How to Run Your Own Private UI Design Stack with Penpot and Linux

Take Back Control: Running Your Own Private Web UI Design Stack on a Linux VPS

For years, the digital design industry has been tethered to cloud-locked ecosystems. While modern proprietary tools revolutionized collaborative product design, they also introduced significant trade-offs: recurring subscription fatigue, strict telemetry, data privacy concerns, and absolute reliance on third-party servers. If your internet connection drops or your provider experiences an outage, your entire creative workflow grinds to a halt.

Enter the self-hosted revolution. Thanks to mature open-source alternatives, you no longer have to choose between browser-based collaboration and absolute data sovereignty. In this guide, we will explore how to build a private, self-hosted web UI design stack on a Linux VPS using powerhouse open-source tools like Penpot.

Why Self-Host Your Design Stack?

Before diving into the terminal, it is worth examining the compelling business and technical reasons for migrating your design infrastructure to a private Linux Virtual Private Server (VPS).

• Absolute Data Privacy: Your wireframes, proprietary design systems, and client assets never leave hardware that you control. This is a game-changer for agencies and enterprises dealing with strict compliance frameworks (such as GDPR, HIPAA, or internal NDAs).
• Predictable Scaling Costs: Instead of paying per-editor monthly fees that scale aggressively as your team grows, a self-hosted stack costs a flat monthly fee determined solely by your VPS provider.
• Offline Resilience and Local Control: While a VPS operates in the cloud, you can configure your stack to work seamlessly within local networks or behind VPNs, ensuring uninterrupted access even during broader internet anomalies.
• Customizability: Running your own stack means direct access to environment variables, database backups, and custom integrations that standard SaaS platforms restrict or lock behind enterprise paywalls.

Preparing Your Linux VPS Environment

To ensure a smooth deployment, you need a properly provisioned Linux server. For a stable production environment running Penpot and supporting wireframing tools, we recommend the following baseline specifications:

• OS: Ubuntu 22.04 LTS or Debian 12 (Stable)
• Resources: At least 2 vCPUs and 4GB of RAM (8GB recommended if you anticipate heavy concurrent team collaboration)
• Storage: 50GB+ NVMe SSD storage for project assets and database logs
• Domain Name: A configured domain or subdomain pointing to your VPS IP address (e.g., design.yourdomain.com)

Once your server is provisioned via SSH, ensure your system packages are up to date and install the prerequisite containerization tools—Docker and Docker Compose—which make managing complex multi-container stacks effortless.

"Containerization has transformed self-hosting from a brittle, manual chore into a repeatable, enterprise-grade deployment strategy."

Deploying Penpot: The Open-Source Figma Alternative

Penpot is the crown jewel of open-source design tools. Built natively around web standards like SVG and CSS, it offers a familiar interface for anyone coming from proprietary tools, complete with components, typography, layout grids, and real-time collaboration.

Because Penpot relies on a microservices architecture—including a frontend, a backend, a database (PostgreSQL), and a real-time collaboration engine—Docker Compose is the ideal deployment mechanism.

Step 1: Create Your Project Directory

Log into your VPS, create a dedicated directory for your design stack, and navigate into it:

mkdir -p /opt/design-stack && cd /opt/design-stack

Step 2: Configure the Docker Compose File

Create a docker-penpot.yml file using your preferred text editor. Paste the official production configuration, making sure to update environment variables such as secret keys, database credentials, and your public-facing URL.

Step 3: Spin Up the Containers

With your configuration in place, launch the stack in detached mode:

docker compose -f docker-penpot.yml up -d

Docker will pull the necessary images, initialize the PostgreSQL database, and bring up the Penpot application. You can verify that all services are running smoothly by checking the container logs:

docker compose -f docker-penpot.yml logs -f

Securing Your Stack with a Reverse Proxy and SSL

Never expose your self-hosted design stack directly to the open web over unencrypted HTTP. To secure your installation, place a reverse proxy in front of your Docker containers. While you can write raw Nginx configuration files, using a tool like Nginx Proxy Manager or Caddy provides a clean graphical dashboard alongside auto-renewing Let's Encrypt SSL certificates.

1. Deploy a reverse proxy container alongside your Penpot network.
2. Configure a proxy host pointing your domain (e.g., design.yourdomain.com) to the local Docker bridge IP and port where Penpot's frontend is listening (typically port 9001).
3. Request a free Let's Encrypt SSL certificate through the proxy manager interface and enable HTTP/2 support for optimized asset loading.
4. Enforce "Force SSL" to ensure all design traffic is fully encrypted in transit.

Once configured, navigate to your domain in any modern web browser. You will be greeted by the Penpot setup screen, where you can register your initial administrator account and begin inviting your team.

Conclusion: The Future Belongs to Open-Source Infrastructure

Transitioning away from proprietary design tools to a self-hosted Linux VPS stack might feel like a paradigm shift, but the long-term dividends are immense. By deploying Penpot behind a secure reverse proxy, you gain a lightning-fast, highly collaborative, and entirely private UI design environment that you truly own.

Whether you are a freelance designer looking to cut overhead costs, an agency protecting sensitive client intellectual property, or a tech collective striving for digital independence, building your own private design stack is an empowering step toward total technical sovereignty. Spin up a VPS today, deploy your containers, and experience the freedom of open-source design.