Full Company Infrastructure on Bare-Metal Proxmox + Ceph

End-to-End Engineering Org Infrastructure

End-to-end company infrastructure on 7 HP bare-metal servers — Proxmox + Ceph, full SSO and the engineering, knowledge and back-office stack for 240 daily users.

2025Shipped
3engineers
4Screens
ClientSector: Engineering organization (in-house IT) · NDA
End-to-End Engineering Org Infrastructure
Overview

Full company infrastructure delivery for an engineering organization — from servers and storage to every service the team uses day-to-day. Designed and deployed on 7 HP bare-metal servers running Proxmox with a Ceph distributed storage cluster, fronted by a Keycloak SSO that owns the central user directory and authenticates every internal service — including the WireGuard VPN. Engineering stack: GitLab + GitLab Runners + Docker Registry, YouTrack issue tracking, MinIO object storage, Mattermost for team chat, knowledge base, forum and documentation platform. Back-office: CRM and ERP systems on the same infrastructure. Backups with dedicated storage, HA across the cluster, VPN-only external access. In production since August 2025, currently serving 240 daily users.

What ships with it
  • 7 HP bare-metal servers on Proxmox + Ceph distributed storage
  • Keycloak as the central identity — every service and the VPN auth against it
  • Full engineering stack: GitLab + Runners + Docker Registry + YouTrack + Mattermost
  • Knowledge base, forum and documentation platform alongside team chat
  • CRM and ERP systems hosted on the same infrastructure
  • HA, dedicated backup storage and Keycloak-backed VPN-only external access
  • 240 daily users in production since August 2025
Screens
End-to-End Engineering Org Infrastructure screenshot 1
01/04

Click any screenshot to open full-size view

Numbers that matter
7HP bare-metal servers
240Daily users
Since August 2025In production
Full HARedundancy & backups
Stack
ProxmoxCephKeycloakMinIOGitLabGitLab CIYouTrackMattermostDockerDocker RegistryTerraformAnsiblePrometheusGrafanaWireGuardLinux
Want one of these for your team?

Let's scope it together.

Start a conversation →