Capabilities¶
TAPPaaS was designed through both top-down analysis of user needs and bottom-up examination of practical implementations. The result is a capability model organized into stacks, with the Foundation Stack providing the infrastructure upon which all other stacks depend.
TAPPaaS Stacks¶
| Stack | Description |
|---|---|
| Foundation Stack | The infrastructure layer providing virtualization, networking, storage, security, backup, and identity management upon which all other stacks depend |
| AI Stack | Private AI capabilities including local large language models, chat interfaces, and AI-powered automation workflows |
| Productivity Stack | Business and personal productivity tools including file sharing, workflow automation, and collaboration services |
| Home Stack | Home and family-oriented services such as home automation, media streaming, and personal data management |
| IoT Stack | Device gateways (Zigbee and friends), isolated in their own network zones |
| DevOps Stack | Software development and operations capabilities including CI/CD pipelines, code repositories, and deployment automation |
Note
More stacks are planned and not all capabilities below are implemented yet (planned ones are marked). TAPPaaS also allows any community or private modules to be deployed. The current module catalog per stack lives under Stacks.
Platform Capability Overview¶
The following diagram shows TAPPaaS decomposed into its capability stacks. The Foundation Stack provides the infrastructure that all other stacks depend on.
Foundation Stack¶
The Foundation Stack provides the core infrastructure capabilities upon which all other stacks depend.
| Capability | Description | Realized By |
|---|---|---|
| Cluster | Hardware virtualization, clustering, and high availability | Proxmox VE |
| Firewall/Networking | Network security and routing | OPNsense |
| Backup Services | Data protection and restoration | Proxmox Backup Server |
| Identity Management | Single sign-on and user management | Authentik |
| Web Proxy | TLS termination and reverse proxy | Caddy |
| CI/CD | Deployment automation and updates | TAPPaaS CICD |
AI Stack¶
The AI Stack provides private AI capabilities for local large language models and chat interfaces.
| Capability | Description | Realized By |
|---|---|---|
| Chat Interface | Web-based AI conversation interface | OpenWebUI |
| Model Gateway | Unified API for multiple AI providers | LiteLLM |
| On-prem AI | On-premise model execution | vLLM |
Productivity Stack¶
The Productivity Stack provides business and personal productivity tools.
| Capability | Description | Realized By |
|---|---|---|
| File Storage | Document storage and sharing | Nextcloud |
| Workflow Automation | Process automation and integrations | n8n (planned) |
| Collaboration | Team collaboration features | Nextcloud |
| Secret Management | Secure credential storage | Vaultwarden |
Home Stack¶
The Home Stack provides home and family-oriented services.
| Capability | Description | Realized By |
|---|---|---|
| Home Automation | Smart home control and automation | Home Assistant |
| Media Streaming | Media server and streaming | Jellyfin (planned) |
IoT Stack¶
The IoT Stack provides device gateways, isolated in their own network zones.
| Capability | Description | Realized By |
|---|---|---|
| Zigbee Gateway | Sensors, switches and lights via ConBee | deCONZ |
DevOps Stack¶
The DevOps Stack provides software development and operations capabilities.
| Capability | Description | Realized By |
|---|---|---|
| Code Repository | Source code management | (planned) |
| CI/CD Pipelines | Build and deployment automation | (planned) |