A Declaration of Independence
Every Fourth of July celebrates an independence most of us have quietly traded back, one subscription at a time. What does it actually cost to move your files, your photos, your mail, and your AI into your own house? And why would the technology sold as the ultimate instrument of control turn out to be the shortest road out?
The men who signed the Declaration were not asking for better terms. That is the part we forget. They were not petitioning for a fairer tax or a lighter hand. They were saying the relationship itself was illegitimate, that a people can govern itself, and that the burden of proof had flipped. Independence is not a discount. It is a change in who decides.
Two hundred and fifty years on, the empire is softer and the tax is a recurring charge you stopped reading years ago. It comes disguised as convenience. That is the only form of control a free person accepts without a fight. Your photos, your mail, your documents, your calendar, the whole record of a life, all of it sits on machines you will never see, inside accounts a single unappealable email can close. It never felt like dependency. A dependency that announced itself would never have found a taker. It felt like relief, like one less thing to carry. That was the bargain. For a long time it was an honest one.
Then AI arrived. It is the same trade taken to its conclusion. The most capable tool most people have ever touched, metered by the word, running on hardware you will never see, trained on the exhaust of everything you and everyone else ever typed, and available only as long as the account stays open and the terms stay bearable. It is sold, correctly, as the most empowering thing to happen to ordinary work in a generation. It is also, in the same motion, the most complete dependency ever offered to a consumer. It does not just hold your files. It holds your ability to think through them. Both of those are true. Which one you get is not a property of the technology. It is a property of who owns the machine it runs on.
The word king has come back into the American mouth. The corporate overlord is only its economic form. The new sovereigns rule the way the old ones never could, by owning the tools you think with. The deepest joke of the arrangement is that those same tools will help you leave if you simply point them the other way. The model built to keep you inside someone else's walls will, if you ask it, help you raise your own. That is the whole maneuver. It is using the master's instruments to stop needing the palace at all, with software already sitting on a drive you own tonight. In a moment when we are once again talking about kings and the men who would be them, why would we not use the most powerful tools ever handed to us to build our independence from the world they built to hold it?
The soft empire
The people building the cloud are not villains, they are landlords. The distinction matters because landlords are rational. The business is selling you the recurring inability to leave. Everything about the product is shaped to that end. Your data goes in easily and comes out badly. The formats are open enough to import and just proprietary enough to trap. The price is low while you are deciding and adjusts once you cannot. I have written about where that money actually goes, the way the infrastructure spend is really a wealth transfer dressed as a utility bill. I have also written about the waste of the metering model itself, the tens of millions burned on malformed requests that a check on your own machine would have caught for free.
The AI version is only sharper. A model you rent can be retrained, re-priced, deprecated, aligned away from the thing you used it for, or simply switched off. You will find out the way you find out about any landlord's decision, after it is made. The original sin was letting the most important tool of the decade arrive as a rental. Every serious capability you build on top of a rented model is a structure you are erecting on land you do not own. The rent is not fixed.
The same technology, pointed the other way
The exact same technology, run on a machine that sits in your house, is the most liberating thing to happen to self-reliance since the personal computer. It liberates for the reason the personal computer did. It collapses the amount of institution you need standing between you and a capability.
Self-hosting was always possible and almost always impractical. The tools existed and the hardware got cheap. Still almost nobody did it. The work of standing it all up and keeping it alive was a second job you had to actually be good at. That is the thing that changed. It changed while the public argument was about chatbots. The model that the landlords rent you by the word is the same kind of model you can run locally to carry the exact overhead that used to make self-hosting a second job. It writes the deploy script, reads the log, remembers the flag, drafts the config, and explains the error. That is precisely the labor that stood between a normal competent person and running their own infrastructure. I have made this argument for organizations, the lean coordinator in the cloud and the heavy repetitive work on hardware you already own. The argument for a household is the same argument with a smaller electricity bill. AI is the thing that finally makes independence maintainable by one person. The tool built to be the ultimate dependency is also the tool that dissolves every other dependency, if you are willing to point it that way.
So I pointed it that way.
What independence actually costs
There is no free lunch here. There is only a better landlord. That landlord is you.
