Infrastructure Advisory

We help small teams control their own infrastructure.

Zero Trust access, Proxmox architecture, and self-hosted infrastructure for small teams. Some engagements end at handoff — you get the keys and run it yourself. Others stay active, with us maintaining what we built on your behalf. Either way, you own what you run.

See the services ↓ Our approach
Scoped
Fixed price, no surprises
Documented
Every change, runbooked
Owned
You control what we build
Approach

Built around ownership.

Most infrastructure consulting ends with a dependency on the consultant. We work the other direction — whether that means handing you the keys or holding them on your behalf.

For fixed-scope engagements, every handoff includes documentation your team can use to run the system without us. For managed services, we stay active but stay transparent: every change runbooked, every decision explained, no black boxes.

Either way, the infrastructure is yours. We pick tools you can actually maintain, design configurations your future self can read, and make sure you understand what's running and why.

  • Fixed scope, fixed price — no surprise invoices
  • Every configuration documented for your team to maintain
  • Tooling chosen for long-term maintainability, not consultant lock-in
  • Scope changes handled as explicit change orders, not assumptions
  • Managed services stay transparent — you always know what's running and why
Services

What we set up.

Three service families. The first two are fixed-scope engagements that end at handoff — you get the documentation and run it yourself. The third is a managed service where we handle ongoing operations on your behalf. Most engagements start with an exploration call — the exception is the Proxmox Homelab Review, which is directly bookable.

Primary
🛡️
Family 01

Cloudflare Zero Trust Setup

Replace VPNs with identity-based access. Configure tunnels, device posture, and policy for small teams that need real network security without enterprise complexity.

Standard $1,500

Up to 5 apps behind Access, 3 Cloudflare Tunnels, DNS filtering, device posture, admin runbook, 45-min handoff.

Likely fits if
  • Google Workspace, basic M365, or GitHub OAuth as IdP
  • No existing Conditional Access to coexist with
  • Under ~5 apps, under 3 tunnels
Book exploration first
Complex $2,250

Scaled for enterprise IdP environments, coexistence with existing policies, and larger app inventories.

Likely fits if
  • Entra ID with existing Conditional Access requiring coexistence
  • Okta with SCIM provisioning
  • Multi-IdP federation
  • More than 5 apps or 3 tunnels, custom SaaS integrations
Book exploration first
Book an exploration call →
🖥️
Family 02

Proxmox Architecture Review

Cross the gap between "works on my homelab" and "won't eat our data when the power flickers." Storage, HA, networking, backup — reviewed and documented.

Homelab $500

Single-node or small 2-node setup. Storage, networking, VM/LXC structure, backup, firewall. Written recommendations + 30-min call.

Likely fits if
  • Single node, or 2 nodes without HA requirements
  • Fewer than ~10 VMs/containers
  • Local storage only (ZFS/LVM), no Ceph
  • Homelab or solo developer
Direct booking
Production Cluster $1,250

2–3 node cluster with HA, shared storage (NFS/iSCSI/small Ceph), PBS architecture, VLAN design, threat model.

Likely fits if
  • 2–3 node cluster with real HA needs
  • NFS/iSCSI, or small Ceph with RBD only
  • Running workloads you'd miss if they went down
Book exploration first
Hyperconverged $2,500

3+ node Ceph hyperconverged, SDN fabrics, backup strategy review, VMware migration planning, capacity plan.

Likely fits if
  • 3+ node hyperconverged with Ceph RBD + CephFS
  • SDN fabrics, VXLAN, or multi-tenant networking
  • Migrating from VMware ESXi, or PDM-managed multi-cluster
  • Real SLAs, RTO/RPO targets
Book exploration first
Book Homelab Review → Or book an exploration call →
Managed
🗄️
Family 03

Nextcloud Managed Deployment

Your own Nextcloud instance. Your hardware, your data, our hands on the wheel.

Pricing is tailored to each deployment — book a Nextcloud consult to discuss your setup.

Add-on
🎓
Family 04

Team Training

Hands-on operator training on the infrastructure we delivered — Proxmox operations and failure behavior, Zero Trust policy management, or the self-hosted services in your stack. Run in your actual environment, not on slides: your team drives, we direct, and the session ends with your runbook annotated by the people who'll use it.

Training Day $1,250

Up to 6 hours (splittable into two half-days), up to 5 participants, run against your environment and runbook. Shorter refreshers afterward at the standard $175/hour continuing-advisory rate.

Available after or alongside any fixed-scope engagement
After any fixed-scope engagement concludes, continuing advisory is available to existing clients at $175/hour, billed in 15-minute increments with a 15-minute minimum per session. No monthly minimum, no ongoing commitment — book time when you need it.

You own what you run.

Fixed-scope engagements end with your team holding the keys. Managed services keep our hands on the wheel — every change runbooked, every decision explained. Either way, your infrastructure is never a black box.

Get started

Three ways to book.

The Proxmox Homelab Review is directly bookable. Nextcloud managed deployments start with a dedicated Nextcloud consult. Everything else — larger Proxmox tiers and Zero Trust setups — starts with a paid exploration call. Both calls credit toward the chosen engagement.

The gate

Exploration Call

$200
  • 45 minutes
  • Tier recommendation and scope confirmation
  • Written scope summary after the call
  • Credited toward any engagement booked within 30 days
  • Required for Zero Trust and larger Proxmox tiers
Book Now →
Direct booking

Proxmox Homelab Review

$500
  • 45-minute kickoff call
  • Written recommendations in ~1 week
  • 30-minute follow-up call after delivery
  • Payment collected at booking
Book Now →
Managed service

Nextcloud Consult

$200
  • 45 minutes
  • Hardware, storage, and user requirements review
  • Deployment recommendation and written scope summary
  • Credited toward your managed service engagement within 30 days
Book Now →

Cancellation & Rescheduling Policy

Cancellation policy is outlined in booking details.