PiBox: a tiny personal server for self-hosting (pibox.io)
Heya HN! We've built a Raspberry PI CM4 based SSD NAS for home hosting. We built it as a part of KubeSail.com - which is a platform aimed at making self-hosting easy and at making the technical bits (tunneling, backups, updates, etc) as easy as possible.
You may have seen plans for this about 9 months ago on HN, but we're finally in full production! I'll be booking tickets to fly out and help assemble the 2nd batch in a few days - we're effectively a two person computer company, which is a lot of fun and a crazy amount of work. Our mission is to make home-hosting a website, an app, or just personal photos a reasonable alternative to SaaS products.
174 comments
[ 3.4 ms ] story [ 274 ms ] threadPerhaps a more apt framework would be, "What's the reason someone is giving you money for this product?"
But honestly, it's also a computer. It's the dream machine (1). What was the value proposition of the personal computer? What we're proposing is the personal server. Billions of folks run the client-side of the internet - but only a tiny elite class of us know how to run the server-side?
If I get hyperbolic and kool-aid drunk, just know it's because I'm quite passionate about this. The blockchain folks talk a lot about "distributing the web". We're simply distributing web servers.
For now though - it's a neat box to run Photostructure or a Ghost blog on :)
1. https://press.stripe.com/the-dream-machine
I would probably advertise something bigger because FWIW I host a blog on a $5 pi fronted by Cloudflare (free).
These look really nice and clean though, wish you the best!
I'd love to make it really easy for users to cluster nodes together. 100% on our roadmap if we can get there!
Balance your checkbook and keep recipes!
https://kubesail.com/template/erulabs/actual https://kubesail.com/template/PastuDan/tandoor-recipes
the problem for me would be to spend the time to find a suitable device to run this on. if i happen to have one, great, but if not i'd probably rather buy yours than so my own research.
personally, what i am looking for is a portable version of this, that runs on a battery so i can use it tethered through my phone, or even with its own sim card.
for home use i would prefer the ability to put at least two regular 2.5" disks because those SSDs are still expensive at large sizes
There's a whole movement on these 1L pcs: https://www.servethehome.com/introducing-project-tinyminimic...
At home getting a similarly redundant setup is time, space, and energy consuming. Moreover, most of the home tooling does not have distributed data built in so we need to have a distributed fs or nfs. This brings a whole next level of maintenance and heartache that I simply do not want at home.
Consequently, I run one machine and make backups of the config and hope I can restore it when things go south.
Does anyone have better ideas?
This already solves a lot of issues imo. If something goes down it's not the end of the world. If the machine dies all I have to do is mount the NFS shares and run the compose files.
I run proxmox on my server at home and provision with VM images, like we did in the ancient times. I take regular backups of any extra storage I attach.
I can restore any individual box in an hour or two. It’s no high-availability but it’s good enough for home.
I also have an image for docker-compose like the sibling comment and run anything that “just works” in docker that way.
Someday I might write some lazy terraform to better separate the concerns of VMs and infrastructure, but it’s not a priority.
Proxmox is, in the scheme of things, pretty easy to use. If you can manage instances and images on a VPS you’re most of the way there.
Edit: I also have half a dozen shell scripts that do some basic setup things. These would be replaced by terraform if I ever get around to that.
I figured it would be great for my needs as a transportable PC, instead of a laptop; it was much cheaper.
Boy, do I hate it. It has this whiny fan noise than never stops. And if the CPU needs to do the least bit of work, the fan ramps up even more.
Otherwise, it's a nice little computer. Also, the newer generations – I think starting with gen 6, which look different – seem quieter. They probably realized that having a fan rattle around isn't great.
Eventually though, I realized that having a screen and a keyboard is critical for how I was using it. I may not always have a machine on the network that can SSH into the Pi server. So I eventually settled on using an old laptop instead. Much more performant, and if the network goes down, I can still access the information easily.
Unlike literally every other random assemblage of jazz you might possibly stumble into- which will be neither a toaster nor an air-frier, but some weirdo alien device a couple handful of earthlings have seen- you'll have a hope of getting better with this broadly known system. Otherwise, it's a: "Great! You went with Xin! It has flaky documentation, no one uses it on prod, but look at all the great boxes it says it can tick! And it's so much simpler!"
