Hybrid Infrastructure.

Put each workload where it makes sense: the public cloud where reliability and trust matter most, your own hardware where steady, heavy workloads would get expensive.

Azure

  • App Service on Linux for the web tier
  • Azure SQL with Entra ID sign-in
  • Key Vault for secrets
  • Azure DNS
  • Pipeline identities without stored credentials

On-premises

  • Hyper-V virtualization
  • Ubuntu LTS on every server
  • SQL Server
  • RabbitMQ message broker
  • Load balancing in front of the services

Network & security

  • Next-generation firewalls at the edge
  • TLS everywhere, with automatic certificate renewal
  • DNS managed as code
  • Least-privilege, role-based access

Automation

  • Terraform with shared, central state
  • Ansible for server configuration
  • Azure DevOps pipelines with self-hosted agents
  • Architecture decision records (ADRs)

Nothing in production is changed by hand. A change starts as a pull request, a pipeline applies it, and the reasoning behind any significant choice is written down as a decision record.