The physical footprint is small and unexotic. The machines are mostly my old gaming PCs, retired from games and given a second life, ordinary multi-core desktops with a modest amount of RAM, the kind of thing a lot of people already have going quietly obsolete in a closet. The only purpose-built box is the workhorse. It holds the bulk of the storage and carries everything heavy, the local models, the media, the big services. The graphics cards doing that acceleration are ordinary consumer gaming parts, four of them spanning several generations. The workhorse carries a pair of RTX 3090s for the language models and the image generation. A second box runs a 2080 Ti for the voice models. The oldest, a GTX 980 from a decade ago, drives the streamed desktops. You do not need a data-center GPU for any of this. You need the kind that is probably already sitting in a machine in your closet. One of the repurposed gaming rigs is a deliberately modest little machine that faces the public internet, chosen to be low-power and boring because the thing on the edge should be the thing you care least about losing. Its only job is to be the front door, the reverse proxy, with nothing sensitive living on it. The home automation used to sit on that edge box. I have since moved it inward, off the public-facing machine entirely. The last system that should be reachable from the open internet is the one that controls your lights and your locks. The other repurposed rig has a single job, identity, certificates, and mail, the trust anchor for everything else. There is a small pleasure in all of this that the cloud quietly took from us. These machines have names. The one I am writing this on, my personal desktop, is the Millennial, which, for the record, I am. The old edge box is Boomer, fittingly the oldest and lightest of the three. The trust anchor and the workhorse were meant to round out the joke as GenX and GenZ, though if I am honest the naming outran me and at least one of them still answers to whatever the installer called it. Remember when we got to name our own servers fun things, back before every machine you touched became an anonymous instance ID in a rack you would never see? Owning the hardware hands that back too, along with everything more serious. And there is one small rented server in a datacenter that exists for a single reason I will come back to. It is the one honest exception to the whole philosophy.
The cost is not the hardware, it is the discipline. Everything is defined as code. The system becomes a thing I can rebuild instead of a thing I have configured and must now fear. Certificates come from my own internal authority. Names resolve through my own split-horizon DNS. Deploys run through a pipeline, not through me typing on a Tuesday. Occasionally something falls over at three in the morning. That used to mean I got up. It can now mean an agent gets up, works out what broke, applies the fix when the fix is already a written procedure, and files a ticket when it is not. I read the result over coffee. The machinery for that is the subject of a separate piece. That is exactly the kind of labor the landlord was absorbing for you and charging you for. Owning the stack means you can hand it to something that does not mind the hour. That is the real answer to what it takes. It takes accepting that you are now the operator, and using the machine to make being the operator survivable for one person.
The sacrifice, the thing you actually give up in exchange, is close to nothing. At the layer where you live, opening an app and doing a thing, there is no downgrade. The replacements are not sad approximations of the products you left. In several cases they are better. In a few cases they do things the hosted product will not let you do at any price.
The everyday things you already rent
These are the boring, load-bearing needs, the ones you would notice within a day of losing them.
Documents. Every receipt, statement, warranty, and contract goes into Paperless-ngx. It scans, OCRs, tags, and makes the whole paper history of a life full-text searchable. It is the filing cabinet you always meant to keep, run by a machine that never gets bored. This is the single service that most convinced my family the project was a good idea. "Where is that document" stopped being a question.
Files and sync. Nextcloud is the OneDrive, the Google Drive, the shared family folder, syncing across every device with the same casual reliability. Much of this whole section is really just Nextcloud wearing different hats. It does far more than files straight out of the box. Calendar and contacts and notes and Talk for calls and chat, and with Collabora alongside it the office suite too, all through my own server instead of a company's. A surprising amount of the everyday cloud turns out to be one install. The files are on my disk. The link you share expires because I decided it does, not because a plan tier decided it.
Office and editing. Collabora and LibreOffice cover documents and spreadsheets with real fidelity. But for anything genuinely sensitive I reach past them on purpose, to CryptPad. It is end to end encrypted and zero knowledge, meaning the server, my server, cannot read what you are writing on it. This is the choice I want to point at. It is the whole thesis in miniature. Given the option, I did not pick the tool that merely moved the surveillance in-house. I picked the one where the surveillance is mathematically impossible. Independence is not just changing who holds the key. Sometimes it is making sure there is no key.