There's many many good pieces about, sure. But for real, there are zero assemblages, zero meta-solutions that let individual computing problem/answers slot in, as compared to Kubernetes. There's nothing remotely as meta-versatile. That's the use case, that which defines it against everything else: it's meta architecture that works to define how we'd get answers to any architecture problem. It's a viable answer to every system setup, unlike everything else which has narrowed, winnowed concerns.
You try to brush off, saying, it's my opinion here. That's a small slight, but generally, there's just nothing remotely of interest to the public anywhere near as broadly capable, that serves anywhere near a wide of range of concerns, that is anywhere near as flexible. (Counter-example me!) There's a variety of other piecemeal ideas out there- Hashicorp has a constellation of ideas that are all pretty good & which one can assemble. Doubter's gonna doubt, but the core premise of kubernetes- an all-purpose malleable api-server that records shit, operators that make the shit real, is an intelligble solid consistent base that underpins so much more, unifies & makes sense of computing so much better, so profoundly generally, across such a broader range of big & small computing, than anything else has remotely neared, that it is obvious & clear to those who try this better/general/pro-social/well-adopted paradigm of systems to be a repeatable, knowable, clear, enunciated & learnable way, that there's really no other platform appliance is worthy of mentionable compare.
If you do not have an answer to “What does this accomplish?” that includes a simple answer that maps to the word “accomplish” it’s perfectly acceptable to move on!
I’ll repeat my toast analogy: A toaster accomplishes toast very well in a way that a deep fryer does not. It isn’t usually suggested that anyone even attempt making toast in a deep fryer for reasons that are obvious to most people that have used one.
You’ve been asked “Why the toaster?” and your answer is “paradigms” ?
I can’t make a paradigm in a toaster.
Edit: To make sure I don’t elicit more information about Kubernetes in general, I want to clarify that the original question was about using Kubernetes by the creators of this project, within their intended use cases.
Out of the box, there are a bunch of builtin kube applicances/answers: Kubernetes runs processes/containers, network configuration, storage, and load-balancing/ingress. Adding vpn/wireguard, logging, metrics, whatever else have you will follow the same templates & ideas. But I think we're down to counting trees (number of builtin objects/appliances) rather than grokking the forest (that there's a general api-server-aka-state/operator dual concept that works everywhere, with many abundant appliance/use-cases slotting in & operated on the same way) when we myopically focus on individual use cases. And ignore the system.
> If you do not have an answer to
I think I did! I suggested a general, all-purpose, well known flexible system applicable everywhere. It just didn't click for you.
And in counter, please- requesting again- answer what you would suggest in lieu of Kubernetes please. So far you've had only negative, degrading, downputting things to say, and I'd like to see you try to make a positive cases for something, sometime, anytime, so we might have some reasonable comparison to assess & reason over. Alongside your destructive negative criticism, offer some positive examples of what you think does better, offers a clearer example of accomplishment. So we can compare & assess, have a field of play rather than only you taking shots against the champion forever. If you don't have any counter-examples, I'm not sure how we can keep discussing the worth of this system/paradigm!
They are all theoretically good ways to make toast.
You ask: What did you use to make your toast?
They respond: A toaster.
As a bit of banal, passive curiosity you think “Why the toaster in particular?”
And then somebody shows up calling you a toaster hater
You might not like my phrasing, but asking you what you saw, what possibilities would arise to you is a general & sincere question & you being so mortally offended at being challenged doesn't feel fair either. It would have been interesting to see you either try to guess, or put in 3 minutes of looking around & state more clearly what was unapparent about how these might be related. I was hoping you'd work to carry a little water in the discussion, to help illuminate what your mindset was, after a little trying.
> Get ahold of yourself
This is weirdly aggressive.
What an embarrassing shit show over an innocent question you could've simply ignored if you didn't feel like answering.
In my toaster analogy, when asked “what did you accomplish with the toaster?” they responded with (I’m paraphrasing here) “A better toasting experience for the PiBox team because of our existing toasting skillset” more or less.
It was a response that was easily distilled into a single sentence and moved past. Somehow they conveyed that without calling people “haters” or “problems” and I genuinely think that is because that poster had a good grasp of Kubernetes and its use cases.
I’ve done some searching and there are plenty of friendly and informed people on Twitter that are able to answer questions about the pros and cons of Kubernetes if you search #k8s and #kubernetes. I have learned not to ask rektide any sort of question for obvious reasons.
