How it works
One machine, four layers, each with a job.
Start with what you want done, then follow it down the stack. As you scroll, the drawing opens to show where each part lives and how it connects.
-
01 Chief of staff
A personal agent that keeps your work moving
Pick OpenClaw or Hermes as the agent you talk to. It keeps context, plans next steps and, once you connect it, hands work to your coding tools and workflows.
Its intelligence comes from the AI provider you choose: OpenAI, Anthropic, Google Gemini or Groq. The provider is reached over its API from outside the machine. It is not a second server you run.
- Runtime: OpenClaw or Hermes
- Models: an external provider API
- Dashboard: private, on your tailnet
-
02 Coding workspace
The place where work actually gets done
A persistent Linux workspace with Codex included and Claude Code available alongside it. Your home directory lives on the data volume, so projects and tools survive restarts.
You reach it over SSH from devices on your tailnet. Each coding tool signs in on its own; picking an AI provider for your agent does not sign them in.
- Codex included
- Claude Code optional, alongside Codex
- Home directory on persistent storage
-
03 Workflows
Repeatable work, made dependable
n8n runs workflows and automations that follow the same steps every time. Your personal agent or coding agents can help you build them, and can use them once you connect them.
PostgreSQL sits quietly underneath as n8n’s database. You don’t need to manage it separately.
- n8n for deterministic automations
- Postgres as n8n’s local database
-
04 Cloud foundation
One machine, in your own account
Everything runs on a single cloud machine you own: an AWS EC2 instance, DigitalOcean Droplet, Hetzner Cloud server or Google Compute Engine VM. It has a persistent data volume and private access through Tailscale.
Terraform describes the machine. You review the plan and its cost before anything is created, and your cloud provider bills you directly.
- One machine, one data volume
- Private access boundary
- You approve the plan first
AgentStack installs the pieces on one machine. You decide what your chief of staff is allowed to reach. Build your stack →