Passwords. Vaultwarden holds every credential, the Bitwarden protocol on my own hardware. That is the correct place for the keys to your entire life to live.
The chatbot. Open WebUI is the ChatGPT-shaped window, pointed at models running on the box downstairs. The family uses it the way everyone uses the hosted one, except the conversations do not leave the house, nothing is training on them, and there is no meter running. It is the same experience with the landlord removed. And for the version of this you can hand to someone who does not want to assemble any of the pieces, there is Project N.O.M.A.D, an offline AI and knowledge server that packages the model, the tools it can call, and a local knowledge base into a single box that still works with the internet unplugged.
There is also, since someone always asks, a Jellyfin server, and behind it an *arr stack. What that stack does is left as an exercise for the reader.
The things you did not know you could hold
Then there are the needs you assumed structurally required a corporation, the ones where the surprise is that they can sit on a shelf at all.
Navigation. This is the one that changes how people think about the whole project. It is easily the most expensive thing in the house to pull off. Everyone assumes maps are a thing only Google could do, a whole planet of tiles and imagery and routing. That assumption is half right. To hold the world you have to actually hold the world. Wayfinder is a full maps app, address search, turn-by-turn routing, points of interest, 3D terrain. It runs against a local geo stack that is, frankly, a monster. The vector tiles for the whole planet, the aerial imagery, the routing graph, the geocoding database, the elevation model, it runs to terabytes on disk. That is the honest price of never asking a datacenter for a single turn. None of that lives on a phone. It never could. It lives on the workhorse, the box with the disks and the GPU. Every screen in the house is just a browser pointed at it. On top of the data sits the part that makes it feel like a maps app from this decade instead of a static atlas. A local AI stack, speech-to-text so you can ask it where to go out loud, a language model that understands the asking, and text-to-speech that reads the route back, all of it running on hardware I own and none of it phoning home. It is a maps app you can talk to, that talks back, and that answers to me instead of to an advertiser. You do not need Google to hold the world. You need a big enough disk and the will to fill it.
Learning. Kolibri is a self-hosted education platform, a genuine library of courses and materials that lives at home and works whether or not the wider network does. Kiwix sits next to it holding offline copies of the reference web. Here too the scale is the point. The full text of Wikipedia, the programming Q&A archives, the how-to and medical and survival libraries, packed down and sitting on my disk, is hundreds of gigabytes of the knowledge that used to require a live connection to somebody else's servers and now requires nothing but electricity. And this is where the separate pieces quietly become one thing. The map data, this whole knowledge base, and every document I have ever scanned are all reachable through the same local chatbot from earlier. Open WebUI is not just a model in a box. It answers out of my own corpus, the planet and the encyclopedia and my own paperwork, so the assistant knows my own world. It learned none of that by watching me.
Making things. BambuBuddy runs the 3D printers and Manyfold is the library of models to feed them, so the design-to-object loop is entirely inside the house.
Comms that survive the grid. This is where independence stops being a metaphor. Meshtastic is long-range mesh radio that needs no cell tower and no internet, a text network that keeps working when the infrastructure everyone else depends on does not. Alongside it I run OpenTAKServer, the open-source TAK server, for shared situational awareness across those devices. Most of the stack is about not depending on a company. This part is about not depending on the grid.
The odds and ends. The small daily utilities that you currently hand to random websites, the PDF tools, the format converters, the diagramming, the inventory of what you own, all self-hosted, all private, all yours.
The plumbing you have to own
Underneath the things you use are the things that make using them safe. This is where the real engineering lives.
Accounting. This one is a nice-to-have, and honestly mostly for the business owners among us. If you run a company, the books can sit on a proper self-hosted stack instead of a subscription that raises its price the year you can least afford it, ERPNext as the system of record with the supporting ledger tools and the tax automation around it. For everyone else it is happily overkill. But if your financial history has to live somewhere, there is a real case for that somewhere not being a rental.
Identity. One login, Authentik, single sign-on across everything, so the family has one identity I control rather than forty accounts a dozen companies control.
Secrets. Every password, key, and token the system needs lives in OpenBao and is injected into a service at deploy time, never written into a file, never committed to a repository, never sitting in plaintext waiting to leak. The rule is absolute and it is the difference between self-hosting and self-owning.
