For anyone without their own IT department, from solo offices, practices and law firms up to mid-sized companies. I make sure your systems run, stay backed up, and can be recovered when it matters. None of this is theory: it's what I do in my own operation every day, 35+ virtual machines on my own Proxmox cluster, behind a multi-tier segmented network, with encrypted, restore-tested backups.
A backup that has never been restored is a promise, not protection. I set up encrypted backups, store them off-site and test the restore regularly, documented, so it's clear how it works in an emergency. You don't get a folder full of jargon, you get the certainty that the backup actually holds.
Protection against attacks, automatic updates, clean permissions on the least-privilege principle, all documented and traceable. I work aligned with the German BSI baseline-protection methodology, so security isn't a one-off project but a maintained state.
Setup, hardening and maintenance of your PostgreSQL databases: with tested backups, applied updates and performance tuning when things get tight. Databases are my daily bread, I run multi-tenant systems with row-level security myself.
With Proxmox I split one physical server cleanly into separate virtual servers: that saves hardware and power, new servers are ready in minutes instead of days, and snapshots allow a fast return to the last good state. Moving off VMware? I get you out of the license costs and migrate you to Proxmox.
Where an outage really hurts, systems run redundantly, so a single machine failing doesn't stop your business. Not cluster overkill for everyone, but the redundancy that fits your risk.
Devices cleanly separated into segments (VLANs), a firewall rule set on the principle "each segment only sees what it needs", and encrypted VPN access for safe work on the road. So nobody reaches anywhere they have no business being.
Since I don't yet show a client list, I show my own infrastructure, built and documented like a client project. Both builds come as a case study to read up on, with an architecture diagram.
Data protection is included, not extra. A data processing agreement (view the DPA template) is part of the engagement, data on the infrastructure I run is held in Germany, backups are encrypted. Especially for practices and law firms this is the default, at no surcharge.
No counting hours, no surprises.
Ongoing care
Base package e.g. 1 server + up to 5 workstations: I monitor your systems, install updates and check the backups. You just notice everything works. Larger environments at a fixed price after a quick check. Cancellable monthly. I'd rather convince through work than through contract terms.
One-off jobs
After the free initial consultation you get a one-page offer: what gets done, what it costs, when it's ready. You know the price before I start.
30 minutes, no strings attached. I listen and tell you honestly whether and how I can help.
Kozlowski