LibreTechnica - Sovereign Tech Stack Project

The Sovereign Tech Stack Project is an IT reference architecture for nonprofits, activist groups, and communities. The purpose of the project is to help protect organizations from censorship, surveillance, and other threats to their digital sovereignty.

The project consists of Ansible playbooks and guides for setting up the tools needed to security run an organization using all open-source applications and be able to run them on any available hardware. Organizations will need to customize the stack to meet their unique needs.

Guiding Principles

Applications must be Free and Open Source Software (FOSS). Proprietary services such as those offered by Microsoft and Google often harvest users' data and can stop service at any time. Therefore, data sovereignty requires open-source software that can be self-hosted.
There must be as little reliance on commercial services as possible. There will inevitably be a cost to host anything online, either to hosting providers or ISPs. However, we can take advantage of secure tunnels to host servers where organizations have complete control of the hardware running them.
Secure by Design. Server configurations should start from a secure baseline. Efforts should be made to the attack surface at all points with regard to the threat model.

Applications

The applications are categorized into five groups organizational functions.

Collaborate - Office Tools and Groupware
Communicate - Messaging and Email
Coordinate - Events
Connect - Video Streaming and Image Sharing
Contribute - Donations

Underpinning the above are various backends that serve as VPN, web proxy, and identity provider. And finally, there will be a security component that will perform detection and response actions and server as a log-collection tool.

Project Source Code

https://gitlab.com/libretechnica/SovereignTechStack

Contributing

We welcome feedback, suggestions, and contributions. We look forward to your help making this project grow!