Your own git, and a clever use for the cloud you left. I run Forgejo, my own git host, as the source of truth for all of this code. And then I do the thing I like best in the whole design. I push a mirror of it to GitHub. Not as the home. As a backup. The cloud I spent this entire essay leaving becomes a dumb, free, geographically separate copy of my repositories, holding a replica in case my house burns down, while owning nothing and controlling nothing. That is the correct relationship to have with a hyperscaler. Let it be the off-site drive. Do not let it be the landlord.
The network itself. AdGuard filters ads and trackers for every device in the house at the DNS level. The surveillance most people accept as the price of a free web simply does not arrive.
The home. Home Assistant runs the lights, the sensors, the locks, the routines, entirely locally. Music Assistant handles audio through the house. None of it phones home. None of it depends on a cloud that can sunset a device you paid for.
The desktops. This is quietly one of my favorite things in the whole house. For the times you need a real computer and are not sitting at one, I stream full Linux desktops out of the server and into a browser tab, built on Selkies. It pushes a live GPU-accelerated desktop over WebRTC with barely any latency. Any screen becomes a workstation without a workstation being there, a Chromebook, a tablet, a decade-old laptop, the television, each of them borrowing the horsepower of the box downstairs. On top of it I built my own front end, a hub where each person spins up their own desktop, stops it, restarts it, and installs real applications into it from a menu, Blender and Krita and FreeCAD and the slicers for the 3D printers, the heavy creative software that has no business running on a tablet, running on a tablet. The part that still gets me is how little it costs to do. A desktop is only alive while someone is actually in it, they auto-stop when they go idle, and the streaming itself is light enough that one modest machine hands out full workstations to the entire house.
Analytics, and why not PostHog. I run OpenPanel for the analytics I actually need. PostHog is the better-known option and it is more capable. It is also an open-core product, where the free tier and the paid tier come from the same company and the same roadmap. OpenPanel is smaller and it does less. Its incentives do not point at a future invoice. For a house that is the trade I wanted. Choosing your tools by where their incentives point, not just by their feature list, is most of what independence turns out to be in practice.
Holding it all together is a short constitution. Free and open source first, with exactly one exception I will name in a moment. Everything as code, so the system is reproducible and not merely running. Every build works fully offline, from a local registry and local package mirrors, so no outside company's uptime is load-bearing for mine. And secrets never touch the repository. That is the whole discipline. It is the difference between a hobby and a home.
The one exception
I promised to come back to the little rented server in the datacenter. Here it is. It is the seam where this whole philosophy meets a wall it cannot argue with. The wall is email. You can run a mail server at home. I do. You cannot make the rest of the internet accept mail from a residential address. Residential IP ranges are permanently distrusted, most consumer ISPs block the outbound mail port on purpose, and a message from an unknown address at home lands in spam if it lands at all. Deliverability is not a technical problem you can out-engineer from your living room. It is a reputation problem. Reputation is granted by everyone else.
So the mail server itself, Mailcow, lives at home, where the mailboxes and the data are. A tiny rented VPS with a clean, reputable datacenter address sits out on the internet as its relay, the face the world sees and trusts. The two are joined by an encrypted tunnel. The VPS holds nothing, no mailboxes, no archives, no key that matters. It is a dumb, reputable pipe and nothing more. If it vanished tomorrow I would lose the ability to send for an afternoon, not a single message already received. It is the one place the outside world's rules force me to keep a foothold outside the house. Pretending otherwise would be a lie. Independence is not purity. It is knowing exactly where your one dependency is, why it has to be there, and how little it is allowed to hold.
The small tools nobody ships
None of this is turnkey. The dirty secret of self-hosting is that the products are the easy part. The system is held together by dozens of small, unglamorous, custom tools that nobody ships and everybody needs. The thing that injects the secret at the right moment. The thing that bootstraps the certificate authority. The thing that waits for a service to come healthy before declaring a deploy successful. The thing that dispatches a bulk job to the local model instead of an expensive one. The thing that audits the whole repository to make sure no key ever slipped into it. Each is fifty lines. Together they are the actual labor. They are invisible to everyone. When they work you never see them. When they fail you see nothing else.
