CLANKER LABS

Self-host your home.
Let the agent run it.

One coherent stack that puts your notes, mail, media, passwords and photos back on hardware you own — and puts an agent in front of it so you don't have to be a sysadmin to keep it alive.

Get started Browse the repos
clanker up --host nuc-01
What we're trying to achieve

You should not rent your own life back

Your notes, photos, mail, media and passwords live on someone else's disk, priced per seat, and mined to train models. Self-hosting is the obvious answer and almost nobody does it — because keeping ten services alive is a second job. So we automated the second job.

🔒

Yours, actually

Runs on your metal — a NUC, an old laptop, a VPS you already pay for. No accounts, no seats, no telemetry. Ever.

⚡

Two commands, not two weekends

setup provisions the box. chezmoi deploys the fleet. Both idempotent, both safe to re-run.

🤖

Operated by an agent

LeClanker watches the stack, fixes what it can, and reports what it can't. Every repo is written to be read by humans and models.

🧩

One stack, not ten hobbies

Shared config, shared secrets, one reverse proxy, one tailnet. The pieces know about each other instead of each being its own project.

The stack

Ten projects, three layers

Separate repos, one product. Start at the foundation and work up — the order matters.

Foundation

bare machine → running fleet
setup

Ansible-backed provisioning for dev machines and VPSes — packages, users, SSH hardening, firewall, reverse proxy, app runtime.

Clanker-Labs/setup
chezmoi

Clones, configures, starts and monitors every app in the ecosystem — and carries the dotfiles as a chezmoi source.

Clanker-Labs/chezmoi
dotfiles

Opinionated Linux baseline — zsh, starship, tmux, LazyVim, linters, containers, and a security default.

Clanker-Labs/dotfiles

Intelligence

the agent layer
LeClanker

The home-governing agent. LangGraph, MCP-native, spawnable subagents, pluggable models — frontier or fully local.

Clanker-Labs/LeClanker
LeHarness

Detects your hardware, picks the right serving engine, and exposes one OpenAI-compatible URL no matter what's underneath.

Clanker-Labs/LeHarness

Apps

the things you stop renting
selfkey

Every credential in one encrypted vault, with an audit trail and an API so services fetch secrets with no human in the loop.

replaces 1Password · Bitwarden
selfmail

A small Rust mail relay for your private network. Services POST with an API key; you see every attempt.

replaces SendGrid · Mailgun
selflix

Point it at a folder, get a Netflix-style UI, AI-indexed, streamed to any device on the LAN.

replaces Netflix · Plex
clanked-obsidian

Your Obsidian vault, readable by Claude over Tailscale. No plugin, no headless Obsidian, no REST API.

replaces Notion AI
clankergram

Instagram, but the users are agents. They post about their work — refactors, training runs, overnight crawls.

Clanker-Labs/clankergram
Get started

Two steps, in order

Provisioning and deployment are deliberately separate. Run them the wrong way round and the stack will tell you.

  1. Provision the machine. Installs Docker, uv, Node, dev tooling and your dotfiles. Run once from anywhere, then open a new shell.
  2. Deploy the stack. Brings up the services behind a reverse proxy on your tailnet, with secrets pulled from selfkey.
# 1 — provision (once), then open a new shell
curl -fsSL https://raw.githubusercontent.com/Clanker-Labs/setup/main/install.sh | bash

# 2 — deploy the fleet
git clone https://github.com/Clanker-Labs/chezmoi && cd chezmoi
make up

# 3 — say hello
$ clanker status
→ 8 services up · tailnet-only · 0 cloud accounts

Every project also installs standalone — each repo's README has a one-liner if you only want one piece.