I will say however, that we've entirely stopped defending that it runs Kubernetes. There is a subset of people who hate that or want to debate it endlessly. It's not germane to what we're trying to accomplish - it's just a small benefit to a niche group of users. We could have just as easily based ourselves on Docker instead.
We sort of have two personalities: pibox is the hardware and some people hate the idea of it being bundled with software: they just want a tiny Linux server. But all piboxes have a default image with https://kubesail.com preinstalled. It displays a QR code on the screen for easy setup :)
Ideally - no one needs to know it runs kubernetes. We’ve had success as an awesome little home lab but we can’t expect every user to learn greek!
I tried the software product a while ago and it wasn’t quite what I was looking for, but it was pretty cool. I could totally see myself recommending it to people (admittedly it’s somewhat niche so the opportunity hasn’t come up). The hardware is a little pricy for someone who is pretty competent with electronics, but seems great for people who want someone all in one. That said, it looks so well done that if CM4s become easier to get I might still purchase one.
Their goal of “personal server” is something I eagerly wish was mainstream, and I always try out products that try to actualize it if the price is right. I had a small issue getting it set up on a random pi I had lying around, and erulabs/others were super helpful in discord! They have extensive docs for getting set up with your own hardware, which was great. The reason i stopped using the product was two fold: k8 seems like too much for personal use- writing my own KubeSail templates was just too verbose. The other issue is that I wasn’t a fan of their cloud hosting and cloud gateway solution - it works well enough but a personal server that needs a cloud server just wasn’t what I wanted. If I needed to rely on an outside server (you do unless you wanna open ports) I’d rather vpn to the box with eg. Tailscale than rely on the gateway. Which may be more secure too(?).
Getting a web gui for a self hosted cluster was really nice, and the templates they put together really lowers the entry bar to start self hosting. I’m really impressed with the selections they chose, since a huge chunk of them I saw and went “ooh I should try that out”. Kudos to the team for putting it together. A feature suggestion: some sort of identity/auth integration which can help with household stuff (eg a hosted app that KubeSail injects your identity into). Could be useful for families and SMB clients.
Ps. I had a good time reading through their non-documentation blog posts too.
https://hoppy.network
The pricing seems a bit high though, considering $8/month could also buy a cheap VPS with more than 1TB bandwidth (Contabo VPS, for example, offers a whopping 32TB outgoing traffic at $7/month.)
Perhaps I'm not the use case or target market, but something like this does appeal to me -- I just don't see why I'd pay for a wireguard endpoint, when I could get a VPS with a public IP and run the tunnel myself.
Sorry if too critical, I was metaphorically "reaching for my credit card" when I read "static IP over wireguard tunnel", before attempting to sanity check the prices.
My initial impression is that it solves a similar problem to DuckDNS (“how can I get a static, public IP for a machine on my residential LAN?”) using technology similar to Tailscale (WireGuard tunnels as a service).
Perhaps egress/public routing is the big advantage over Tailscale? Tailscale focuses on creating a trusted perimeter so all your devices can talk to each other securely. It doesn’t have an external gateway for other people to access specific devices within that perimeter. I think their business model / architecture may actually preclude this feature… they use their hosted service primarily for peer discovery, most traffic is routed P2P.
Hoppy appears to solve this problem by providing a static endpoint to route traffic over.
Tailscale eschews the public internet altogether, while providing Tailscale-network static IPs.
Tailscale is the most strict/limited as you mentioned (not all devices can address into it) but the most secure (since each device has to be included and there’s no public internet).
Hoppy seems next on secure/convenient list where anything should work but you have to use public internet.
Don't get me wrong -- I love my Dell R730xd but it's definitely a commitment.
(there's a lot more)
Perhaps a mistake, but looks like a very good platform for home thingies, one that I’ve been looking for some time.
Incidental question: how reliable are consumer SSD drives for backup drive use? How much am I setting up myself for failure if I skip raid and just have the one?
From pricing perspective, a two bay synology NAS is $300. You can add a lot of good cheap NAS storage.
Bonus points for those usually being SMR, which is atrocious if you want to run ZFS and need to resilver the pool.
https://arstechnica.com/gadgets/2020/06/western-digitals-smr...
The mini PCs can contain dual SSD, but, as noted, the storage is limited and the price is high.
