- build it once, deploy and forget for months or years;
- adding new features is easy (once it's needed once a year or even less frequently). "Easy" here means little time spent reminding yourself how the app works and where to add new features;
- deploying is simple and can be done with little to no setup;
- language/platform/dependencies updates are infrequent, easy to do, unlikely to break the app;
- open source and developed by a community, no dependency on an enterprise.
* Python/Django framework (Django itself has 17+ years "on the road" - that's forever enough for me) * Postgres as my main database * Bootstrap as main UI (customized via Sass - not too fancy though) * Unpoly (https://unpoly.com) for frontend and the SPA "feeling" of the app - absolutely no JS frameworks (React, Vue, etc.) - my SaaS product will be mainly CRUD operations, no fancy/dynamic stuff.
Change Django for Rails (or any other "magic" framework) and you're good to go.
With this you stack you have a dead simple web application that can be completely self contained in the executable with `go:embed`. That makes deployment an absolute breeze. Since I also attempt to use as few third party packages as possible and the ones I do use are pure Go, I can containerize my app and deploy it with Google's distroless base image. That helps in reducing my attack surface.
And while my app is a monolith using an embedded LibSQL database (SQlite), I can easily change my app configurations via environment variables to use a remote LibSQL server and then scale my app behind a load balancer with more servers.
It's honestly such a simple yet effective stack for development. My one web app handles both the api and web requests, I can easily scale, and building my app is fast.
Edit: I should also preface, that all the HTML/CSS/JS used by my website are (mostly) vanilla and developed by myself. So no use of a CSS library like Bootstrap, Bulma, or Tailwind. And also no use of JS libraries like JQuery. I do use HTMX and Alpine, but they are both being embedded into the executable like I stated above.
1. the tech-stack you already know well.
if you are familiar with something: build on your existing experience.
2. php + some mature & well documented framework like laravel
php is often disliked by the "we know it better" crowd here on HN.
but: it offers a high rate of productivity, is easier to deploy on a wide range of hosting-possibilities than anything using python or other script-languages
preface: i would recommend the following only if you already have experience with it!!
3. python + some mature & well documented framework like django
in my experience: deploying / maintaining python-based webapps is more effort than php-based ones
just my 0.02 €
> language/platform/dependencies updates are infrequent, easy to do, unlikely to break the app;
I'll second the Django, Rails, Laravel, but also add something statically typed like Java with Spring if this is purely an API backend. Static types will give you peace of mind during runtime for years.
Stick to relational databases. Don't buy into hype stuff on Medium blogs. You can go a long way on a VPS with an LTS distro on auto-update (very few SaaS businesses actually have scale that exceeds what a modern VPS can do).
(You could also use Larave + Inertia js + React/Vue)
I think Livewire is way faster to develop in and has less bloat/complexity.
Laravel Jetstream gives you scaffold and auth + 2FA out of the box.
TailwindUI is cut and paste LEGO like components (you'll have to Alpine js some of them but it's quick and easy)
Tons of Laravel packages available to do what you need to do.
Laravel Spark if you want a fast SaaS in a box for connecting to Stripe
Laravel Forge (EC2) or Vapor (Serverless) makes spinning up servers and deployment super easy.
Some of these are paid but you can definitley do it without them but all the paid items have crazy ROI.
Front-end: Bootstrap, vanilla JS, for visualizations: D3.js and Babylon.js
Backend: Java Spring Boot, PostgreSQL
Deployement: semi-manual, script rsyncing the Jar onto the dedicated Hetzner Server
Regarding ease of adding new features: I guess that depends mainly on your code base and less on your stack
Frontend: bun, solid.js, tailwind, astro -> cloudflare pages
tbh I had a smoother setup with solid-start but astro is better if you have static pages and everything I do is static pages: either pre generated static content or an app which calls an API. I don't want a server busy rendering HTML and we have free hosting anyway thanks to all the JAMstack marketing money.
Backend: rust, axum, sqlx, sqlite, redid, systemd -> hetzner
Single static binary is great for deploying whenever. Rust means my code won't likely break because of typos or brain farts. You likely don't need a database running in another process until much later on. If I do need it, I pick postgres.
I do have a separate, centralised auth / permissions / license services I use for a bunch of different services. Custom coded. Services get notified and update a local cache in redis with the data If I were starting from scratch I'd just chuck it in the main service (and what I did for years).
Ansible for setting up infra, reusable across multiple apps, you can use PaaS like DigitalOcean app platform to save even more time
Managed Database by DigitalOcean
Ruby on Rails, served via Nginx
AlpineJS (with <script> tag), no build process needed TailwindCSS (use CLI locally to generate the needed CSS)
Been using this stack since 2020, couldn't be happier, no bullshit of NodeJS / NPM randomly breaks when I come back after few months
With the containers thing any stack can do this.
But I get what you mean. Avoid anything to do with JS. It's the worst of the worst for stability. Avoid Ruby on rails. Avoid python. These ecosystems will evolve out from under you.
Avoid anything from Microsoft. Did you make a website in 2014? tough luck, you are stuck on old .NET world now. Unless you port things over to the new world. Did you use silverlight? whoopsie!
If you really need your SaaS to work forever write it in Go.
As for the frontend, I suck at it so I don't have any opinion
Clojure (Polylith, Reitit, Clojure Spec and Spec Tools), XTDB (Postgres as the datastore), HTMX and Tailwind
Other combinations work just as well Clojure (same Clojure stack), InteriaJS, Postgres (no XTDB), Datomic, Tailwind
I would also recommend AWS Copilot to deploy containers to the AWS cloud with a Postgres RDS backend.
I would go with PHP + Symfony + twig with bootstrap for the front
2. Adding new features is rarely 'easy', because you have to test it with the other features, do deployment, support older versions of the app (if possible), etc. Still, some stacks make it easier than others.
3. Simple deployment once you've configured your automation is an area where there has been lots of progress. You can look at Puppet, Chef, Docker containerization.
4. Dependencies change. Typically you should view changing dependencies like you would adding a new feature: have a justification for it, do full testing, and only then deploy.
5. Open Source is easy to find, and there are a lot of good quality candidates.
6. One commenter recommended to use what you know. Within reason, that's good advice. However, the old adage of 'when all you have is a hammer, everything looks like a nail' applies. Use the right tool for the job.
7. For the front-end, I recommend client side JavaScript, either Lit or React using Vite. Svelte shows promise, but is not fully mature enough yet to be acceptable when you're solo and using it in production.
8. For the back-end, I recommend Rust. It's reliable, it's performant, and there is a good ecosystem for it. If you go that route, I recommend Axum or Tide for your Web server, fronted by Nginx. You could also go NodeJS (or Deno) and Express or Next. A JS back-end though means you're at the mercy of the NPM ecosystem, which is rife with abandoned packages. Rust could get like that, but seems to be more well pruned. If you go with Rust and want easy new features, a REST based API using a plugin architecture can work well.
9. I recommend 3 repos: front-end, back-end, devops. Your deployment scripts and other things go in devops. Your front-end, if you follow 8, will be Javascript. Your back-end, if you follow 8, will be Rust.
Btw, Rust comes with some caveats. If you don't know it already it has a steep learning curve, however the benefits of learning it are high. You also can use an existing hardened version of Rust made by Ferrous Systems, called Ferrocene (I've no relation with them, other than maybe wanting to work there someday).
https://ferrous-systems.com/ferrocene/