What to add next, and why

E-signatures for client agreements, contracts and proformas (PSM-2026 series) instead of print-sign-scan. Keeps the signed copy on Persmon's own disk.

Invoices, proformas and quotes with the PSM numbering, Net-14 terms and ABSA details built in; recurring support billing (e.g. the TMS UGX 80k/month) and payment reminders on schedule.

Privacy-friendly analytics for the sites Persmon hosts and builds — Terrazzo Masters, Aluminium Plus, Namirembe Guest House, Bakerm — without cookie banners. One instance, one dashboard per client.

BI dashboards straight on Postgres/Supabase: HMS occupancy and POS revenue for Ishasha, Pearl Insights census slices, backup-size trends. Shareable read-only dashboards for clients.

Single sign-on in front of the tools (n8n, Dozzle, Beszel, Metabase…) so there is one login, MFA, and one place to revoke access when a collaborator leaves.

Project tracking for multi-phase work like the CCHCL ICT contract (three phases) and Nabugabo — issues, cycles, client-visible progress — replacing spreadsheets and chat threads.

Team wiki for runbooks, SOPs, onboarding and client hand-over docs. This site explains the server; Docmost is where the how-we-work knowledge goes.

Booking page for consultations and site visits, synced to Google Calendar. Clients pick a slot; no back-and-forth.

Client intake forms, post-project feedback surveys and lead capture for the client sites, with results in one place.

A spreadsheet-style interface over Postgres tables — lets a hotel manager or a client edit reference data safely without touching the app.

Private LLM endpoint for experiments like the Pearl AI assistant and document pipelines. 16 GB RAM fits 7–8B models; keep it stopped when not in use.

Merge, stamp, compress and sign PDFs — for BOQs, proposals and contract packs coming out of the docx pipeline.

Newsletters and campaign email for clients' marketing (guest houses, bookshop) at near-zero cost per send.

Shared support inbox and website chat widget for hosted client sites; WhatsApp and email in one queue.

Schedule social posts for client accounts from one place.

Python/R notebooks next to the data for census analysis and modelling work, without shipping CSVs around.

Crowd-sourced IP reputation on top of fail2ban; blocks known bad actors before they reach Traefik.

Web UI over restic for encrypted, deduplicated off-site backups (to the PC or Hostinger storage) with restore-by-click — the next step after the current tar + checksum scripts.