47 comments

[ 2.7 ms ] story [ 56.8 ms ] thread
After a U.S. federal contractor told us they loved Plane but couldn't use it due to ITAR requirements, we spent 6 months building a truly air-gapped version. No external connections, no license pings, no telemetry, everything runs in complete isolation.

The interesting part: our air-gapped deployment actually runs faster than our SaaS version. Turns out when you eliminate all network latency, things get snappy.

This post covers the technical challenges we solved (supply chain trust, 2GB bundle size, offline licensing) and why regulated industries need alternatives to cloud-only tools like Jira.

Big fan of Plane since it's open-core.

Doesn't seem to be a lot of options for self-hosted/open-core project management software. The existing ones looks pretty bad, and don't come anywhere close to Jira level functionality.

just a fyi for anyone looking for a neat little kanban board, gitea has kanban built-in into the projects feature.

(obviously lacks really fine-grain customization that would be found in other jira alternatives)

Ehm, fairly sure you can use Jira in an air-gapped environment.
There is no price anywhere. I would be interested to use that for either my job or for private projects, but where and how much do I pay?

Edit: I looked again and even your pricing pages have no price. I understand that you may want to restrict yourself to rich companies, but I don't understand the point of posting on HN if that's the case.

This is just shipping a docker container for people to run the app on their own infrastructure. Retool does the same thing for companies which don’t want to expose internal resources and databases to the cloud.
Any more details about the offline patch/upgrade process? When I looked at gitlab years ago, it handled that fine but the documentation seemed "nervous" about it.
TBH, if I were working in such a highly regulated industry, I'd be very hesitant about buying software from a company with a .so domain and basically beholden to the whims of the government of Somalia.

If they said "implement a backdoor for us or all your non-airgapped customers lose access tomorrow", are you sure the company would be able and willing to say no?

Now do an air-gapped Confluence killer, please.
> This post explores the journey of building this specialized deployment option for regulated industries where data sovereignty isn't just preferred—it's mandatory.

This is an AI writing tell: "It's not just x—it's y."

https://youtu.be/9Ch4a6ffPZY

Given their customer base, I wonder why they bothered with any license enforcement for the pure on-prem. Just do the "license enforcement" implicitly when customers want to update: they need to log in to get the new image.

(Your regular annoying notice that FIPS-compliant crypto is, if anything, marginally less secure than non-FIPS crypto; not that it matters in any material way, just, it's not a flex.)

As a DoD employee, it would be amazing if more companies took this seriously (I'm looking at you health tech bros).
I guess my mental model is all wrong but those air-gapped choices - they seemed kind of what is natural to do …
A version of JIRA that nobody can access sounds pretty good
Almost choked on my coffee - cheers
This also makes it infinitely more useful for healthcare. Not healthcare software specifically. Lots of use cases in logistics, irl maintenance, etc. Patient data creates hipaa challenges and tends to overflow into any system.
This is totally a tangential point. Why do they call it "air gapped" instead of "air tight" ? Are these supposed to mean different things ?
Most self-hosted apps, including jira, can be airgapped. Yeah maybe it's not made super easy like Plane, but any org that requires this is going to have an IT department that can handle it.
They make it seem like a big deal. It’s pretty much how all software used to ship :)
Buy-and-forget perpetual pricing for internal networks, please.

Don’t want to pick up annual subscriptions, and don’t want any dependency on a third party company that might not last or will start doubling prices in the future after an acquisition - been burned heaps by that.