Skip to content

The Stack Sovereignty Box

The reference VPS this whole wiki documents and runs on — the live demo for the Stack Sovereignty AI course. It's a single small DigitalOcean droplet running a curated, owned stack of self-hosted apps plus a two-layer AI agent system (hermes + claude-code).

Specs

  • DigitalOcean · Ubuntu 24.04 · 2 vCPU / 3.8 GB RAM / 77 GB disk
  • Domain claw-test.optevohq.tech with wildcard DNS
  • Docker with a shared srv-net network; one service per /srv/<name>/ directory

The base stack

Service Role Front door
caddy Reverse proxy + automatic HTTPS (edge)
Homepage Dashboard of tiles home.
CloudCLI Chat-with-your-agent window agent.
code-server Browser VS Code code.
FileBrowser File manager files.
Vikunja Task board tasks.
This wiki Knowledge base wiki.

Private access + emergency path via tailscale (node claw-droplet). Nightly backups run as deterministic system cron, not an agent.

The agent layer

  • hermes — always-on orchestrator + knowledge layer (maintains this wiki)
  • claude-code — on-box executor / "VPS architect," tasked by Hermes
  • Governed by ported vps-architect skills (compose conventions, Caddy, hardening, lifecycle)