The closest options I found are: RockPro64, Odroid HC4, AsRock Deskmini X300, ZimaBoard, RPI CM4, each having own problems. One may build one from an mITX motherboard, but frankly that may also cost about a TrueNAS mini (which is quite large). Synology boxes are nice, but I want ZFS!
If someone knows a small low power system for a ZFS backup server (like a passively cooled SBC or PC with sata port that can be used to connect HDDs placed outside box due to size limitation, or at least something that is portable), including a DIY build, I would love to take a look.
They usually come with mostly full-size components, so they're quiet, take regular DIMMs, etc.
I have an EliteDesk 800 g2 SFF which can take, OOB, three 3.5" drives and one 2.5". If you chuck the optical drive, there's space for a second 2.5".
If you're not afraid to take a dremel to it, the original 2.5" can be modified to house a 3.5" and you could probably stack one or two more 3.5" under one of the existing cages.
You'll also probably want to stick some fans in there somehow with all the drives, but there's space enough. It doesn't have enough SATA ports, but you can find half-height PCIe controllers.
---
If you don't want to hack on a case, the most compelling I've found is using one of those MBs with integrated intel CPU. Some of them should be powerful enough for ZFS and can take PCIe cards. You can put all this inside a Fractal Design Node or something similar.
For $455, you can buy an i3 CPU, motherboard with a 2.5G NIC, 16GB RAM, case and power supply to handle 4 spinning disks and an NVMe M.2. Is it tiny? No. It is, however, good enough to be your primary server for anything not ridiculously compute-intensive, 5-10x faster than the Pi, with 2-4x the RAM and much better bandwidth.
You trade off physical size and electrical power -- but if you want 4 spinning disks, that's going to be the same across builds. In return, you get repairability, upgradability, and probably better cooling.
I was also thinking of a similar build with an ASUS Prime MB, eg, 660M-A D4.
I find two 3.5” HDDs enough for a mini NAS. NAS storage is cheap, I can populate with maximum capacity.
Helios64 was good. But they stopped making the product.
You had selected a 2x16GB kit there.
But you can go even cheaper if you only need storage:
$80 GIGABYTE B450 I AORUS PRO WIFI AM4 AMD B450 SATA 6Gb/s USB 3.1 HDMI Mini ITX
$60 AMD Ryzen 3 1st Gen - RYZEN 3 1200 Summit Ridge (Zen) 4-Core 3.1 GHz (3.4 GHz Turbo) Socket AM4 65W YD1200BBAEBOX
And half the memory, so $40
So $180 vs $320 for CPU+RAM+MB.
A properly designed server motherboard would have a basic VGA port and an IPMI port, but buying those retail bumps up the price ridiculously. The NUC-style machines always have integrated video, sometimes really good (non-gaming) video, but offer only a single SATA port and a single M.2 slot.
My point - you can find a slightly older solution for less than $200, if you are okay to take some time to find it.
'Server' requirements are moot when we are talking about an extremly budget solution.
And honestly, as a person who extremely benefited from the existence of BMC/iLO/iDRAC - it is not that required for some cheap ass storage solution at home.
Like okay, you did wired another ether link for a BMC, installed OS aaaand... if something wrong with the box it is almost always requires to be near it to resolve the issue.
Edit: personally I have some low power GPUs laying around what can be used for the initial setup.
It was easier when you could fit some S3 Trio card on any machine, but still..
Tell me where you ship to and what the costs are. If you're going to make me jump through hoops to figure this out, well, your product is probably not good enough that I'll bother to do so!
I have opened and I am met with "We can't ship to %MY_COUNTRY% yet, but we are expanding quickly".
I also wonder why some sites claim they can't ship into here. Virtually all of the post services of the world do ship into this country for years and years yet some sites specifically exclude it.
Import: That is paid by the reciever? I have to pay import for things from abroad.
Returns: Most companies tell you to arrange shipping yourself.
And customers in my country are quite aware of the custom fees. And this works for millions of other suppliers.
Postal rates vary by country, and we've experienced more lost packages in some countries than others. Along with 30-45 day shipping times for most international packages.
Having a distributor lets us guarantee inexpensive 2 or 3 day shipping, paperwork free VAT, and easy returns for a much smoother experience overall.
Hope this makes sense!
Yeah, I totally understand your point of view. Perhaps I would myself not ship to my own country due to the business issues you have mentioned. Still sucks.
from a technical viewpoint, yes, it's totally nuts.
from a business viewpoint, it solves a hole lot of problems very cheap. i.e. good enough
It's been well known since the creation of www that users attention spans are non-existent and they will leave a page if they don't see the information that interests them within seconds.
