cat hosting-ops/README.md

Infrastructure is not a detail: it is where the project lives for years. Full management, cloud or on-prem, with the same discipline.

cloud

Design and management on Azure: AKS, App Service, Container Apps, Azure SQL / PostgreSQL Flexible, Storage, Key Vault, Front Door / Application Gateway, networking and identity (Entra ID). Costs under control with right-sizing and budget alerts.

azureaksapp-servicekey-vaultentra-id

orchestration

Kubernetes (AKS or on-prem) and Docker Swarm for smaller workloads: Helm, NGINX / Traefik ingress, cert-manager, autoscaling, rolling updates and rollbacks, secrets out of the code.

kuberneteshelmswarmtraefikcert-manager

ci-cd-iac

Pipelines on GitHub Actions or Azure DevOps: image builds, tests, vulnerability scanning, per-environment deploys. Infrastructure as code with Terraform / Bicep and versioned Docker Compose: reproducible environments, reviewed changes.

github-actionsazure-devopsterraformbicepregistry

self-hosted

When the cloud is unnecessary or too expensive: dedicated servers and VMs, reverse proxy, automatic TLS, SSO with OIDC, DNS and CDN with Cloudflare, WireGuard VPN for admin access. Same discipline as the cloud, lower bill.

dockernginxcloudflarewireguardoidc

reliability

Daily backups with snapshots and off-site copy, tested restores, availability and resource monitoring, centralised logs, email alerts. Controlled updates with a restore point, never blind auto-updates.

backupsnapshotmonitoringalertingrollback

security

Baseline hardening (least privilege, segmented networks, allow-lists), daily image and dependency scanning (CVE), WAF and rate limiting, access audits, patch management with a log. Incident response and clean-up.

cve-scanwaffail2banauditpatching

how it works

  • Initial assessment: what is there, what it costs, what is at risk. Written plan, with priorities.
  • Ongoing management on a retainer: updates, backups, monitoring, monthly report. Or project work (migration, pipeline setup, hardening).
  • Everything documented and versioned: if one day you switch provider, you take the infrastructure with you, not just the data.

ask for an assessment

Keyboard shortcuts

1-6 switch tab · ← → previous / next tab

j / k next / previous section · g g top · G bottom

l switch language · t switch theme

: opens the command line (try: help, ls, cd hosting, cat method)

Esc closes

dlook.dev:~$