Sign-in with Apple, Google and email, Stripe payments, SES emails, an admin, a no-code CMS and 43 designer-made looks — already built, tested and documented. Fill in one config file, deploy to a £5 server, and spend your AI tokens on the part that's actually yours.
SITE_DESIGN=""# the house lookLogin, payments, emails, an admin, a CMS, security, deploys. Ask an AI agent to build that from a blank folder and you burn days of prompting — and a pile of tokens — before your actual idea gets a look-in. Simple Stack is that 80%, finished.
Prompt, test, debug, re-prompt — and then do it all again on the next project.
› Read AGENTS.md. Turn this into a recipe-sharing app with a £5/month Pro plan.
Read the codebase brief — routes, billing, conventions
Edited the plans, the profile copy and two views
php scripts/doctor.php — ready
php scripts/smoke_test.php — 225 passed
One brief to read, one config file to fill, and checks that prove it still works. Every token goes on what makes your product different.
Illustrative — your own project will differ. But you'll never write sign-in or Stripe webhooks from scratch again.
Not a demo app full of TODOs — the production plumbing you'd otherwise build, test and secure yourself.
Passwordless by default, with real OAuth — signed state, nonce checks, identity linking. No Auth0 bill, no SDK to babysit.
Subscriptions, one-off sales and credits — with webhooks, refunds, failed-payment retries and the customer portal handled.
Amazon SES with branded templates: sign-in codes, magic links, receipts and a welcome email.
Users, payments, webhooks, credits and an audit trail — table-first, searchable.
Build pages from 26 blocks with a live side-by-side preview, then hand clients safe, content-only editing.
A versioned /v1 API with hashed, rate-limited bearer keys.
Sell files to signed-in buyers — no shareable links.
FLUX on fal.ai, metered by credits, stored in your R2.
SwiftUI and Jetpack Compose source, wired to the backend.
CSP, CSRF, rate limits, backups and a setup doctor.
Sitemap, canonical URLs, social cards and structured data.
Each is a crafted system — palette, typography, components and micro-interactions, in light and dark — with self-hosted fonts. Pick one and your whole public site changes with a single line.
Each is a complete, ready-to-run site. Copy the folder, add your keys, rename it — and it's yours.
FLUX models on fal.ai, a credit per render, and every image stored in your own private Cloudflare R2 bucket.
Monthly and yearly Stripe plans that unlock access levels and credits — set up in one config file.
One-off Stripe checkout and a buyer library — exactly how this storefront sells Simple Stack.
Meter anything — exports, lookups, AI calls, render minutes — through one atomic credit ledger.
A versioned REST API with self-serve keys, rate limits and a credit cost per call.
The backend for an iOS or Android app — plus SwiftUI and Jetpack Compose source templates already wired to it.
A no-code page builder: your agent assembles the site, then the client edits it safely without breaking your design.
Every integration switches on with a few lines in .env. The included doctor checks your setup and tells you exactly what's missing — then the deploy guide takes a fresh VPS all the way to taking payments.
# Your site APP_NAME="Lumo" APP_URL="https://lumo.app" SITE_DESIGN="letterpress" # Payments — Stripe STRIPE_SECRET_KEY="sk_live_…" STRIPE_WEBHOOK_SECRET="whsec_…" # Email — Amazon SES SES_SMTP_USERNAME="AKIA…" SES_SMTP_PASSWORD="…" # Sign in with Apple & Google APPLE_SERVICES_ID="app.lumo.signin" GOOGLE_CLIENT_ID="….apps.googleusercontent.com"
Copy the folder you want and run the installer — it creates your database and secrets.
php scripts/install.phpIt checks every key, extension and permission, and names anything missing.
NGINX + PHP on any small VPS, with a step-by-step guide, hardening checklist and nightly backups.
Rather delegate? Tell your coding agent: read AGENTS.md and set this up — the brief walks it through all three steps.
PHP and SQLite need no managed database, no serverless bill and no build pipeline. One small Hetzner-class VPS runs your site — or ten of them. This storefront and all its demos share one.
Every month, forever£90+
About£5
Typical prices; yours vary by provider and region. The point stands: the whole stack fits on one small box you understand.
Each site type has its own example page with the real screens, and the live demo app runs the exact code in the download — click anything, payments are simulated and nothing is saved.
The member dashboard, billing, downloads, the admin and the page builder — signed in for you with sample data.
Open the live demo£99 £49
Launch price · full price £99
Less than one month of the rented stack — and it's yours for good.
Immediate-supply cancellation terms are confirmed before Checkout; statutory rights remain unaffected. Pay securely with Stripe; no account needed up front.