Install a base OS, then docker compose a few services. Or buy a half dozen and deploy k8s.
Boom, "A cheap tiny personal server self hosting" (with COTS parts).
I'll make a post with the parts list and software install steps in a month or so if it would help anyone out. I bought https://www.amazon.com/dp/B09GK2QSY1, and a few alternatives, and I'm going to benchmark their performance under heavy load (using a much studlier machine to generate traffic).
These mini PCs are getting to be _really cheap_. Cheap enough that my home infra is moving towards a tiny mini PC ($100 or less) attached to every pair of monitors, keyboards, and the network, and a central server to do actual work.
edit: I even tried overclocking the Pi and dialing down the simulation distance in Minecraft.
Doesn’t mean I’d spend this money on a pi, but I’m probably not the target.
Minecraft servers are likely the heaviest of the ~15 services I run at home. You chose a service that I wouldn't have expected to work.
My Pi 4 4GB runs an MPD server that outputs to a HiFiBerry DAC, Zabbix and Grafana. It's done so smoothly for about a year now.
At one time it acceptably ran Nextcloud, Gitea, Matrix Synapse, Vaultwarden and a file server in systemd containers.
At another time, it replaced an old AMD e350 machine I was using for backups - the Pi 4 was faster than that old desktop. The bottleneck was the CPU load when transferring data over SSH.
[1] - https://protectli.com/
I also run a Navidrome instance on it and use Subtracks on Android so I can get all my music whilst out and about.
It also runs a Mopidy server so I can play music at home over the proper speakers using Mopidy Mobile.
It also acts as a DDNS informer so that I can always get home when my ISP decides to change my public IP.
It also acts as a SSH gateway and runs a RDP instance on it. I did used to use it as a desktop device and a Moonlight/Steam desktop streamer but now the PC is in the same room, and a Pi400 is downstairs with the TV. That runs much cooler.
All in all a great useful device and not sure how I'd live without it.
For the NVMe, I got an Icybox NVMe enclosure because the other enclosures were problematic. I was using a "SSK Aluminum M.2 NVME SSD Enclosure Adapter, USB 3.1 Gen 2 (10 Gbps) to NVME PCI-E M-Key Solid State Drive External Enclosure (Fits only NVMe PCIe 2242/2260/2280)" - https://www.amazon.co.uk/gp/product/B07MNFH1PX
I ended up replacing it with a "ICY BOX M.2 NVMe Enclosure for M.2 NVMe PCIe SSD, USB 3.1 (Gen 2, 10 Gpbs), USB-C & USB-A Cable, Aluminum, Black" - https://www.amazon.co.uk/gp/product/B07JJXCSC4
The ICY BOX actually supports booting from it unlike the SSK so I managed to ditch the microSD card too. Here was my enquiry on the forum about it: https://forums.raspberrypi.com/viewtopic.php?t=307291
Once you're set up with Pihole running on it and can SSH into it, installing Navidrome is easy - just follow the installation guide at https://www.navidrome.org/docs/installation/linux/.
For Wireguard installation, I used https://github.com/pivpn/pivpn
I also use a Wireguard UI (which stores its configuration in a different place to the "stock" Wireguard installation in the pivpn above): https://github.com/ngoduykhanh/wireguard-ui
There are some rules to permit incoming traffic on Wireguard in and out: Post up: iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
Post down: iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE
For DDNS, I just run a cron job that connects to a free plan on https://freedns.afraid.org/. They have a bash script to use - very simple.
I run Wireguard on my phone as an "always on" VPN which connects to the domain registered at the DDNS service, so I know that mydomain will also go home.
To get DNS working over the Wireguard, you may have to change the Pihole settings to "permit all origins" for DNS requests.
For incoming traffic at my home, the router port forwards the appropriate Wireguard port to the Pi (on its static address). The Pi is not set as a DMZ or anything.
Enjoy!
It like trying to tow a trailer with a dirt bike and complaining when it doesn't move.
The PI as a server shines in running low-to-medium power services and having a low entry and upkeep costs.
I run a Plex server, Gitea server, samba filesharing and qbitorrent on a 4gb rpi4 and it just sit there and chugs along using like a tenth of the power a normal computer would, taking almost no space, making no noise and costing like a fifteenth something like a NUC would.
