01
Phase 1: Architecture Review

PERSONAL AI + STORAGE NODE

DATA_FIELD: CORE_VERDICTREF: MAC-MINI-AGENT

This is a good foundation: Tailscale for private access, Ollama/Open WebUI for local AI, and Nextcloud/Immich for personal cloud services. The success of the box depends less on installing apps and more on boring operational hygiene.

Primary rule

private by default, backed up always

▲ good stack + backup discipline = trustworthy home infrastructure

STATUSAPPROVED_WITH_CAUTIONS

Short answer

Yes, this setup is okay. Just do not underestimate Nextcloud, Immich, storage health, and backups. Those are the pieces that turn a fun Mac mini project into real infrastructure.

DATA_FIELD: SOFTWARE_STACKMODE: LOCAL_SERVICES

What each piece is doing

The stack is coherent: Homebrew manages tools, Tailscale provides private remote access, Ollama runs local models, Open WebUI gives a ChatGPT-like frontend, and Nextcloud/Immich handle files and photos.

ACCESSTailscale
LOCAL AIOllama
CHAT UIOpen WebUI
FILESNextcloud
PHOTOSImmich
APP: BREWBASE_LAYER

Homebrew

Good baseline package manager for macOS. Keep it simple and avoid random one-off installs outside the managed stack.

APP: OLLAMAMODEL_LAYER

Ollama

Good for local models. RAM sets expectations: 16 GB is okay for smaller models; 24–32+ GB is meaningfully better.

APP: WEBUIINTERFACE

Open WebUI

Good ChatGPT-like layer for local models. Keep it behind Tailscale and require authentication.

APP: NEXTCLOUDFILES

Nextcloud

Useful for the Dropbox/OneDrive feel, but it is the most sysadmin-like part of the setup. Updates and backups matter.

APP: IMMICHPHOTOS

Immich

Excellent photo library, but do not treat it as the only copy of photos. It needs database-aware backups.

RUNTIMECONTAINERS

Containerize if possible

Immich and Nextcloud are easier to maintain when their services, volumes, and databases are explicit and reproducible.

DATA_FIELD: STORAGE_TOPOLOGYRULE: RAID_IS_NOT_BACKUP

Storage should be designed around failure

LaCie 12big as primary storage and G-Speed Shuttle as archive/backup is a sensible shape, but the backup tier must be isolated enough that one mistake does not delete both copies.

primary / archive / offsite / tested restore

TIER: PRIMARYLACIE_12BIG

Live data

  • Nextcloud files
  • Immich photo library
  • app data and databases
  • project storage
TIER: BACKUPG-SPEED

Archive / backup

  • scheduled backup, not careless mirror
  • snapshots or version history
  • periodic restore tests
  • separation from accidental deletes
WARNINGNO_SINGLE_COPY

Important

RAID helps uptime. It does not protect against accidental deletion, bad sync, ransomware, app corruption, or fire/theft.

DATA_FIELD: SECURITY_MODELDEFAULT: PRIVATE

Tailscale is the private road in, not the whole security plan

Use Tailscale to avoid exposing dashboards publicly. Still use app-level auth, strong passwords, least privilege, and update discipline.

No public dashboards by default
Use app passwords anyway
Share tailnet access carefully
DATA_FIELD: OPERATIONSMODE: BORING_IS_GOOD

The missing layer is operations

The apps are not the hard part. The hard part is knowing whether disks are healthy, backups completed, services are up, and updates are safe to apply.

backup importance100%
public exposure tolerance10%
maintenance reality75%
restore testingmandatory

UPS

Add battery backup. External storage, databases, and photo libraries hate surprise power loss.

Monitoring

Watch disk health, disk capacity, backup success, service uptime, and update status.

Updates

Do planned updates for Nextcloud/Immich. Avoid “everything auto-updates blindly.”

Offsite

For irreplaceable photos and documents, keep at least one offsite/cloud copy.

DATA_FIELD: BUILD_SEQUENCEVERSION: PRACTICAL
01
Install base tools

Homebrew, Tailscale, Docker/OrbStack or equivalent, then Ollama.

02
Lock down access

Use Tailscale for remote access. Keep admin surfaces private. Enable app auth.

03
Bring up local AI

Ollama first, Open WebUI second, then test from another device over Tailscale.

04
Bring up storage apps

Nextcloud and Immich with explicit data directories on primary storage.

05
Configure backups

Primary storage to archive/backup storage, plus offsite/cloud for irreplaceable files.

06
Test restore

Restore sample files, sample photos, and app config before trusting the system.