commit hooks, and a three-machine git sync engine kept the workstation, the hub and the laptop in step.

Result

Live since August 2026; 100 commits of scripts, service units and runbooks. The hub VM has run Cokpit’s session daemon since September 2026 and the finance tracker since October 2026.

Collaborators

AI coding agents (Claude Code, Codex): drafted scripts and service units from specs he wrote, under his review. No other contributors.

What stays private

Addresses, keys, the tailnet, VM configuration and the hardware’s location.