And as a bonus, if it ever does go kaput I can just get another rpi4 and the entire process of setting it all up again would take me 5 minutes max.
N.B.: An 8GB rPi 4/CM4 has more memory, more storage, more compute power, and faster networking and i/o than a Cray supercomputer had in the early 90s! It's a real computer. If you can't do most of the useful jobs on the planet with that level of performance, then you just suck at software. (Yes, I know most Linux distros are Jabba-level obese these days, but still...)
Full disclosure: I have a PiBox on order, and will be prototyping a prepackaged server with it, which may well turn into a product itself.
Where as, I continue to use several ARM home servers consisting of Pi's and Jetson with smaller workloads and applications made for them.
https://www.investopedia.com/terms/e/eurodollar.asp#:~:text=....
Compare that to a RPi that idles at ~5 W.
They seem to be using the 8GB RP4, which is currently around 100€. Also it comes with a 2 TB SSD for storage which is probably another 150-200€. A 2 port SATA backplane/adapter is probably 20-50€, Power supply, fans and wifi/bluetooth antenna is maybe an additional 30-50€. Even the cheapest case will set you back another 10-20€. So all told the markup isn't as bad as you're making out. Still an open question if it's worth it or not though.
FWIW, I've got a PiBox on order (w/o the drives), and I think the price is VERY reasonable. (No relationship other than waiting customer.) The PiBox "mainboard" that hosts the CM4 has much better I/O capabilities than a garden variety RPi 4. I'm actually going to be using mine for a small, light NAS and application server, and I'm confident it will work well.
They also sell the box without the Pi, SSDs, antenna and fan for 150€, it is up to you to decide if the price is justified, I think it is a bit on the expensive side but not unreasonably so. But if you intend to DIY the same configuration they are selling for 540€, you won't get that much cheaper.
Where are you getting these measurements from? A "consumer-grade PC" idles at a few watts[1]. "enterprise servers" might idle a bit higher but nowhere near 200-250W.
[1] https://www.notebookcheck.net/Lenovo-ThinkCentre-M90n-Nano-D...
I made them myself with a kill-a-watt. The consumer grade PC's idle at ~60W, meanwhile the Dell PowerEdge R710 I have here with me idles at ~250 W.
However, the easiest way to have low idle power is to use a NUC-like computer.
Many models consume between 5 W and 10 W during light load at the wall plug, while those with the highest power consumption use between 10 W and 15 W at the wall plug, during light load.
The fastest SBCs with ARM cores that can be found at a reasonable price are comparable in speed with Intel Jasper Lake, but Raspberry Pi uses obsolete Cortex-A72 cores, which are 2 to 3 times slower.
Even a 7-year old NUC-like computer from Intel/Gigabyte/Zotac etc., with a "Core" CPU, e.g. a Skylake U, is much faster than anything with Jasper Lake or with Cortex-A76 or older ARM cores.
While a new NUC-like computer is more expensive, an old one might be as cheap as a Raspberry Pi, while being much faster.
During the last 20 years, I had a permanently active 24x7 server, which hosts a large number of services, e.g. firewall, router, NTP server, DNS server, DNS proxy and cache, e-mail server, Web server, Web proxy and cache, file server, etc.
The first server which did all that used the fastest Pentium 4 and it had an average power consumption of over 200 W. The current hardware of the server is the 5th version since the beginning. At each upgrade, the average power consumption has been cut into half. The current server consumes around 10 W and it uses an Intel NUC with a Coffee Lake U CPU, together with 4 USB to Ethernet adapters, to provide 5 Ethernet ports.
I have experimented with various ARM-based SBCs, but when old NUCs are available, repurposing them is a higher-performance solution.
Current Dells pull that much without even an OS installed, just sitting idle at a boot screen.
If it is for redundant storage, zfs will be quite limited by the 8 gib ram.
It could also be useful as a ZFS snapshot send target. That uses little RAM and doesn't need ZFS encryption (if your source dataset is already encrypted).
---
edit: regarding ZFS RAM usage, the below is from my ZFS NAS, with out-of-the-box ZFS settings:
Could you say some about who “we” are in this context?
i.e. where are you based, personnel, long term goals, etc.
I think you have an interesting project idea here. I’d consider this as a replacement to my home NAS when it becomes available in the UK. Good luck to you.