Security · 5 min read

Private by Default, On Your Own Metal

Sep 11, 2026

If your best thinking lives in someone else’s chat history, you do not have a studio. You have a tab.

Iramind runs on your server. Nginx terminates HTTPS. A single admin login sits in front of the workspace. Open WebUI does not take public signups. MySQL holds the public journal. The agent stack stays on localhost unless you open it.

That is not paranoia. It is taste. Serious work deserves a room with a door.

Rotate keys when you share them. Keep the admin password off public pages. Then use the thing like it was built for you — because it was.