A 4 GB Jetson Nano hosting some thirty services under docker compose: an nginx reverse proxy with Let's Encrypt certificates, Vault and an internal certificate authority, Keycloak and LDAP for single sign-on, local DNS with DoH, home automation (zigbee2mqtt, Home Assistant), metrics (InfluxDB, Grafana), storage (Seafile, Nextcloud) and photos (Immich).

Everything lives in an Ansible repository: each service is a role that reads its secrets from Vault, renders its compose.yml and deploys it. The server can be rebuilt from scratch from the repository.