Software with a home.
For European companies that want their software — and their customers' data — out of foreign legal reach. We design, build, and operate your platform on EU soil, and hand you the keys: everything declared in git, in repositories you own.
The problem
A US-parented cloud is legally reachable wherever the servers stand. An “EU region” changes the latency, not the law.
The managed services that make deploys magical are the ones you can't take with you. Every proprietary primitive is an exit fee you haven't priced yet.
Building a real platform yourself — networking, TLS, secrets, backups, upgrades — costs months of engineering you meant to spend on product.
“The moat is jurisdictional sovereignty, not merely ‘servers in the EU’.”
The offer
One engagement, one outcome: a production platform under your jurisdiction and your git history — with us operating it, and nothing standing between you and taking it over.
Kubernetes on immutable Talos Linux at Hetzner in Germany — provisioned end to end with OpenTofu, fronted by Traefik, secured with Let's Encrypt.
Every layer declared in git, in repositories you control — infrastructure, configuration, workloads. Nothing clicked, nothing undocumented.
Argo CD reconciles the cluster to the repository. Deploys are merges, rollbacks are reverts — no kubectl from a laptop, ever.
An OpenBao vault wired in with External Secrets. Credentials live on your platform, not in someone else's cloud.
CloudNativePG with backups to EU object storage — and restore drills that actually ran, not backups taken on faith.
Velero protects the cluster's state and volumes, to EU object storage.
Keycloak with the realm declared as code — one login for the tools your team runs.
We operate it day to day: upgrades, patches, and observability with Prometheus, Loki, and OpenTelemetry.
Time
Start from a platform that already runs — not from a hiring plan for a platform team.
Effort
You ship product. We run the substrate — upgrades, certificates, backups included.
Likelihood
Nothing here is speculative: the pattern we sell is the one serving this very page.
The proof
Everything we sell, we already run. This site is served by a Kubernetes cluster in Falkenstein, Germany — immutable Talos Linux nodes, provisioned by OpenTofu, delivered by Argo CD, fronted by Traefik, secured with Let's Encrypt. If it isn't in the repository, it isn't running.
The pipeline has no hands in it: a change lands as a reviewed commit, CI builds one multi-arch image, and Argo CD reconciles the cluster to match git. No kubectl from a laptop, ever.
Talos Linux
Immutable, API-driven OS
Kubernetes
The substrate
OpenTofu
Infrastructure as code
Argo CD
GitOps delivery
Traefik v3
Gateway API edge
cert-manager
Let's Encrypt TLS
Hetzner FSN1
EU data centre
.eu
EU-jurisdiction domain
The guarantee
The honest guarantee isn't a badge — it's architecture. Your platform is declared in git, in repositories you own, on open standards: Kubernetes, the Gateway API, OCI images, ACME certificates, plain Postgres. If we ever stop being the right partner, leaving is a git clone, not a negotiation.
A deliberate seam separates the platform from its workloads: the substrate can be swapped — another EU provider, another Kubernetes — with no workload rewrite. We published the whole contract: what keeps a platform portable.
European by design
With IPCEI-CIS, the EU has articulated where European cloud should go: an open, interoperable, sovereign cloud-edge continuum. Every platform we build points the same direction — EU throughout, minimal data collection, open standards over proprietary convenience.
One declarative model from data centre to edge. The whole platform is text in git — it can be reproduced anywhere Kubernetes runs.
EU data centre, EU DNS, .eu registry. Not a compliance checkbox — a design constraint applied to every dependency we take.
Open standards end to end: Kubernetes, the Gateway API, OCI images, ACME certificates. No proprietary primitives, no lock-in.
Built in the open, documented as it happens. Decisions are recorded, trade-offs are named, and the blog shows the work.
Dream Code Factory is an independent company. Alignment with IPCEI-CIS objectives is a design choice, not an affiliation, participation, or funding claim.
From the blog
We build in public. Every post documents work that shipped — every command actually ran.
23 August 2026
Letting a Merchant of Record handle EU VAT while keeping the entitlement model in your own database — and the production bug that proved why that split matters.
19 August 2026
Taking the four-clause contract from theory to a real product running in production — one pull request, and the friction list from doing it the first time.
16 August 2026
Rebuilding an entire self-hosted platform from nothing but an offline secret list, two git repos and a bucket — measured end to end at 1 h 23 m 39 s.
Start here
One email: what you're running today, and where you want it to live. A person reads it, a person replies. No forms, no tracking, no follow-up sequence — this site doesn't even collect data, and neither should your platform.