practice what we preach.
The playbook is a mix of internal defaults, lab-tested options, and client-fit tools Kastro can explain before recommending.
Operating Systems
Fedora Workstation
No telemetry, no licensing, full control. Rapid release cycle for latest security patches.
Ubuntu Server LTS
Stable, well-supported, zero licensing. LTS releases align with infrastructure lifecycle planning.
Asahi Linux (internal only)
Linux on Apple Silicon. Used internally for experimentation — not yet recommended for production. macOS still supported for clients.
Productivity & Collaboration
Nextcloud + ONLYOFFICE
Self-hosted office suite on EU infrastructure. Real-time collaboration with lower US SaaS control-plane exposure.
ProtonMail
End-to-end encrypted, Swiss jurisdiction, zero-access architecture, and reduced US provider exposure.
Element (Matrix)
E2E encrypted, decentralized, self-hosted homeserver. Used by French and German governments.
Jitsi Meet
Self-hosted video conferencing. No account required for guests, no recordings on US servers.
Dev & IT Tools
GitLab (self-hosted)
Self-hosted Git platform with built-in CI/CD. Code never leaves European infrastructure.
OpenTofu
Community fork after HashiCorp's BSL switch. Drop-in replacement, no vendor lock-in.
Zabbix + Prometheus + Grafana
European-friendly observability stack: infra monitoring, app metrics, dashboards, and less reliance on US SaaS.
Vaultwarden
Self-hosted Bitwarden-compatible password manager. Secrets never leave European infrastructure.
want us to build your playbook?
We'll audit your dependencies and build a practical roadmap to better-fit tools, European alternatives, or scoped self-hosting where it actually makes sense.