2U and 1U servers across two racks with out-of-band management.

IPMI/iLO management network, redundant PSUs, N+1 cooling, hardware RAID with hot spares.

Tier III colocation with redundant power and network paths.

Dual utility feeds, N+1 UPS and diesel generator; biometric access and CCTV.

Proxmox VE cluster with Ceph storage and VMware for legacy estates.

HA migration, live snapshots, template-based provisioning and capacity planning dashboards.

Ubuntu LTS, Debian and RHEL fleets alongside Windows Server 2022.

Golden images, unattended upgrades for patch windows and centralized configuration.

AWS (production DR) and Hetzner (primary compute) with IaC-managed landing zones.

Account vending, SCP guardrails, private networking and cost allocation tags.

Spine-leaf inspired switching with segmented VLANs and redundant uplinks.

BGP peering to upstream providers, DNS-based failover and full IP address management.

Perimeter firewalls with IDS/IPS, internal segmentation and zero-trust admin access.

Admin allowlists by IP/CIDR, MFA on all management planes, WAF in front of public apps.

Prometheus, Grafana, Loki and Tempo with on-call alerting.

SLO dashboards, runbook links in alerts, synthetic probes and capacity forecasting.

Immutable restic vaults with off-site replication and quarterly restore tests.

3-2-1 strategy, object-lock protection, documented and rehearsed recovery runbooks.

Ansible for config, Terraform for infra, GitOps for applications.

Everything through pull requests — no manual changes on production systems.