network nodes · srv01 + srv02 · coventry / maidenhead, uk
Securely hosted on dedicated hardware within UK data centres. A private, encrypted, open-source ecosystem — two sites, one encrypted WireGuard mesh.
live telemetry
Everything below is measured live — not a screenshot, not yesterday's numbers. It refreshes as you watch.
querying monitors…
Every service on the node, checked around the clock from a second site 100 miles away. UP means it responded to the last check.
the ecosystem
Private, open-source replacements for the everyday cloud — running on dedicated UK hardware, behind one secure login.
photos.itzgee.com
replaces Google Photos · iCloud Photos
A private photo and video library. Your phone backs up automatically, and you can search your entire collection by what’s in the picture — people, places, things. Facial recognition and search run on this hardware; your memories never leave it.
cloud.itzgee.com
replaces Google Drive · Dropbox · OneDrive
Your personal cloud drive. Store files, sync them across every device, share with a link, and edit documents together in real time — plus calendars and contacts. The difference: it all lives on private hardware, not a tech giant’s servers.
cars.itzgee.com
replaces the glovebox full of receipts
A digital service book for your vehicles. Log every service, MOT, repair and fuel-up; track cost per mile and fuel economy over time; get reminders before things are due. Sell a car with its full documented history attached.
passwords.itzgee.com
replaces LastPass · 1Password · Bitwarden
A password manager for all your logins, cards and secure notes — compatible with the official Bitwarden apps and browser extensions. Everything is encrypted end-to-end on your devices; the server only ever holds ciphertext it cannot read. Deliberately kept independent of the platform login, so it is always reachable.
gps.itzgee.com
replaces Google Timeline · Life360
A private location history and travel timeline — the self-hosted alternative to Google Timeline. Every trip, visit and route is mapped automatically from your phone, with statistics on distance, cities and time — all of it on this hardware, never handed to an ad network.
replaces the filing cabinet
Scan or upload any document — bills, contracts, warranties, letters — and it’s automatically read, tagged and made searchable. Find any piece of paper you’ve ever owned in seconds.
replaces hoping two sites is enough
A third encrypted copy of all platform data, held in S3 object storage outside both data centres. Everything is encrypted on our hardware before it leaves — the storage provider holds ciphertext it cannot read. If both sites were lost, the platform restores to fresh hardware in minutes, not days.
the metal
No shared hosting, no mystery hypervisors ten tenants deep. Dedicated resources in two UK data centres, 100 miles apart.
The sizing is deliberately unequal, and that's the design: a powerful primary that does everything, and a small, fully independent second site whose only jobs are to watch it and to hold its history. Different city, different provider, different failure domain — the one thing they share is an encrypted tunnel. That asymmetry is what "OEM-plus" means here: specified like a product, not assembled from leftovers.
coventry, uk
The workhorse. Every application, every login, every photo search and file sync runs here — on a modern Zen 5 core with DDR5 feeding it and NVMe underneath. Sized so the busiest day never feels busy.
Runs the full application stack — every service in the rack manifest above lives here.
maidenhead, uk
The insurance policy. Deliberately small, deliberately elsewhere, deliberately independent — it needs just enough muscle to watch, alarm and archive. Its value isn’t horsepower; it’s that nothing that breaks srv01 can break it too.
Independently monitors the primary and pulls encrypted backups across the mesh. If srv01 has a bad day, srv02 already knows — and already has a copy.
topology
The path your data takes — from your browser, through the edge, onto the hardware, and across to the backup site.
a day on the node
Most of this platform's work is invisible — a routine the two servers run between themselves whether anyone is watching or not. Here's the honest schedule.
srv02 probes every public service and the tunnel itself — nine checks, around the clock
srv02 → srv01the WireGuard peers perform a fresh handshake and rotate to new forward-secret session keys
srv01 ⇄ srv02this very page re-reads the telemetry feed, so visitors always see the current truth
your browser → srv02Traffic thins out. Both firewalls keep default-denying the internet’s background noise — port scans and bot probes arrive all night and are dropped without a reply.
both nodessrv02 reaches across the mesh and takes an encrypted snapshot of the primary — restic, AES-256, deduplicated so only what changed travels. The primary cannot touch the backup store; the history is out of its own reach.
srv02 → srv01The new snapshot is checked and catalogued alongside its predecessors. If Coventry vanished right now, this morning’s copy is already 100 miles away.
srv02Log rotation and container health checks tick over. Docker restarts anything that misbehaves; nothing has, but the policy doesn’t care about optimism.
both nodesPhones start syncing photos, files start flowing, logins hit the identity layer. Every request rides TLS to the edge, is re-encrypted to origin, and lands on srv01’s NVMe.
visitors → srv01TLS certificates are checked and renewed automatically well before expiry — the class of outage that takes down big-name sites is handled by a robot here.
srv01The busiest stretch of the day. The Zen 5 cores barely notice — headroom is the point of the spec. srv02 keeps scoring every service response, minute by minute.
srv01 · watched by srv02Another day of uptime lands in the public record at status.itzgee.com. The watchtower never blinked. Four minutes to the next backup.
both nodessoftware manifest
Every layer of this platform is built on open-source software — auditable by anyone, owned by no one. These are the projects doing the work.
tenancy
Private, managed space on this hardware — your own encrypted slice of the rack, behind your own login. UK-hosted, invite-provisioned, no strangers on the machine.
There is no public signup and no checkout page. Tell us what you need — storage for files, a photo library, or the full stack — and we’ll confirm capacity on the node.
Your space is allocated with a dedicated storage quota, and your identity is enrolled with two-factor authentication from day one. One login covers every service in your plan.
Updates, security hardening, monitoring and encrypted off-site backups are all handled for you. You use the apps; the infrastructure is our problem.