Dr. Halden Law Office
Hybrid legal platform: premium public site on VPS, encrypted case management and document generation kept entirely on-premise.
The challenge
A growing law firm needed a professional multilingual web presence and an internal system for cases, clients and documents — without sending client PII to foreign cloud SaaS. Staff had to work from the office and remotely, with strict control over who sees which case.
What we built
One Next.js codebase with two deployment targets: a public marketing site on HestiaCP VPS and a private admin intranet on Docker + NAS in the office. Client data is encrypted at rest (AES-256-GCM), access is role-based, and the public server never holds database credentials or encryption keys.
Key capabilities
- Hybrid public site on VPS plus on-premise admin intranet — client PII never on the public server.
- AES-256-GCM encrypted client records, RBAC case delegation, and audit-friendly access control.
- TipTap document templates with variable injection and PDF export for contracts and letters.
- Integrated webmail (inbox, sent, compose) wired to office SMTP/IMAP — no third-party mail SaaS.
- Trilingual public marketing site (HU/EN/DE) with self-hosted fonts and zero Google CDN dependency.
Tech stack
Next.js 15 · React 19 · TypeScript · Tailwind v4 · PostgreSQL 16 · Prisma · Auth.js · TipTap · Docker · HestiaCP