This is exactly the work AI is good for, and exactly the work to keep. I have argued that a skill is a wish and a script is a guarantee, that the deterministic tools a model helps you build are assets you should keep instead of regenerating. This whole layer of glue is that argument made physical. The first piece of it is already out in the open, Rote, the small library that keeps the solved things solved. I intend to sanitize and release more of it. The tools that make one household independent are the tools that make the next one's job smaller.
The system is also mid-migration. It used to be orchestrated by Nomad. I am retiring Nomad in favor of plain per-stack compose and a real deploy pipeline, but its fingerprints are everywhere still, the internal proxy that routes the friendly names, the naming scheme, the app tiles on the desktops. Independence is not a state you arrive at. It is a direction you keep walking. There is always a piece you have not broken off yet.
Keeping it alive
A system you cannot rebuild is not independence, it is a hostage situation with extra steps, so the backup story is the point. Because everything is code, recovery starts as a clone and a command. Unchanged configuration redeploys to a no-op. Because every container image is saved locally and mirrored into my own registry, a rebuild from bare metal needs zero external downloads. That is what "offline-capable" has to mean if it means anything. Application data is dumped in each tool's native format and copied between machines. Secrets are re-materialized from the vault on recovery, never from a backup file. A backup of a secret is just a leak with a delay.
The off-site copy, the last line of defense, is that reverse mirror to GitHub I described. The empire keeps a copy of the rebellion's papers, for free, and gets no say in anything. The same trick scales to the heavy stuff. The very largest binary stores, the things too big for a git remote, get compressed into a single image and encrypted so thoroughly that what leaves the house is indistinguishable from noise, then parked in Google Drive and OneDrive. Google and Microsoft, the two landlords this whole essay is about leaving, are now helping hold my backups. There is nothing they can do with them. All they have is ciphertext. The cloud makes a fine dumb vault precisely when it cannot read what it is holding. The honest part is that this is a waypoint. The destination is not a hyperscaler at all. It is a trust partner, or a handful of them, a small federation of people in the same position who simply store each other's encrypted images, so the last copy lives on hardware owned by someone holding your images because you hold theirs. Independence is not the same as isolation. Sometimes it is just choosing who you depend on, and on what terms.
The declouder
There is one problem left with everything I have described. I can do this, and most people cannot, and a liberation available only to people who can hand-build a datacenter is not a liberation, it is a hobby. The barrier is not the hardware anymore and it is not the software. Both are cheap or free. The barrier is the standing-it-up, the exact labor the model is now good enough to carry.
So I am building the thing that carries it. It is a command-line tool called declouder, it is open source, and it does the unglamorous work of starting. It scans your network and takes an honest inventory of the compute you already have, the old laptop, the spare desktop, the little server you bought and forgot. It asks you, by need and not by jargon, what you actually want, maps and mail and photos and documents and a private chatbot. Then it does the part that almost nothing else will. It weighs what you asked for against what you actually have, and tells you plainly which of it your current hardware can serve right now and which will have to wait. For the things that must wait, it tells you exactly what you would need to add, so many more cores, so much more disk, a GPU, or just one more old machine. It writes the infrastructure-as-code for everything that fits today, placeholders instead of secrets, and records the rest instead of pretending it does not exist. Add a box later and run it again. The deferred pieces fold themselves in. It is a plan that grows with you. It is deliberately a scaffold and not a magic button. The whole ethos is that you should end up owning and understanding the thing, not renting a new black box that happens to sit in your house. It exists so that the first step, the one that stops almost everyone, is a command instead of a cliff.
Who owns the machine
The tool that looks like the ultimate instrument of control is also the ultimate instrument of independence. The only variable that decides which one you are holding is who owns the machine it runs on. That is the entire finding. The cloud is not evil and the model is not a trap. They are landlords. The alternative to a landlord is a home. The technology that could finish making you dependent is, in the same year, the technology that could let you finally stop being. On the day the country celebrates declaring that a people can govern itself, in a season when kings and their corporate heirs are back in the conversation, the same sentence scales all the way down to a person, a house, and a machine you own. The tools they built to rule you are the tools you can use to leave. They are on your hard drive already. You do not need better terms. You do not need permission. You can just leave.
William Dunn is the founder of Quasarke, a software development consultancy, and has spent a decade building company architectures. Rote and declouder are open source under the MIT license.