02 Category
Systems & networks
Declarative servers, private networking and firewalls that read like sentences — plus the work of getting off a hyperscaler without going dark.
- Engagements
- 2
- Hosting
- EU / EEA only
- Licence
- Open source throughout
- Handover
- Your repository
Infrastructure & networks
NixOS, WireGuard and pf: declarative servers, private networking and firewalls you can read out loud in a review meeting.
4–8 weeks
Migration to European hosting
Off the hyperscaler, onto EU and EEA providers — sequenced so nothing goes dark, and costed before a single byte moves.
6–12 weeks
Why these tools
The long-form argument behind each choice, for the people who have to be convinced.
Why NixOS
Module
The whole machine as one file, staging that genuinely matches production, rollback as a reboot.
Why WireGuard
Module
A VPN small enough to have actually been read, with public keys as the whole identity model.
Why pf
Module
A firewall ruleset that reads like a sentence and ships through code review.