Docker

Prometheus + Grafana Monitoring Stack

Observability Stack for Microservices Architecture Client Early-stage startup Challenge After migrating to a microservices architecture (15+ services), the team had no centralized monitoring in place. Issues were only discovered through user complaints — typically 30+ minutes after they occurred. A full observability stack was needed to detect and diagnose problems proactively. Solution 1. Monitoring Architecture Prometheus for metrics collection Grafana for visualization Loki for centralized log aggregation Jaeger for distributed tracing Alertmanager for notifications 2. Metrics Collection Automatic service discovery in Kubernetes Application-level custom metrics System metrics via node-exporter Database metrics via postgres-exporter and redis-exporter 3. Grafana Dashboards Per-service dashboards for each microservice Unified infrastructure overview dashboard SLA/SLO tracking metrics Business metrics (RPS, conversion rate) 4. Centralized Logging (Loki) Log aggregation across all services Full-text log search via Grafana Log-to-metric correlation 5. Distributed Tracing (Jaeger) HTTP request tracing across services Call chain visualization Bottleneck identification Per-service latency analysis 6. Alerting Alerts delivered to Slack / PagerDuty / custom webhooks Critical issue escalation On-call rotation support Automatic incident creation Technologies Prometheus Grafana Kubernetes Docker Helm Linux Results ✅ MTTD: reduced from 30 minutes to under 1 minute ✅ MTTR: recovery time reduced by 60% ✅ Alerts: proactive notifications before users are impacted ✅ Visibility: full observability across all services ✅ Capacity planning: data-driven resource forecasting

Read

Self-Hosted Cloud Storage with Nextcloud

Self-Hosted Corporate Cloud Client Mid-sized business with strict data privacy and data residency requirements Challenge The company relied on third-party cloud services to store and share work files, creating data leakage risks and dependency on external providers. They needed a self-hosted solution with in-browser document editing, deleted file recovery, revision history, and additional collaboration tools — calendar, notes, and email — all under their own control. Solution 1. Nextcloud AIO Deployment Nextcloud All-in-One — official Docker image with the full stack out of the box PostgreSQL for application data storage Redis for caching and background job queues Nginx as a reverse proxy with automatic SSL/TLS 2. In-Browser Document Editing Nextcloud Office (Collabora Online) — built-in office suite Support for .docx, .xlsx, .pptx and ODF formats Real-time collaborative editing No local software installation required 3. File Management Deleted files trash bin with configurable retention period File version history — roll back to any previous revision Granular access control: folders, share links, passwords Mobile and desktop sync clients 4. Collaboration Tools Calendar (CalDAV) — team scheduling and events Notes — personal and team notes with Markdown support Mail — built-in web client for corporate email (IMAP/SMTP) 5. Backup Borg Backup — incremental backup built into Nextcloud AIO Data deduplication and compression Scheduled automatic runs Remote storage for backups (S3-compatible / SFTP) Technologies Nextcloud Docker PostgreSQL Nginx Linux Results ✅ Data ownership: files stay on company servers, no third-party providers ✅ In-browser editing: office documents open and edit directly in the browser ✅ Safety net: version history and trash bin protect against accidental data loss ✅ Unified platform: single solution for files, calendar, notes, and email ✅ Automated backups: incremental backup via Borg Backup on a set schedule

Read

Self-Hosted Corporate Messenger (Matrix)

Self-Hosted Secure Messenger for Enterprise Communications Client Mid-size business with strict data privacy and security requirements Challenge The company required full control over its internal communications — no third-party servers, no data leakage risks. The solution had to support end-to-end encryption, voice and video calls, file sharing, and seamless integration with existing corporate infrastructure, all manageable by an internal team. Solution 1. Server Stack Matrix Synapse as the core messaging server PostgreSQL 16 for persistent data storage Caddy as reverse proxy with automatic SSL/TLS Docker Compose for service orchestration 2. Client Applications Element Web for browser access Element Desktop for Windows/macOS/Linux Element Mobile for iOS/Android Consistent interface across all platforms 3. Voice & Video Calls Coturn (TURN/STUN server) for NAT traversal Group video call support UDP ports 49160–49200 for media traffic Automatic configuration via environment variables 4. Administration Synapse Admin web UI for user and room management Usage statistics and monitoring Accessible on a dedicated port (8888) 5. Security End-to-end encrypted messages Automatic SSL/TLS certificates via Caddy Public registration disabled Optional federation with other Matrix servers Healthchecks on all services 6. Automation Single Bash script for full stack initialization Automatic Synapse config generation Automated admin user creation via expect Docker Compose with dependency ordering and healthchecks Technologies Docker PostgreSQL Caddy Bash Linux Element + Matrix + Synapse Results ✅ Data ownership: full control over messages and user data — no third-party servers ✅ Scale: 100+ concurrent users ✅ Features: text, voice, video, file sharing up to 1.5 GB, E2E encryption ✅ Speed: full deployment in 5 minutes with a single script ✅ Reliability: automatic SSL certificates, healthchecks, auto-restart

Read

Self-Hosted Project Management with Plane

Self-Hosted Project Management with Plane So Client A company seeking its own project management tool hosted on their office infrastructure Challenge The client wanted an open-source alternative to Jira/Linear for project and task management, deployed on their own server within an existing Coolify environment. Requirements included: installing the latest version of Plane CE, ensuring proper operation behind Traefik reverse proxy, extracting the database as a separate Coolify service for convenient archiving, and setting up regular backups for all data.

Read

Self-Hosted Remote Desktop with RustDesk

Self-Hosted Remote Desktop with RustDesk Client A company providing support and maintenance for the 1C platform Challenge The client needed a secure, self-hosted remote desktop solution to allow their support engineers to connect to client workstations and servers. They required full control over data, no reliance on third-party cloud services, and a solution that works reliably within corporate networks. Solution Deployed RustDesk OSS (open-source) server using Docker Compose Configured hbbs (ID/relay server) and hbbr (relay server) components Configured firewall rules and network access for secure connections Provided client configuration files for easy deployment across the support team Documented maintenance procedures and backup strategy Technologies RustDesk Docker Linux Bash Results ✅ Full data sovereignty — all connection metadata and relay traffic stays on client’s infrastructure ✅ Zero licensing costs — open-source RustDesk eliminates per-seat fees ✅ Reliable connectivity — engineers can access client machines from anywhere ✅ Simple client rollout — pre-configured client configs for quick team onboarding ✅ Corporate network friendly — works through NAT/firewalls with relay servers

Read