- Meet: add external-api backend path, CSRF trusted origins - Drive: fix media proxy regex for preview URLs and S3 key signing - OpenBao: enable Prometheus telemetry - Postgres alerts: fix metric name (cnpg_backends_total) - Gitea: bump memory limits for mirror workloads - Alertbot: expanded deployment config - Kratos: add find/cal/projects to allowed return URLs, settings path - Pingora: meet external-api route fix - Sol: config update
The Super Boujee Business Box ✨
A self-hosted, open-core collaboration suite for teams who want ownership over their tools, data, and workflows — built on La Suite Numérique, wrapped in custom infrastructure that actually slaps.
One box. One bill. All yours. 💅
Status: Early beta. The platform is fully functional and we run our entire studio on it daily — every feature you see here is tested in production by us first. We're still building out integrations and polishing edges. It works, we're just making it boujee-ier. ✨
What's in the box?
The Super Boujee Business Box ✨ is everything your team needs to collaborate, communicate, and create — without handing your data to a dozen different SaaS companies.
| App | What it does | Vibe |
|---|---|---|
| Docs | Collaborative document editing with real-time sync | Google Docs, but it's yours |
| Drive | File storage with versioning and smart organization | Dropbox who? |
| Full email platform with personal and shared mailboxes | Gmail without the surveillance | |
| Messages | End-to-end encrypted chat on Matrix | Slack, but make it private |
| Meet | Video/audio calls powered by LiveKit | Zoom, but self-hosted and gorgeous |
| Calendar | Scheduling with team availability | It's giving organization |
| Projects | Kanban boards for docs, tasks, and databases | Trello walked so this could run |
| People | User and team management hub | The directory, darling |
Every app shares context by default. Switching between tools feels like moving through rooms in the same house — not jumping between separate buildings. One login gets you everywhere.
The custom stuff that makes it boujee
| Component | What it is | Why it's special |
|---|---|---|
| Sol☀️ | AI presence living in your Matrix chat | A virtual employee — works with you, not for you. Has opinions, remembers you, pushes back. |
| Pingora Proxy | ML-powered reverse proxy in Rust | Your bouncer. DDoS detection, scanner blocking, rate limiting — models compiled into the binary. |
| Sunbeam CLI | One command to run everything | sunbeam up and you're live. Kustomize, Helm, kubectl, OpenBao — all wrapped in one binary. |
Architecture at a glance
The Super Boujee Business Box ✨
├── ingress/ The Front Door — Pingora reverse proxy (Rust, ML-powered)
├── ory/ The Velvet Rope — Ory Kratos + Hydra (unified OIDC auth)
├── lasuite/ The Apps — Docs, Drive, Mail, Meet, Calendar, Projects, People
├── matrix/ The Chat — Tuwunel (Matrix homeserver) + Sol☀️ (AI agent)
├── media/ The Stage — LiveKit (WebRTC video/audio + TURN relay)
├── data/ The Pantry — PostgreSQL, Valkey, OpenSearch, OpenBao, SearXNG
├── storage/ The Closet — SeaweedFS (S3-compatible object storage)
├── devtools/ The Workshop — Gitea (self-hosted Git + CI + LFS)
├── mesh/ The Meshy Bits — Linkerd (mTLS service mesh, zero config)
├── monitoring/ The Observatory — Prometheus, Grafana, Loki, Tempo, AlertManager
├── cert-manager/ The Certificates — Let's Encrypt automation
├── longhorn/ The Persistence — Volume management
└── vso/ The Secrets — Vault Secrets Operator
All of this runs on a single server. One Scaleway Elastic Metal box in Paris. European data sovereignty by default. No multi-vendor sprawl, no per-seat SaaS fees, no vendor lock-in.
The deep cuts
| Doc | What you'll find |
|---|---|
| What's In The Box, Babe? | Full architectural overview — every layer, every service, how it all connects |
| Meet Sol☀️ | The AI agent — capabilities, personality, integration depth |
| The Bouncer | Pingora proxy — ML threat detection, routing, TLS, caching |
| The Remote Control | Sunbeam CLI — every command, every shortcut |
| The Guest List | Authentication — OIDC, sessions, identity schemas |
| The Observatory | Observability — Prometheus, Grafana, Loki, Tempo, alerts |
| Setting Up Your Vanity | Local dev setup — Lima, k3s, mkcert, sslip.io |
| Serving Looks in Production | Production deployment — Scaleway, DNS, certs, backups |
| When Things Go Sideways | Ops runbooks — incidents, recovery, diagnostics |
| House Rules | Coding conventions — kustomize patterns, secrets, naming |
The team
The Super Boujee Business Box ✨ is built and maintained by Sunbeam Studios — a three-person game studio that needed collaboration tools and decided to make them unreasonably good.
- Sienna — A Californian engineer. Built the infrastructure, writes the Rust, breaks and fixes the things.
- Amber — A South African designer. Marketing & game design. Makes everything look intentional, from brand identity to game assets.
- Lonni — A Dutch producer. Product design and business vision. Handles the product side of things.
We built this because we wanted to own our tools, own our data, and have a stack that felt like us — not like an enterprise procurement committee picked it. Every feature here runs in our production environment first. If it's in the docs, we use it daily.
License
Fair Source — free for small teams, commercial license for larger deployments.
Questions? hello@sunbeam.pt ✨