This is the platform everything else here runs on. Instead of renting a dozen separate SaaS subscriptions, the business stack lives on hardware we own and operate.
What it is
Several standalone Proxmox hosts running roughly two dozen LXC containers and VMs: CRM, contract signing, single sign-on, DNS, file storage, monitoring, AI services, and a pile of internal tools. Each service is its own unprivileged container with a dedicated data directory and one clear job.
How it holds together
A single Authentik instance handles login for every internal service, enforced at the reverse proxy through Caddy forward-auth. Public traffic terminates TLS with automatic wildcard certificates. Application data sits on ZFS datasets with scheduled snapshots and off-box backups, and intrusion protection runs in front of anything exposed to the internet.
Why it matters
The whole point is operability. Services are documented, recovery paths are written down, and a restore has actually been tested instead of assumed. It runs like a small production environment because it is one, and it is the proof behind the infrastructure work we offer.