Private Hosting and Virtualization Infrastructure

The infrastructure we use to host both client applications and our own products, designed and managed by us since 2016.

Project Overview

Period: since 2016, continuously extended
Client: our own infrastructure, used to host clients
Field: hosting, virtualization, hybrid infrastructure
Our Role: design, implementation, and management
Status: in production

The Challenge

When the application and underlying infrastructure are managed by different providers, responsibility can become fragmented during an incident, requiring the client to coordinate troubleshooting across multiple teams.

We built our own infrastructure to take unified responsibility for applications, hosting, and service recovery in case of an incident.

What We Did

We built a hosting platform based on virtualization, containers, and distributed storage, designed for application isolation, redundancy, backups, and incident recovery.

Proxmox VE clusters with Ceph distributed storage
LXC and Docker containers with separate environments for development, testing, and production
reverse proxy with automatically managed TLS certificates
backups via Proxmox Backup Server and NAS storage, with retention policies and restore testing
network segmentation via VLANs, firewalls, internal access VPN, IDS/IPS, and DNS filtering
monitoring with alerts and preventive maintenance
domain and certificate management
email infrastructure for business domains—SPF, DKIM, and DMARC; transactional email separation and reputation monitoring
object storage compatible with S3 and PostgreSQL databases in containers with encrypted connections
CI/CD pipelines, automated image builds, and private registries

The limitations of our own infrastructure. Hosting at our office is protected by UPS and short power interruption mitigation, but does not provide full redundancy for electricity and internet connection. For applications that cannot tolerate downtime, we use cloud VPS or hybrid configurations.

With What We Built

Proxmox VE and Proxmox Backup Server, Ceph, LXC and Docker, Traefik, pfSense and OPNsense, MikroTik devices, WireGuard, Cloudflare and CrowdSec, MinIO, PostgreSQL and MySQL, GitLab CI/CD, Synology storage, Linux.