Area: Infrastructure and Platform Engineering

Problem: A client needed Matrix for communication, OnlyOffice for documents, Foundry VTT for game hosting, Home Assistant and Grocy for the house, Vikunja for tasks, Mosquitto for MQTT, and several AI services, all on one server. Every service had its own networking, storage, and security requirements, and the server had to keep working through all of it.

Approach: We built a Docker Compose platform with Apache and Nginx reverse proxies for routing, CSP headers on every public endpoint, nightly backups with retention, and health monitoring across the stack. Each service has a runbook covering deployment, maintenance, and recovery.

Technical details:

  • Multi-service Docker Compose orchestration
  • Apache 2.4 and Nginx reverse proxies with TLS termination
  • CSP headers, firewall rules, and per-service access control
  • Nightly backups with 30-day retention
  • Health monitoring with alert thresholds per service
  • Runbooks for deployment, updates, and disaster recovery

Outcome: The stack has run for months without unplanned downtime. Adding a service takes a Compose entry, a proxy config, and a runbook page.

Stack: Docker Compose, Apache 2.4, Nginx, Linux, PostgreSQL

Page rendered by SimpleCMS — powered by the Plugin System.

Sandboxed plugin ran for projects/infrastructure-platform and read “Self-Hosted Infrastructure Platform” through the mediated API.