N°

N°003

Name

One Droplet

Client

Turbo Diesel Engine Parts

Year

2026

Type

Cloud infrastructure

Stack

DigitalOcean (London), Terraform, Docker Compose, Caddy with automatic TLS, PostgreSQL 16, Redis

Outcome

$6 a month for the whole stack; three inbound firewall rules; a 25-mode deploy script; a production tag that tracks what is live

About

Everything the WhatsApp service needs runs on one small DigitalOcean Droplet in London: the app, Redis, PostgreSQL, Prometheus, Grafana, a Redis exporter and Caddy, seven services in one Compose file. The Droplet, its firewall and its DNS are described in Terraform, so the next person reads a file instead of clicking through a panel. Only Caddy faces the network, on ports 22, 80 and 443; the databases and the metrics publish no ports at all. Certificates renew themselves. Production is reached through one deploy script with 25 modes (deploy, dry run, status, restart, template snapshot, sender health, retention, erasure and so on), never by hand, and a git tag named production always points at the commit that is live. Backups of the session store go to a private bucket every night and expire on a lifecycle rule. It costs six dollars a month.

What faces the Internet and what does not: only Caddy listens; the rest is internal

Diagram of one Droplet running seven services: only Caddy faces the Internet on ports 22, 80 and 443; the app, Grafana, Prometheus, Redis, PostgreSQL and the Redis exporter sit behind it

The whole inbound firewall, as written in Terraform

The whole inbound firewall as three Terraform rules: TCP 22 for SSH, 80 for the certificate challenge, 443 for the site; nothing else listens

©

2026

ConnectionSphere Ltd

Registered in England and Wales, No. 16412374

©

2026

ConnectionSphere Ltd

Registered in England and Wales, No. 16412374

©

2026

ConnectionSphere Ltd

Registered in England and Wales, No. 16412374

Create a free website with Framer, the website builder loved by startups, designers and agencies.