Yes. Start with AGENTS.md for the architecture and setup prompts. The installer creates the local database and secrets; your coding agent can help rebrand and connect services. Review its changes and run the included checks before launch.
This storefront runs on the starter. It includes parameterised SQL, signed webhooks, CSRF checks, rate limiting and session hardening. Your own launch still needs production configuration, provider setup, backups and end-to-end tests. The included doctor and smoke tests help you verify that work.
Three zones, each with the right chrome. Your marketing site keeps the clean top nav; the moment someone signs in they land in a polished left-sidebar member app — dashboard, billing, downloads, studio — with a desktop sidebar and a mobile drawer. /admin is its own separate sidebar app for you, and tool pages like the page builder get a sticky save toolbar up top. Access is tiered: signed-in users get the base app and you gate the rest behind a plan with one check, so free users are routed to pricing automatically.
Yes — every site type ships a real no-code page builder. Style each section band (background image, colour, dark mode, full-screen hero, scroll animations), drop in 25+ blocks — a hero with a background carousel, pricing tables, FAQ accordions, galleries with lightbox, testimonials, stats, video — reorder with arrow buttons, start from ready-made sections, and watch a live preview. It renders server-side and is sanitised on save. Spin up microsites and full client sites without touching code or a build step — here is a whole site built entirely in the CMS. Stand sites up for clients in bulk, each on its own cheap box, with the CMS overhead already handled.
Yes — a complete AI image studio is one of the seven site types: prompt a FLUX model on fal.ai, generate or edit images, spend credits. Renders land in your own private R2 bucket, served via presigned URLs. Stays off until you add your FAL_KEY — full detail is in the flagship section above.
The web app renders on the server with PHP and uses jQuery for interactions. You can edit and deploy it without a JavaScript build pipeline. Forms, the editor and other interactive features use JavaScript. The optional native clients have their own local build tools.
SQLite is a practical starting point for a product hosted on one server. WAL mode supports concurrent readers and a single writer. Capacity depends on your queries, write traffic and hardware; load-test your actual workload. The starter includes indexes, backups and a guide for a later MySQL migration.
Rename APP_NAME, swap the copy and plans, replace the legal pages — then pick your look from .env alone: 43 bespoke design systems (one SITE_DESIGN line re-skins the whole public site, fonts self-hosted), plus 20 accent palettes, 5 hero layouts and light/dark, so two sites built from the same download don't look related. Browse them all on /designs, or use the visual /designer. The repo ships AI-handoff docs so your agent can do most of it for you.
You pay your hosting and service providers directly. Budget for a PHP server, domain, transactional email and payment processing. Image generation/storage and native app store accounts add costs if you enable them. Check provider pricing for your region and expected usage; the template itself is a one-time purchase.
One download with the full codebase, pre-built into seven ready-to-run site types. In the box:
clients/, already wired to the mobile backend and RevenueCatCopy the folder you want and ship. You get lifetime access to the version you buy.
Checkout is handled by Stripe — no account needed up front. The moment your payment clears we email a sign-in link and code to your Stripe email address. Click it and the download is waiting in your dashboard. You can link Apple or Google sign-in to the same account if you like.
One named person or legal entity. Build unlimited own and client projects, modify the starter, deploy commercially, and let employees, contractors and AI tools work on your licensed copy. You can hand over a finished deployed product, but you cannot redistribute Simple Stack itself as reusable boilerplate or a standalone source product; a client who needs an independent starter copy needs their own licence. Your branding, content, data and original code remain yours. Full terms are in the licence and on the Terms page.
You get the version you buy, and you can re-download it any time from your dashboard. We actively use this stack on our own sites and keep refining it — but future updates aren't guaranteed or part of the price. If we ship a meaningful update, buyers are emailed so you can grab it.
Yes — try the whole thing before you spend a penny: every site type has its own example page with the real screens, and the live demo app lets you click through the member area, billing, downloads, the admin and the page builder — no card, no signup, nothing saved. Before Checkout you expressly request immediate supply and acknowledge that the 14-day change-of-mind cancellation right ends when supply begins. Your rights if the content is faulty, not as described or cannot be supplied are unaffected.
It includes security controls and regression tests — parameterised SQL, signed webhooks, CSRF, rate limiting and session hardening — and we run it on our own production sites. No software can be guaranteed free from every defect or vulnerability, so you remain responsible for configuring, testing, securing and maintaining your deployment. The Terms explain the responsibilities and statutory protections in plain English.
Full source, seven site types, 43 designs and every guide — for £49, once.