Out of beta — in production · free forever · one command · your hardware
That’s it.
One command installs 35+ apps — your movies, photos, files and passwords, private on your own hardware — with real backups and a dashboard that doesn’t lie to you.
No account. No card. Runs on any spare PC, VPS or NAS. One command exports everything back to plain Docker files.
The dashboard
No terminal after the first line.
Everything after install is point-and-click: turn apps on, watch them install live, read logs, take encrypted backups. No port numbers, no YAML.
Toggle a module, watch real install progress, RAM estimate shown before you commit.
The media stack rides a VPN with a kill switch and talks to itself on first boot.
Auto-updates with rollback, and encrypted backups you can download from the GUI.
What’s inside
35+ apps, already talking to each other.
Photos, streaming, cloud storage, passwords, ad-blocking, documents, cameras, local AI. Real upstream projects — nothing we reskinned and renamed.
…and 11 more in the catalog. See the full list →
The assistant that fixes your server
Generic AI has never seen your server.
Tom AI lives on it.
Every other “AI help” is a stranger in a chat window guessing from documentation. Tom AI lives on your box, reads its actual logs and live container state, and fixes from what has provably worked across the whole fleet — not from theory.
The knowledge travels to your box. Your box's data never ships out.
What it actually does
Four things a chat window can't do.
It's on your box, not in a chat window.
It reads your real logs and live container state, tells you what broke in plain English, and applies the fix on your tap (agent fixes in beta) — not three hours of searching forums. How it works, with real fleet numbers →
It checks its own work.
Every fix is verified right after it runs — and automatically undone if it made anything worse. You get a fix, not a gamble.
It fixes from proof, not guesses.
Common problems arrive with a track record from real SparkBox machines — the answer the fleet already validated, not a plausible-sounding suggestion.
It gets smarter every week.
The system learns which fixes actually hold up on real boxes and keeps sharpening — support you pay for once that keeps improving, free, forever.
Pricing
The server is free. Forever.
No app or module is ever paywalled. Legend is a one-time unlock for the extras that make running it effortless — and it’s the only thing funding this. No ads, no data sold, no investors: the free tier stays free because Legends pay for it.
The complete private server. Install it, run it, never pay anything.
Buy once and keep everything we ever ship — your price never changes.
An expert on your box, the moment you're stuck.
Most people go Legend mid-install — a cryptic error, a container that won't start, a box that boots to nothing. Tom AI reads your actual logs, tells you what broke in plain English, and applies the fix on your tap (agent fixes are in beta). It's the way out that isn't three hours of searching forums.
164 supporters so far · pay what you want, every paid feature unlocks at any amount
Two reasons people actually go Legend.
“I paid for Legend to use the AI for help while getting it onto my Linux machine.”
— a new Legend, mid-install on the forum
Most upgrades happen the moment something breaks — install day, a cryptic error, a box that won't start.
“That worked! What’s the best way to support — upgrade to Legend?”
— minutes after a forum fix, before buying
The other half go Legend to keep it alive: one person builds this full-time, every app stays free, and $99 is what keeps fixes shipping for everyone.
TomSparkBox runs on supporters — hosting, CDN, AI and professional security audits cost money every month. Legend is the only thing paying for them, which is why every app can stay free forever.
Next milestone at 250: a second pair of hands — more modules and faster fixes. After that, an independent third-party security audit at 1,500 — the real trust check for a privacy tool.
Who’s behind it
Made by Tom Spark.
Privacy advocate, VPN reviewer, certified GEEK. He’s been teaching people to build exactly this for years — over a million views of server tutorials, distilled into one command.
Tom Spark Reviews on YouTube
“That was one of the nicest installs I have done in a long time, super fast too — and this interface you came up with is gorgeous, I love it. A couple of small glitches, and your own prompts pointed me to the fixes.”
@BadBunny
“I’d watched so many one-stop ARR stack videos that took hours and were always inconsistent. Not with this — everything stays working even after updates. The first good, sturdy solution.”
@GamerX06
“Damn dude! Just set up something similar and it took me weeks. This is amazing.”
@DarkStorm909
Join the Fleet.
Escape the corporate cloud.
Every ship is a real box in a real home — photos, passwords, media, all flying on hardware its owner controls. No landlord servers. No data brokers riding along. Just a Fleet of people who took their stuff back.
Installing is free forever. The optional extras (Tom AI, My Vault and more) are pay what you want — every one of them unlocks at any amount. $99 makes you a Legend.
FAQ
The questions worth asking.
Is it really free?+
Yes. Every app and module is free forever and nothing is paywalled. Legend is an optional one-time $99 unlock for the extras — Tom AI, My Vault, dashboard widgets, the remote-access wizard, migration, health reports and priority support.
What if I want to leave?+
One command exports your whole setup to plain Docker Compose files. The apps underneath are all standard open-source projects, so you keep running them with or without us.
Why isn't the glue layer open source?+
The 35+ apps are open source and unmodified. The installer, dashboard and wiring are source-available: free to run on your own servers, not free to repackage and resell. That's what keeps this a full-time job instead of a weekend hobby.
What hardware do I need?+
Any x86_64 machine with Docker: a spare PC, an Intel N100 NAS, or a 2GB VPS for the privacy profile. 8GB of RAM comfortably runs everything, including Jellyfin with hardware transcoding.
Is it safe to expose to the internet?+
Only the reverse proxy and WireGuard are publicly exposed; admin services stay on localhost behind 2FA. Download traffic runs through a VPN with a kill switch, and every container has resource limits and no-new-privileges.
Your server. Your data.
One command.
$ curl -fsSL https://get.tomsparkbox.com/install.sh | sudo bash