TL;DR
Get business pricing on your home office setup
- Business-only prices and quantity discounts
- Tax-exempt purchasing
- Multiple users, one account, clear invoices
A report by Bosscher describes using a $10 OpenStick as a low-power, silent Debian homelab running a collection of lightweight self-hosted services. The setup includes DNS filtering, server and service monitoring, an RSS reader, archived bookmarks and a Telegram-connected AI agent; performance and security claims are the author’s own, not independent tests.
Bosscher has detailed a $10 OpenStick homelab running Debian and a set of small self-hosted services, showing how the compact device is used for DNS filtering, monitoring, RSS reading and more. The report describes a low-cost, passively cooled machine with 512 MB of RAM, four ARM cores and 4 GB of storage, though its performance figures and security judgments have not been independently verified.
The OpenStick cost $10 including shipping, according to Bosscher. The device has four 1 GHz ARM Cortex-A53 cores, about 450 MB of usable RAM, 4 GB of eMMC flash, Wi-Fi, a 4G modem and GPS. It is passively cooled, so it makes no fan noise, and has a programmable LED. Bosscher says it runs Debian after an installation process the author describes as involved, with systemd for service management and Podman for containers.
Among the services are AdGuard Home, which filters domain requests against blocklists, and CastSponsorSkip, which the author says skips sponsorship segments and sometimes ads on Google Cast devices. Bosscher reports that roughly 60% of DNS queries are blocked after adding several blocklists, but does not give a measurement period or describe the query mix. The author also says the AdGuard setup uses a personal fork designed for large lists and cautions readers against running software binaries from untrusted sources.
The collection also includes Zeroclaw, an AI-agent framework the author uses through Telegram to ask about system logs and disk space; Cloudflare Tunnel to make services reachable without opening ports; Beszel for resource graphs and alerts; Dozzle for viewing Podman logs; and Gatus for checking service availability. Bosscher lists Fusion as an RSS reader using about 22 MB of RAM and Shiori as a bookmark manager that archives pages. These memory figures are the author’s reported estimates, not benchmark results.
A Tiny Server for Everyday Services
The report offers a practical example of self-hosting on limited hardware, rather than a claim that the OpenStick can replace a larger server. Its modest resources shape the choices: Bosscher favors services described as lightweight and notes that some tools overlap. The setup may interest people who want to experiment with home servers without buying a conventional desktop or leaving noisy hardware running.
There are trade-offs. The author says Cloudflare Tunnel exposes services without opening ports, while acknowledging a privacy concern about traffic passing through Cloudflare. The DNS blocker can reduce some unwanted domain requests, but Bosscher explicitly says it cannot block everything and is not a substitute for a firewall. The article is an individual account, not a security audit or a controlled performance comparison.
Products Worth Considering
Roborock Q7 M5+ Robot Vacuum and Mop with Self-Emptying Dock
Hisense 75U6SF Pro 75-Inch U6 Pro Mini-LED 4K UHD Smart Fire TV
TCL 75-Inch QM6K QLED Mini LED 4K HDR Smart Google TV, 144Hz
As an affiliate, we earn on qualifying purchases.
From Novelty Device to Debian Host
Bosscher says the device was bought on a whim as an inexpensive novelty. The author presents the project as an accessible way to start self-hosting, while noting that installation takes effort and the hardware is limited. Once Debian is installed, systemd and Podman provide familiar tools for running and managing services.
The report compares some choices with the author’s earlier experience running services on a Kubernetes cluster. Bosscher says OpenClaw used more than 1 GB of memory and caused update and workflow problems, while Zeroclaw reportedly uses about 3 MB of resident memory when idle. Those descriptions reflect the author’s experience and are not accompanied by test conditions or independent verification. Bosscher says Zeroclaw was selected over alternatives including Picoclaw and Nullclaw because of its documentation and community activity.
“A DNS blocker cannot block all bad requests (you’ll need a proper firewall for that), but it sure can block a whole lot.”
— Bosscher, describing DNS filtering
Performance and Security Still Unverified
The source does not specify the report’s publication date, the device’s measured power draw, service uptime, or how the memory estimates were collected. The claimed 60% blocked-query share lacks a stated time window and comparison baseline, so it should be read as an observation from this setup rather than a general result. It is also unclear how the services perform under heavier use or when several workloads compete for the device’s limited memory and storage.
Security depends on configuration and trust assumptions that the report does not independently assess. In particular, Zeroclaw’s access to a root shell could carry risk even if the author limits its permissions to one machine, and Cloudflare Tunnel means relying on an outside provider. Bosscher’s reported setup and judgments do not establish that the same configuration is safe for other users.
More Services and Telegram Support
Bosscher says a future Zeroclaw version may include richer Telegram message support, with a contribution from the author under review. The report does not give a release date. The author also says Dozzle could be removed if memory needs to be freed because it overlaps with Beszel in some areas, though it offers a better interface for container logs.
For readers considering a similar build, the next practical step is to check the device’s installation instructions, confirm that each service fits available memory and storage, and review access controls before exposing anything remotely. The source does not report a broader testing plan or a planned hardware upgrade.
Key Questions
What is the OpenStick in this report?
It is a small computer Bosscher says cost $10 including shipping. The reported specifications include four 1 GHz ARM Cortex-A53 cores, 512 MB of RAM, 4 GB of eMMC storage, Wi-Fi, a 4G modem and GPS.
Which services does Bosscher run on it?
The listed services include AdGuard Home, CastSponsorSkip, Zeroclaw, Cloudflare Tunnel, Beszel, Dozzle, Gatus, Fusion and Shiori. The author says they run on Debian, with Podman used for containers.
Does the report prove that 60% of DNS traffic can be blocked?
No. Bosscher reports that about 60% of queries were blocked in this setup after adding blocklists, but gives no measurement window or comparison baseline. That figure is a personal observation, not a general benchmark.
Is the setup safe to copy?
The report does not provide an independent security audit. Bosscher notes that DNS filtering cannot block every harmful request and describes giving Zeroclaw root-shell access on the device. Anyone adapting the setup would need to review software sources, permissions and remote-access settings.
Source: blog.bosscher.ch
