Self-hosted IT systems for companies that want control.

I design and operate vendor-independent platforms so you stay in control of data, costs, and uptime. Helpdesk, monitoring, VoIP, identity, backups, and automation built on proven open-source software.

Why Vendor-Independent

Vendor independence keeps you flexible: no lock-in, transparent operations, and the ability to audit every layer. Open-source software is the foundation, but the goal is business outcomes—predictable costs, security you can verify, and systems you can extend or migrate at any time.

Service Pillars

IT Service Management

Helpdesk, assets, and workflows that you fully own.

  • GLPI ticketing, assets, and inventory
  • Email automation, SLAs, and reporting
  • Onboarding with LDAP or CSV imports

Telephony & Communication

Reliable VoIP systems without per-user license traps.

  • Asterisk or FreeSWITCH SIP PBX
  • IVR, queues, call routing, and recording
  • SIP trunking and softphone rollout

Monitoring & Reliability

Visibility into uptime, performance, and capacity.

  • Zabbix and Grafana dashboards
  • Alerts, uptime checks, and escalation
  • Capacity planning and patch visibility

Identity & Access

Central authentication with clear audit trails.

  • LDAP/SSO integration
  • Role-based access and least privilege
  • MFA for critical systems

Backup & Disaster Recovery

Recoverable systems with tested restore paths.

  • Proxmox Backup Server and ZFS snapshots
  • Offsite copies and retention policies
  • Restore testing with RPO/RTO targets

Hosting & Operations

EU-hosted infrastructure with documented operations.

  • Hardened Linux, patching, and baselines
  • Automation with Ansible and Git workflows
  • Runbooks, monitoring, and handover

Technology Stack

Focused on proven open-source platforms with long-term communities.

AnsibleAutomation & orchestration
Debian / Ubuntu / FedoraServer platforms
OPNsenseNetwork edge & firewalls
Proxmox VE & PBSVirtualisation & backups
Zabbix & GrafanaMonitoring & observability
GLPIITSM & asset management
Asterisk / FreeSWITCHVoIP & telephony
WazuhSecurity analytics
Caddy / PHP-FPMApplication delivery
LDAP / SSOIdentity & access

Recent Engagement Highlights

Self-hosted Service Hub

Built an end-to-end platform using Proxmox, GLPI, Zabbix, and Grafana for an MSP that needed full ownership of customer tooling.

  • Infrastructure-as-code with Ansible and CI
  • Automated onboarding for new tenants
  • SLA visibility improved by 60%

Security Perimeter Refresh

Replaced legacy edge firewall with OPNsense, added Wazuh for security telemetry, and rolled out enforced credential hygiene.

  • Zero-trust VPN with MFA
  • Centralised alerting and threat feeds
  • Documented disaster recovery playbooks

Backup & Continuity Modernisation

Introduced Proxmox Backup Server and immutable ZFS snapshots for a SaaS provider running Debian and Fedora clusters.

  • Recovery objectives met in testing within minutes
  • Automated verification jobs and reporting
  • Stakeholder training for operational readiness

Reference Architecture

A representative stack: hardened OPNsense perimeter feeding platform services (Caddy, Zabbix, GLPI, Grafana, VoIP) with Proxmox compute, PBS backups, and managed Linux workloads.

Diagram of the vendor-independent reference architecture

How Engagements Work

01 Discovery Call

We map your current infrastructure, objectives, and constraints, and agree on priorities.

02 Audit & Plan

Create a detailed plan with architecture diagrams, risk register, and automation scope.

03 Build & Automate

Implement using Git-backed playbooks, with peer-review and change tracking.

04 Monitor & Support

Roll out observability and documentation, transition operations, and offer ongoing support.

FAQ

What infrastructure sizes do you support?

From single-site deployments to multi-region environments spanning tens of nodes. The guiding principle is reproducibility and strong storytelling through documentation.

How are engagements scoped?

Most projects begin with a short paid assessment that leads into either a fixed-scope delivery or a retainer for ongoing support. All automation artefacts stay in your repository.

Do you provide training?

Yes. I deliver handover workshops, write runbooks, and mentor teams so they are comfortable maintaining the platform after go-live.

Downloads

Résumé / CV

Request an up-to-date copy tailored to your sector.

Request CV
Ansible Playbook Samples

Example roles for Proxmox, Zabbix, and GLPI automation.

Browse GitHub

Contact

Email: support@source-admin.com

Timezone: Central Europe (CET / CEST)

Response time: within 24 hours during business days

GitHub: github.com/firetoy

All messages are stored securely and reviewed manually—expect a reply within one business day.