maborak.com~/servicessoftware & infrastructure engineering

Infrastructure &
Reliability Engineering.

Infrastructure reviews, platform migrations, production operations, security testing and email delivery. Choose a service to see the work and deliverables.

Assessment of infrastructure configuration, backup and recovery procedures, and observability. Findings are documented with prioritized remediation recommendations.

  • Inventory of servers, services and scheduled jobs
  • Configuration, backups and restore paths
  • Monitoring and alerting coverage
  • Prioritized assessment report

Legacy servers and applications moved onto containers, Kubernetes, AWS or Google Cloud, or rebuilt on-premise hardware. Migration scope includes cutover planning and rollback procedures.

  • Containers and Kubernetes (GKE, EKS)
  • AWS, Google Cloud, or on-premise rebuilt on Proxmox VE
  • Server consolidation
  • Delivery from Git with Argo CD
  • Rollback procedures for each migration stage

Production reliability engineering covering service objectives, observability, incident response and operational automation. Responsibilities and coverage are defined for each engagement.

  • On-call and incident command
  • Root cause analysis and postmortems
  • SLIs, SLOs and error budgets
  • Monitoring and alerting
  • Incident automation and event correlation

Network and web application penetration testing by OSCP+ certified engineers. Engagements include risk-ranked findings, remediation guidance and agreed retesting.

  • Penetration testing by OSCP+ certified engineers
  • Network and web application attacks
  • Vulnerability assessment
  • Report ranked by risk, with proof of each finding
  • Linux hardening
  • Intrusion clean-up
  • Compliance audits

Engineering for email delivery platforms: PowerMTA, mail server clusters, sender authentication, reputation monitoring and platform integrations. Maborak also develops and supports Interspire Email Marketer addons.

  • PowerMTA and mail server clusters
  • SPF, DKIM and DMARC
  • IP reputation, feedback loops and blacklist monitoring
  • Deliverability diagnosis and fixes
  • Custom development: PHP, MySQL, Python, REST APIs
  • Interspire Email Marketer addons, sold and supported

Engineering capabilities

Engineering capabilities, backed by working code

Our public tools and infrastructure projects show how we approach networking, development environments, database recovery, monitoring and security assessments. Each repository includes implementation details and documentation.

Networking & developer access

Mabo Tunnel ↗

Self-hosted HTTP and TCP tunnels with a Go client and server. Teams run the public endpoint on their own domain and forward traffic to local or remote services.

  • Multiplexed connections, streaming responses and WebSocket passthrough
  • Request inspection and replay, named tunnels and custom domains
  • TLS provisioning, per-tunnel access controls and Prometheus metrics

Go · WebSockets · HTTP/TCP · TLS

Self-hosted networking tool

Read the repository and documentation ↗

Developer tooling

mabo-ctl ↗

A per-repository process supervisor for local development stacks. One declarative configuration defines service commands, runtimes, environments, ports and readiness checks.

  • