Domillio
Merchant Login
Infrastructure & Sovereign Hosting•7 min read•Updated: November 2026

Sovereign Infrastructure: Running Domillio on Raspberry Pi 5 & Cloudflare

Complete blueprint for $0.00/mo self-hosted e-commerce compliance with PostgreSQL, Docker, and Cloudflare Zero Trust Tunnels.
⚖️ Statutory Authority: EU GDPR Article 25 (Data Protection by Design and by Default) & US FTC Data Security Guidelines

1. The Sovereign Compliance Philosophy

Compliance data is exceptionally sensitive: state resale tax IDs, federal CPC lab certificates, supplier EORI numbers, and wholesale customer tax records. Relying on third-party SaaS vendors exposes merchants to recurring subscription inflation, vendor lock-in, and downstream data breaches.

Domillio apps are engineered with a Sovereign-First architecture: merchants retain 100% ownership of their database, audit ledgers, and certificate storage on hardware they physically control.

2. Target Hardware & Energy Economics ($0/mo)

A Raspberry Pi 5 with an ARM Cortex-A76 quad-core processor and 8GB RAM consumes under 5 watts of power under load (approx. $0.40/month in electricity). When paired with free PostgreSQL 16 Alpine and Cloudflare Zero Trust Tunnels, the total operational hosting cost is exactly $0.00 per month.

3. Multi-Container Docker Architecture

The deployment utilizes a battle-tested 3-container topology orchestrated by Docker Compose:

  • domillio-tax-db: PostgreSQL 16 Alpine with isolated local volume storage and healthcheck synchronization.
  • domillio-tax-app: React Router 7 / Node 22 runtime running non-root with tini init and bounded healthz probes.
  • domillio-tax-tunnel: Cloudflared daemon maintaining an outbound-only encrypted WireGuard connection to Cloudflare edge.

4. Ingress Security via Cloudflare Zero Trust

Traditional self-hosting requires opening router ports (80/443) and dynamic DNS, exposing home or office networks to automated bot attacks. Cloudflare Tunnels create an outbound-only tunnel directly to Cloudflare's global edge network. Your home firewall stays 100% closed, while Cloudflare provides free managed SSL, HTTP/2, and enterprise DDoS shielding.

5. Backup, Rollback & Disaster Recovery

Daily automated PostgreSQL dumps and uploads volume snapshots can be synchronized to encrypted cold storage. If hardware ever fails, a new Pi can be provisioned in under 15 minutes using the automated setup script.

Automate This Regulation on Shopify

Automate sales-tax exemption and resale certificate management for wholesale buyers. Real-time 50-state tax ID format checks, instant customer tax-exempt syncing, and audit-ready CSV exports.