services

Services

IT services without marketing noise. Linux, opensource, infrastructure that stays quiet. Prague, CZ, EU.

// rate 1,600–2,200 CZK/h depending on type of work
// audit / second opinion: 12,000–18,000 CZK fixed
// retainer by agreement, typically 8–40 h/month
01

Linux servers

debian · ubuntu · rhel

Installation, performance tuning, maintenance. Auditing third-party configs without unnecessary rewrites. If it runs, don't touch it.

  • migration from shared hosting to own VPS
  • SSH hardening, fail2ban, unattended-upgrades
  • tuning postgres / nginx / apache
  • second opinion on third-party config
02

Virtualisation

proxmox ve · zfs · pbs · xen

Hardware consolidation, snapshots, HCI with ZFS. VMware migration without panic — we know what 2024 licensing looks like.

  • 3+ node cluster design with HA
  • VMware → Proxmox migration
  • Proxmox Backup Server + offsite
  • ZFS replication between sites
03

Firewall & VPN

opnsense · wireguard · openvpn

Network segmentation, multi-WAN, IDS/IPS, remote access via WireGuard. Done with OpenVPN agony and IPsec escapades.

  • VLAN topology design for SMB
  • WireGuard for 5–80 people
  • multi-WAN failover
  • Suricata IDS with low-noise alerts
04

Nextcloud & groupware

nextcloud · onlyoffice · talk

Your own cloud instead of Microsoft 365. File sharing, calendars, contacts, OnlyOffice, video calls. No per-seat licences.

  • migration from M365 / Google Workspace
  • SSO via Keycloak / LDAP
  • OnlyOffice for co-editing
  • S3 backend for large datasets
05

Monitoring

zabbix · nagios

See problems before the client calls. Alerts without noise, meaningful dashboards. One view, not ten.

  • Zabbix self-hosted
  • SMTP / Signal / SMS gw integration
  • SLA reports for management
  • night escalation via oncall
06

3-2-1 Backups

proxmox backup · restic · rdiff-backup

Regular. Off-site. And most importantly tested restores — we know they work. A backup we haven't tested restoring isn't a backup.

  • PBS + offsite over WireGuard
  • quarterly restore drill
  • immutable snapshots (zfs / ransomware-proof)
  • retention by data type
// section 03

how to start

1

inquiry

E-mail or form. 2–4 sentences are enough.

2

30-min call

Free, Signal or phone. What you're solving, where it hurts.

3

proposal + price

Written within 5 days. Scope, milestones, price.

4

kickoff

Contract, access, first commit to git.

I don't do

  1. 01 Microsoft 365 as a strategic platform

    A trap, not a strategy. Your own mail server pays for itself within a year.

  2. 02 SharePoint, Teams governance, "digital transformation"

    Renaming a folder to "workspace" doesn't fix the process underneath.

  3. 03 Windows Server domain services as primary

    AD in 2026 = debt, not investment.

  4. 04 Web design, SEO, copywriting, "branding"

    Can't. I'll recommend three people who can.

  5. 05 SaaS reselling ("we'll give you a license at 30% off")

    Nobody belongs between you and your data.

  6. 06 24/7 hotline without a specific agreement

    At night I sleep. You should too.

  7. 07 Weekly status call with PowerPoint

    When something burns, you call. When nothing burns, a slide won't help.

This isn't a list of what I can't do. It's a list of what I won't sell you.

Not in the list? Ask.

Sometimes I do things that haven't made it here yet. Send a few lines.

send an inquiry →