https://blog.gntech.me/tags/gntech-infrastructure/ Recent content in Gntech-Infrastructure on GnTech Blog Hugo en-us Thu, 05 Nov 2026 18:00:00 -0400 https://blog.gntech.me/posts/2026-11-05-gntech-infrastructure-part-12-security-operations/ Thu, 05 Nov 2026 18:00:00 -0400 https://blog.gntech.me/posts/2026-11-05-gntech-infrastructure-part-12-security-operations/ Turn the hybrid infrastructure series into a repeatable acceptance review with allowed and denied paths, recovery evidence, change gates, and an operations handoff. https://blog.gntech.me/posts/2026-11-05-gntech-infrastructure-part-11-monitoring/ Thu, 05 Nov 2026 06:00:00 -0400 https://blog.gntech.me/posts/2026-11-05-gntech-infrastructure-part-11-monitoring/ Build a small Prometheus monitoring lab that distinguishes old backup evidence, missing metrics, and a failed scrape. https://blog.gntech.me/posts/2026-11-04-gntech-infrastructure-part-10-backup-disaster-recovery/ Wed, 04 Nov 2026 18:00:00 -0400 https://blog.gntech.me/posts/2026-11-04-gntech-infrastructure-part-10-backup-disaster-recovery/ Rehearse losing the primary site. Pull a VM backup to a second Proxmox Backup Server, restore it on an independent host, and measure what you can recover. https://blog.gntech.me/posts/2026-11-04-gntech-infrastructure-part-09-docker-traefik/ Wed, 04 Nov 2026 06:00:00 -0400 https://blog.gntech.me/posts/2026-11-04-gntech-infrastructure-part-09-docker-traefik/ Build a private HTTPS ingress on a Proxmox guest using Traefik's file provider, then verify that application data survives a container replacement. https://blog.gntech.me/posts/2026-11-03-gntech-infrastructure-part-08-cloudflare-zero-trust/ Tue, 03 Nov 2026 00:00:00 +0000 https://blog.gntech.me/posts/2026-11-03-gntech-infrastructure-part-08-cloudflare-zero-trust/ Protect a private admin web application with Cloudflare Tunnel, scoped Access policies, verified origin TLS, and an independent recovery path. https://blog.gntech.me/posts/2026-11-01-gntech-infrastructure-part-04-proxmox-firewall-isolation/ Sun, 01 Nov 2026 22:00:00 -0400 https://blog.gntech.me/posts/2026-11-01-gntech-infrastructure-part-04-proxmox-firewall-isolation/ Build and verify a scoped nftables forwarding policy for a Hetzner Proxmox host with two MikroTik CHR transit networks and a private VM LAN. https://blog.gntech.me/posts/2026-11-01-gntech-infrastructure-part-02-hetzner-proxmox/ Sun, 01 Nov 2026 21:30:00 -0400 https://blog.gntech.me/posts/2026-11-01-gntech-infrastructure-part-02-hetzner-proxmox/ Plan and validate a dedicated Hetzner Proxmox VE host with ZFS, a safe WAN configuration, rescue access, and isolated network bridges. https://blog.gntech.me/posts/2026-11-02-gntech-infrastructure-part-05-home-to-hetzner-connectivity/ Mon, 02 Nov 2026 00:00:00 +0000 https://blog.gntech.me/posts/2026-11-02-gntech-infrastructure-part-05-home-to-hetzner-connectivity/ Connect selected home and Hetzner networks with RouterOS WireGuard, explicit routes, narrow firewall policy, validation, and rollback. https://blog.gntech.me/posts/2026-11-02-gntech-infrastructure-part-06-active-directory-dns/ Mon, 02 Nov 2026 00:00:00 +0000 https://blog.gntech.me/posts/2026-11-02-gntech-infrastructure-part-06-active-directory-dns/ Plan a Windows Server 2025 Active Directory forest, install DNS, add a second domain controller, and validate name resolution and replication safely. https://blog.gntech.me/posts/2026-11-02-gntech-infrastructure-part-07-hybrid-identity-entra-id/ Mon, 02 Nov 2026 00:00:00 +0000 https://blog.gntech.me/posts/2026-11-02-gntech-infrastructure-part-07-hybrid-identity-entra-id/ Choose an Active Directory sync path, scope a safe pilot, validate cloud sign-in, and layer SSO and MFA without weakening recovery. https://blog.gntech.me/posts/2026-11-01-gntech-infrastructure-part-01-architecture/ Sun, 01 Nov 2026 19:30:00 -0400 https://blog.gntech.me/posts/2026-11-01-gntech-infrastructure-part-01-architecture/ Plan a reproducible home-and-Hetzner Proxmox architecture with routed MikroTik networks, identity, management, backups, and observability. https://blog.gntech.me/posts/2026-11-01-hetzner-proxmox-dual-mikrotik-chr/ Sun, 01 Nov 2026 15:00:00 -0400 https://blog.gntech.me/posts/2026-11-01-hetzner-proxmox-dual-mikrotik-chr/ Build a routed Hetzner Proxmox topology with two isolated MikroTik CHR guests, a private VM LAN, source NAT, and safe validation.