StickStock – Self‑Hosted BI Platform with Jinja2 Templates & 16 Chart Types

StickStock is a full‑featured, self‑hosted Business Intelligence platform that puts you in full control of your data. Connect to any data source (PostgreSQL, MySQL, MongoDB, REST APIs, CSV), build queries visually or with Jinja2‑powered SQL templates, and turn raw data into interactive dashboards with 16 chart types – all on your own VPS, with no cloud lock‑in.

Why StickStock?

· Self‑hosted & private – your data stays on your infrastructure.

· No vendor lock‑in – deploy on any VPS, use your own PostgreSQL (including Supabase).

· All‑in‑one – data connectors, query builder, advanced analytics, dashboards, scheduled reports, collaboration.

· Developer‑friendly – built with Go, Next.js, Python – fully open source and extendable.

From simple line charts to advanced visualisations – all powered by ECharts:

Chart Type Description

Line, Bar, Pie, Scatter Standard analytics

Table Tabular data view

Heatmap Matrix visualisation

Boxplot Statistical distribution

Treemap Hierarchical data

KPI Single‑metric cards

Forecast Time‑series prediction

Combo Bar + Line combination

Radar Multi‑dimension comparison

Funnel Conversion analysis

Waterfall Incremental change

Bubble Three‑axis scatter

Stacked Bar Cumulative breakdown

🧠 Advanced Analytics

Run statistical analyses directly on query results – no separate tools needed:

· Linear Regression – with coefficients, R², p‑values.

· ARIMA Forecasting – predict future trends.

· Anomaly Detection – Isolation Forest algorithm.

· Welch's t‑test – compare two sample means.

All heavy computations run asynchronously in a dedicated Python service (FastAPI + Polars + statsmodels + PyOD).

🔐 Security & Compliance

· JWT authentication (custom, no external OAuth required).

· AES‑256‑GCM encryption for stored credentials.

· Audit logging – every user action is logged (user, IP, action, timestamp).

· SSRF protection – REST connectors block internal IPs.

· Rate limiting on login/register endpoints.

· SQL injection protection – parameterised queries and read‑only validation.

· CSP headers – strict Content‑Security‑Policy.

🛠️ Technology Stack

Layer Technology

Backend Go 1.22 (pgx, JWT, cron)

Analytics Python 3.12 + FastAPI, Polars, DuckDB, statsmodels, scipy, PyOD

Frontend Next.js 14 + React + Tailwind + ECharts

Database PostgreSQL (Supabase compatible)

Cache Redis

Deployment Docker Compose + Nginx + Let's Encrypt

.......