Ozan Özdil
EN

Machine translation from Turkish (Cloudflare Workers AI), not reviewed by the author. Read the Turkish original

← Posts

Digital Resistance Series - Part 4: The Software Arsenal - Liberating Digital Life

Score —

Open source tools that can replace the closed software used every day, and self-hosting options.

· Updated: · 4 min read
Contents

Summary: The fourth part of the series is about the open-source services that will run on the home server you set up: Nextcloud for files, calendar and office, Immich for a photo archive with local machine learning, Vaultwarden for passwords, Pi-hole/AdGuard Home for network-wide ad and tracker blocking, and Docker to manage it all.

"If hardware is a wall, software is the army that defends those walls. Using open-source and auditable software means choosing to 'verify' rather than trusting blindly in the digital world. Running our own services is the ultimate step to being the master of your data."

Introduction: Why Open Source and Self-Hosting?

Commercial software usually works on a "black box" logic. You can never fully know what data it sends where in the background, or which telemetry code it runs. Self-hosting and Open Source software, on the other hand, are transparent; they are constantly audited by the community and, most importantly, they keep data within the boundaries you define. In this section, we examine the most powerful software weapons that will breach the Big Tech siege.

1. Nextcloud: Your Own Digital Office and Cloud Ecosystem

The strongest alternative to Google Drive, Dropbox or OneDrive is Nextcloud. Nextcloud is not just a file storage space, but a full-fledged productivity platform.

1.1. Data Sovereignty and Synchronization

Nextcloud synchronizes your files between your computer, phone and server with end-to-end encryption (optional). But here is how it differs from its commercial rivals: your files are not in a data center in Silicon Valley, but on the disks of your own server with an i5-14500 processor.

  • Nextcloud Office: You can edit your documents in the browser without needing Google Docs.

  • Contacts & Calendar: You can pull your contacts and calendar from Google or Apple servers and move them to a database under your own control.

2. Immich: AI-Powered Photo Archive

What keeps many users captive to the Google Photos or iCloud ecosystem is AI features such as face recognition and object search across photos. Immich is a high-performance self-hosted photo solution that technically ends this dependency.

2.1. Local Machine Learning (Local ML)

Immich takes advantage of the capacity of powerful processors like the i5-14500 and does not send your photos to cloud systems to analyze them. The machine learning algorithms run entirely on your own server (locally).

  • Face Recognition and Object Detection: When you search for "Sea" or "Car", results come within seconds; but during this process, no data leaves your server.

  • High-Resolution Backup: You can store your RAW files at their original quality, without the "quality reduction" policy applied by Google Photos.

3. Vaultwarden: The Cryptographic Fortress of Your Passwords

Allowing browsers (Chrome, Edge) to store your passwords means leaving all your digital keys at the mercy of a company. Vaultwarden, a lightweight and more performant version of Bitwarden, solves this problem at its root.

3.1. Master Password and Zero-Knowledge

Vaultwarden encrypts your data on your device before saving it to the server. The server administrator (even if it is you) cannot see the contents of the data without the "Master Password". Hosting your own password manager ensures you are not affected by the data breaches suffered by giants like LastPass.

4. Network Defense: Pi-hole and AdGuard Home

Tracking happens not only through the links you click, but also through the silent DNS queries made by every device connected to the internet (smart TV, refrigerator, phone). Pi-hole or AdGuard Home is a digital customs gate installed at the entrance of your local network.

4.1. Ad and Tracker Blocking at the DNS Level

These programs keep a list (blocklist) of known ad and tracking servers. When your device wants to connect to an ad server, the query is blocked before it even leaves the network (black-holing).

  • Network-Wide Protection: Ads and telemetry data are blocked not only on your computer, but even on your smart TVs where an ad blocker cannot be installed.

  • Exposure of Hidden Telemetry: From your server's panel, you can watch live which of your devices is secretly trying to send data to which tech company.

5. The Container World: The Convenience of Docker and Portainer

How will you manage so many services at once? The answer: Docker. Running each piece of software (Nextcloud, Immich, Pi-hole) in independent "containers" increases the stability of the system. When one service crashes or is updated, the others are not affected. Portainer, on the other hand, lets you manage this entire complex structure with a visual interface, with a single click.

My reading

When you build your software arsenal, your internet experience changes fundamentally. You no longer have to put up with the hidden costs of "free" services (paying with your data). Hosting your own services is not just a technical achievement, but also a declaration of freedom. But remember: the best defense starts not from the outer shell of the system, but from inside the device in our very pocket.

In Part 5 of the Series: We will cover "The Last Bastion in the Mobile World: A Spy-Free Phone Experience with GrapheneOS." We set up our server and deployed our software; now we will liberate our biggest spy device, our smartphone.

Part 4 Technical Terms Glossary:

  • Open Source: Software whose source code can be examined by anyone.

  • Self-Hosting: The process of hosting services on your own server.

  • LXC / Docker: Technology for running software in isolated boxes.

  • DNS Sinkhole: A technique for eliminating malicious addresses at the network level.

  • Zero-Knowledge: An encryption model in which the service provider can never read the data.

  • ML (Machine Learning): A subfield of artificial intelligence that performs data analysis.

  • CRUD: The basic cycle of data operations (Create, Read, Update, Delete).

  • Reverse Proxy: The gateway that routes external traffic to the correct service inside the server.

Sources

  • Nextcloud Security Whitepapers.

  • Immich Documentation and Local ML Benchmarks.

  • Bitwarden Open Source Security Audit Report.

  • Pi-hole Network Filtering Logic & Blocklist Analysis.