We ran OPNsense as a VM on network-defined storage and watched a single switch fault cascade into a cluster-wide outage. Two lessons we will not relearn: put your firewall on bare metal, and if you must virtualize it, keep the disk local.
CloudWatch gives you metrics. It does not give you actionable dashboards, historical trends, or alerts. We built a four-container open source stack that turns raw AWS data into full observability — no agents on app servers, no licensing costs, auto-discovery via AWS tags.
We picked SigNoz for its OpenTelemetry-native approach. A few months in, we moved to Prometheus, Loki, Alertmanager, and Grafana, with Grafana Alloy as the single collection agent. Here is the honest breakdown.
We ran our Tailscale subnet router as an LXC container on the same Proxmox host it was providing remote access to. It worked. Until Proxmox needed attention. Here is how we fixed it.
Why private cloud matters for Canadian businesses, how CloudStack provides enterprise IaaS capabilities, and the key architectural decisions for deploying production-ready private cloud infrastructure.
Our sandbox cluster ran 8 EC2 instances 24/7 costing $260/month. Most were idle overnight. By separating platform services from time-based workloads and recognizing CI/CD managers as 24/7 services, we consolidated to 3 nodes saving $160/month while improving reliability.