Ultimate linux server

A server featuring a private Matrix messenger and an Xray-based VPN, along with a parser for free configurations.

Comment

Inspiration

What it does

How we built it

Ultimate Linux Server

Inspiration

We wanted to answer a simple question: Can a single affordable VPS become a complete self-hosted cloud platform?

Many developers and enthusiasts rent a Linux server only to host one application. We believed the same server could securely power a VPN, encrypted messaging, web services, file sharing, monitoring, and automation without relying on multiple cloud providers.

Ultimate Linux Server was created as a blueprint for building a privacy-first, production-ready personal infrastructure using open-source technologies.

What it does

Ultimate Linux Server transforms a standard Ubuntu VPS into a secure all-in-one platform.

The server includes:

  • Matrix homeserver for decentralized messaging
  • Element Web client
  • Xray (3X-UI) with VLESS + Reality
  • WireGuard / Amnezia VPN
  • PostgreSQL database
  • Docker-based deployment
  • Reverse proxy with Caddy/HAProxy
  • Automatic HTTPS certificates
  • Secure user registration
  • TURN server for voice and video calls
  • Automatic backups
  • Monitoring and logging
  • Firewall and security hardening

Instead of paying for multiple hosted services, users own their entire communication and networking stack.

How we built it

The project was built on Ubuntu Server running inside a low-cost VPS.

Everything is containerized with Docker Compose wherever possible, making deployment repeatable and easy to maintain.

Our architecture consists of:

  • Ubuntu Server as the operating system
  • Docker for service isolation
  • PostgreSQL for Matrix storage
  • Matrix Synapse as the homeserver
  • Element as the web client
  • Coturn for VoIP relay
  • Caddy and HAProxy as reverse proxies
  • ACME wildcard certificates for TLS
  • Xray (3X-UI) for secure proxy access
  • UFW firewall with minimal exposed ports

Special attention was given to making Matrix coexist with an already occupied HTTPS port (443), allowing secure deployment even when Xray Reality is already running.

Challenges we ran into

The biggest challenge was networking.

Because port 443 was already occupied by Xray Reality, Matrix couldn't simply bind to the default HTTPS endpoint.

We had to design a routing strategy that allows multiple services to coexist without breaking TLS or client compatibility.

Other challenges included:

  • Docker networking with PostgreSQL
  • PostgreSQL authentication (pg_hba.conf)
  • Reverse proxy configuration
  • TLS certificate management
  • Matrix federation on non-standard ports
  • TURN server configuration
  • Registration security
  • Automatic certificate renewal

Accomplishments that we're proud of

We successfully built a fully self-hosted communication platform that runs on a single VPS.

Highlights include:

  • Fully working Matrix homeserver
  • Secure encrypted messaging
  • Voice and video support via TURN
  • VLESS Reality running alongside Matrix
  • Automatic TLS
  • Dockerized deployment
  • Minimal resource usage
  • Complete ownership of user data
  • Open-source stack from top to bottom

The entire system can comfortably run on an inexpensive VPS while remaining secure and scalable.

What we learned

Throughout the project we gained a deeper understanding of:

  • Matrix federation
  • Reverse proxy architecture
  • Docker networking
  • PostgreSQL optimization
  • TLS certificate automation
  • TURN infrastructure
  • High-availability networking
  • Linux server hardening
  • Secure authentication flows
  • Self-hosting best practices

Perhaps the biggest lesson was that modern open-source software makes it possible to build infrastructure that rivals commercial cloud services with only a few hundred megabytes of RAM.

What's next for Ultimate Linux Server

We plan to evolve Ultimate Linux Server into a complete self-hosted platform.

Upcoming features include:

  • One-command installer
  • Automatic HAProxy configuration
  • Automatic Matrix + Element deployment
  • Dashboard for managing all services
  • Built-in monitoring with Grafana and Prometheus
  • Automatic backups to cloud storage
  • Multi-domain support
  • Identity server integration
  • Push notification gateway
  • End-to-end encrypted file storage
  • Email server integration
  • AI assistant for server administration
  • Kubernetes deployment option
  • ARM support for Raspberry Pi and mini PCs

Our long-term goal is to make deploying a secure, privacy-focused personal cloud as easy as running a single installation command.

Challenges we ran into

Accomplishments that we're proud of

What we learned

What's next for Ultimate linux server

Built With

Share this project:

Updates