Infrastructure engineering Open-source & white-hat practice
zeroshell.devInfrastructure engineering,
operations, and security.
Professional experience in virtualization, backup, network security, and cloud platforms. zeroshell.dev documents the services in operation, the ideas being developed, and the engineering approach behind them.
Areas of experience
Cluster & HA engineering
Proxmox VE and PBS, VMware ESXi, Hyper-V, and XCP-ng. Virtualization with high availability and recovery in mind.
Data protection
Commvault, Rubrik, Veeam, and Proxmox Backup Server. Backup architecture and disaster recovery planning.
Network hardening
Fortinet, VPN, zero-trust architecture, and network hardening. Defensive security within an authorized scope.
Cloud & OS
RHEL, SLES, and Windows Server across GCP, Azure, and AWS. Systems administration across cloud and on-premises environments.
Infrastructure in operation
Virtual infrastructure
Proxmox administration and Pulse monitoring for virtual infrastructure.
Observable systems
Infrastructure inventory with NetBox, scheduled jobs with Cronicle, and availability checks with Uptime Kuma.
Control & protection
Patch tracking with PatchMon, GPS services with Traccar, and web infrastructure for client projects.
Distributed estate
A high-speed site-to-site VPN connects the three production sites, independent backup, and a separate control plane. Each site can keep running independently.
PBS · Protection layer
protects all sitesIndependent Proxmox Backup Server protecting all sites, outside the production layer. Encrypted local backups and offsite S3 copies are continuously verified. RTO is under 24 hours, typically 8 hours, and as low as 15 minutes.
PVE-CO · Production cluster
Lombardy, ItalyThree-node Proxmox VE cluster in high availability. Dual WAN with automatic failover at the firewall. Monitored and staffed daily.
PVE-TR · Point of presence
Lombardy, ItalyA smaller site with a high-speed WAN connection. It serves as a point of presence for Italy and southern Europe, supporting time-sensitive services.
PVE-DE · Primary delivery site
Grand Est, FranceA datacenter site hosting most services, with resources that can scale quickly and platform-level reliability.
CTRL · Control plane
Bavaria, GermanyThe control plane and control room monitor and coordinate the infrastructure. Each site keeps running independently if the coordinator is unavailable.
Technical practice
Architecture & Zero Trust
Limit access and keep administrative interfaces private.
Automation & Infrastructure as Code
Make configuration changes reproducible and easy to review.
Observability & resilience
Use monitoring to find failures and recovery tests to check readiness.
White-hat & open-source practice
Work within permission and report findings responsibly.
The dream
An infrastructure portfolio today. One day, a company.
The ambition is to build an open-source infrastructure company from this work, helping organizations manage their systems without giving up control. It remains a future goal, not an existing business.
Idea registry
Services in operation. Projects taking shape.
The registry brings together running services, projects in development, and ideas still being considered.
Now
Current work.
Coordinating the sites from the control plane in Bavaria, Germany.
Reviewing and hardening Zero Trust access to the services.
Developing the independent intrusion detection system and the DVR platform.
Working on prototypes for the ideas listed in the registry.
Documenting operational runbooks and service rebuild procedures.