practice what we preach.
The playbook is a mix of internal defaults, lab-tested options, and client-fit tools Kastro can explain before recommending.
Operating Systems
Fedora Workstation
No telemetry, no licensing, full control. Rapid release cycle for latest security patches.
Ubuntu Server LTS
Stable, well-supported, zero licensing. LTS releases align with infrastructure lifecycle planning.
Asahi Linux (internal only)
Linux on Apple Silicon. Used internally for experimentation, not yet recommended for production. macOS still supported for clients.
Productivity & Collaboration
Nextcloud + ONLYOFFICE
Self-hosted office suite on EU infrastructure. Real-time collaboration with lower US SaaS control-plane exposure.
ProtonMail
End-to-end encrypted, Swiss jurisdiction, zero-access architecture, and reduced US provider exposure.
Element (Matrix)
E2E encrypted, decentralized, self-hosted homeserver. Used by French and German governments.
Jitsi Meet
Self-hosted video conferencing. No account required for guests, no recordings on US servers.
Dev & IT Tools
GitLab (self-hosted)
Self-hosted Git platform with built-in CI/CD. Code never leaves European infrastructure.
OpenTofu
Community fork after HashiCorp's BSL switch. Drop-in replacement, no vendor lock-in.
Zabbix + Prometheus + Grafana
European-friendly observability stack: infra monitoring, app metrics, dashboards, and less reliance on US SaaS.
Vaultwarden
Self-hosted Bitwarden-compatible password manager. Secrets never leave European infrastructure.
want us to build your playbook?
We'll audit your dependencies and build a practical roadmap to better-fit tools, European alternatives, or scoped self-hosting where it actually makes sense.