← All posts
3 min read By AIAYN #architecture#agents#self-hosted

Own the stack, swap the parts

Most hosted agent environments hand you a black box: their cloud, their agent, their sandbox rules, your data on their disk. Useful until you need a different agent, a bigger machine, or your files back.

comcon takes the other path. It is infrastructure you own end to end — and every layer is a choice.

The five layers

1. The host. Any Debian 12/13 machine: a DigitalOcean droplet comcon provisions for you, a Hetzner box you already pay for, a spare laptop, WSL2. Same deploy path everywhere; only the lifecycle differs.

2. The agent. A closed recipe list — Devin, MagicStride, Claude Code, Codex, OpenCode — so every image is a verified build. You bring your own subscription and sign in once inside your container. Switching agents means rebuilding an image, not migrating a platform.

3. The browser. One real, headful Chromium per user — not headless, so sites see a normal browser. You sign into your accounts inside browser.<you>.<domain>; the agent then drives that same session over the DevTools protocol while you watch it work live.

4. The terminal. A persistent Zellij multiplexer at term.<you>.<domain>. Detach from your phone, reattach from your laptop, and long-running agent loops keep running regardless.

5. The surfaces. Everything a user touches is its own HTTPS subdomain — terminal, browser, agent UIs, dev servers — all behind one Caddy and your choice of auth gate, from per-user passwords to a full identity provider.

What owning it buys you

  • Your credentials stay in your containers. Agent auth files live in your home volume and persist across hibernates.
  • Your data has a blast-radius boundary. Recreate a container and the OS resets in seconds while /srv/home survives untouched.
  • Your bill is honest. Snapshot-park on DigitalOcean costs ~$1–2/mo; the VM itself is destroyed, not paused and still billing.
  • No hosted middleman. No Cloudflare, no Tailscale control plane. One VPS, one Caddy, published SSH ports.

The stack is yours. The parts are replaceable. The bill is only for the hours the engine runs.

Deploy now