the philosophy
Taking back control.
Modern digital life runs through a handful of enormous companies that treat your photos, documents and messages as raw material — mined, modelled, and monetised. GeeCloud is the deliberate opposite: a private, self-hosted environment built for data sovereignty, not data extraction. No proprietary black boxes. No telemetry heading back to Silicon Valley. Just infrastructure that does exactly what it's told, and nothing else.
the engine
Built on open source.
Every service here runs on powerful, community-audited open-source software — the same tools trusted by people who read the code before they run it. Files on Nextcloud, photos on Immich, each sealed in its own Docker container. Because the source is open, there are no hidden trackers, no background telemetry, and no algorithmic profiling: the software is inspectable, and it behaves.
see everything in the rack →the fortress
Uncompromising privacy. UK hosting.
local infrastructure
Hosted exclusively on dedicated servers in UK data centres. Your data doesn't cross oceans or fall under foreign surveillance jurisdictions — it stays here.
no vendor lock-in
Open platforms like Nextcloud and Immich keep your data in standard, portable formats. Take it and leave whenever you like — true ownership, not a walled garden.
encrypted throughout
From the moment data leaves your device through secure tunnels to where it rests on the drives, it stays encrypted. In transit and at rest, without exception.
zero snooping
No big-tech data mining, no third-party advertisers, no unauthorised access. There is no profile of you here to sell, because none is ever built.
the mesh
Two sites. One encrypted tunnel.
The two servers talk only across an encrypted WireGuard tunnel with cryptographic peer identity — no passwords, no exposed login surface, forward-secret keys refreshed every few minutes.
under the hood
Inside GeeCloud.
A transparent, high-level view of how it's put together — no secrets given away, just proof this is a serious, self-sustaining ecosystem rather than a weekend experiment on a spare board.
$ ./manifest --live
srv01Coventry, UKchecking…
srv02Maidenhead, UKchecking…
meshWireGuard dual-tunnelchecking…
nodes2 × dedicated UK servers · Coventry + Maidenhead
meshWireGuard dual-tunnel · encrypted site-to-site
transportTLS 1.3 · ChaCha20
identitysingle sign-on · MFA enforced
containersDocker · one isolated container per app
backupsAES-256 · nightly cross-site pull
coreopen-source, top to bottom
$
taking back the stack
The open-source shift.
Privacy makes the most sense when you can see what you're leaving behind. Here's the swap as a commit — proprietary ecosystems removed, self-hosted equivalents added. Quietly, it doubles as a map for de-Googling your own life.
-Google Drive · Dropbox · OneDrive
+Nextcloud // Your files, on hardware you can point to.
-Google Photos · iCloud Photos
+Immich // The photo library that never phones home.
-the glovebox full of receipts
+LubeLogger // A proper service history for every vehicle you own.
-wondering if it’s just you
+Infrastructure Monitor // The platform, watched from somewhere else.
-LastPass · 1Password · Bitwarden
+Vaultwarden // Every password, end-to-end encrypted, on your own hardware.
who's behind this
Your data, your rights.
// message from admin gee · root@srv01
Running THE VAULT isn't a hobby — it's a commitment to doing things the right way. Quality over shortcuts, privacy over convenience, ownership over lock-in. Every container, tunnel and backup here is maintained by hand, because your data deserves someone who actually cares where it sleeps at night. That's the whole promise: your data, your rights, kept honestly.
— Gee
appreciate the project
Help keep the drives spinning.
Maintaining an independent, privacy-respecting server environment takes real time, effort and ongoing upkeep. If you share this vision of a decentralised, private web and want to help keep the lights on, your support means the world.
appreciate the project →