02 Category
Systems & networks
Declarative servers, private networking and firewalls that read like sentences, plus the work of getting off a hyperscaler without going dark.
- Engagements
- 2
- Hosting
- EU / EEA only
- Licence
- Open source throughout
- Handover
- Your repository
Infrastructure & networks
NixOS, WireGuard and pf: declarative servers, private networking, and firewall rules readable enough to go through in a review meeting.
Cloud migration
Off the hyperscaler and onto EU and EEA providers, costed before any data moves and sequenced so that nothing goes offline.
Why these tools
The longer case for each choice, for colleagues who need convincing.
Why NixOS
Module
Each machine described in one file, staging that matches production, and rollback by rebooting.
Why WireGuard
Module
A VPN small enough for people to have read all of it, with public keys as the identity model.
Why pf
Module
A firewall ruleset that is easy to read and goes through code review.