Bluesky PDS is the official Personal Data Server for hosting your own account on the AT Protocol network, so your posts, follows, and media live on infrastructure you control and still appear across the whole federated Bluesky social graph. An interactive installer sets up the container stack with the Caddy web server handling HTTPS for your domain and wildcard subdomains, creating the data directory, generating secrets, and registering the service with the network's identity directory. You create accounts directly or by invite code, sign in from the standard Bluesky web, iPhone, and Android apps by pointing them at your server address, and brand the sign-in, sign-up, and account screens with your own service name, logo, colors, and background images. Email verification and password resets go through your SMTP provider, rate limiting and blob upload limits are configurable, and the data directory holds everything needed to back up or migrate the instance to a new host later. Built-in tooling covers day-to-day operation: an admin command updates the service, automatic updates run through Watchtower, logs stream to Docker or a file, health and firehose WebSocket endpoints confirm the network can reach you, and an optional Prometheus and Grafana stack tracks accounts, sign-ins, and request latency. Account migration moves an existing identity onto your server when you are ready to leave a hosted provider. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT and Apache-2.0 licensed.

Indigo is Bluesky's Go toolkit for building services on the AT Protocol, and operators reach for it when they need to follow the whole network: run a relay that subscribes to many personal data servers and republishes one combined firehose, split that firehose for many subscribers, or filter it down to the accounts and record types a single application actually cares about. The relay holds upstream host and account state in PostgreSQL, verifies repository integrity and identity signatures, exposes an admin web interface for configuring limits and adding upstream hosts, and emits Prometheus metrics and tracing for production monitoring. Rainbow consumes a relay or PDS firehose and fans events out to large numbers of subscribers, buffering recent history on local disk so late joiners receive the events they missed. Tap handles verification, automatic backfilling of repository history, and filtered delivery by account list or record collection, sending simple JSON events to applications over WebSocket or webhook instead of requiring each developer to parse cryptographic repository formats. Hepa consumes the relay firehose and applies moderation rules to accounts and records, pushing labels into an existing moderation service for teams that operate their own trust and safety pipeline. Each service ships as a single Go binary with Docker packaging, and shared packages provide the client, identity, lexicon, and repository data structures the services are built from. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT and Apache-2.0 licensed.