HexoForge — a self-hosted platform stack
A bare-metal deployment platform I operate myself: Dokploy on Docker Swarm with Traefik, ingress through Cloudflare Tunnel, and a self-hosted NetBird mesh VPN. Authentik provides single sign-on (OIDC/SAML) across Vaultwarden, Forgejo, LiteLLM, Beszel and NetBird, with automated backups to MinIO and a Grafana + Loki + Promtail logging stack.
The interesting part is the failures: recovering from Docker network corruption with a full Swarm re-initialisation, fixing tunnel packet loss by forcing HTTP/2 transport, untangling NetBird DNS and ICE issues, and restoring email deliverability under DMARC enforcement.
- Docker Swarm
- Traefik
- Authentik
- NetBird
- Cloudflare Tunnel
- MinIO
- Grafana / Loki