Self-hosted · Nextcloud · Docker Compose

Self-host Nextcloud
the way you'd
actually trust.

A hardened Compose stack — Nextcloud behind Traefik and Authelia — with offsite backups that restore. You own your data. The fiddly, security-critical parts are already done, and tested.

// what "vetted" actually means

✓TLS + Traefik reverse proxyverified

✓Authelia SSO + 2FA in frontverified

✓Offsite backup + restore drillpassed

✓Hardened defaults, not tutorial defaultsverified

✗A compose file that "looks right" from an LLMuntested

Restore drill = the backup is actually put back and checked. Before you need it — not the night your disk fills up.

Plausible is not the same as tested

An LLM will hand you a Compose file that looks right. A blog tutorial gives you someone else's happy path. Neither one has put the backup back, checked the auth actually blocks, or run it long enough to know what breaks. That gap — between looks right and known-good — is the whole product. VettedStack is the boring, verified config that holds up, restores cleanly, and doesn't quietly leave a door open.

What's in the kit

docker-compose.yml

Opinionated, commented Compose file: Nextcloud behind Traefik with automatic TLS, Authelia for SSO and 2FA in front of it.

Hardened defaults

Security headers, sane permissions, isolated networks, secrets handled properly — not the "works on my machine" version.

Backups that restore

Offsite backup setup with a restore script, plus a documented restore drill so you've proven recovery before you ever need it.

A real runbook

Clear docs for deploying, updating, troubleshooting and recovering — written for the day something is on fire, not just the happy path.

Up and running in about 30 minutes on a €5/month VPS.

Who it's for

Built for you if

You can run a server — you just don't want to spend a weekend on this one.
You're a homelabber, a technical association volunteer, or a small shop with a dev.
You'd rather start from a vetted shortcut than rebuild it from scratch.

Not for you if

You want someone else to host and operate it for you.
You've never touched Docker or a VPS and don't want to start.
You need a support hotline when something breaks. This is a stack you own and run — that's managed hosting, a different thing.

The offer

€39 one-time · yours forever

Optional €49/year maintenance: tested updates when an upstream moves, security alerts, priority support. Skip it and the kit is still yours.

Replaces a Drive or Microsoft 365 subscription that never stops billing — for data you'd rather just own. On a €5/month VPS, the kit pays for itself in months.

Straight answers

Is this managed hosting?

No. You host and run it on your own VPS. VettedStack is the vetted starting point — the config, the hardening, the tested backups, the runbook — not a service that runs the server for you.

Do I need server experience?

Some. If you're comfortable with a Linux VPS and basic Docker, you're the target. If "SSH into the box and run docker compose up" reads like a foreign language, this kit isn't the right fit yet — and I'd rather tell you that now.

Why not just ask an LLM to write the compose file?

You can, and it'll look convincing. The difference is that nobody tested it. The value here isn't the YAML — it's that the backups have been restored, the auth has been checked, and the defaults are hardened. Known-good, not plausible.

What does the maintenance tier actually cover?

When an upstream ships a breaking change or a CVE lands, you get a tested update and a heads-up — instead of finding out yourself. It's optional because the one-time kit is fully yours either way.

Want it when it ships?

Drop your email. One message at launch, with the early discount — nothing else.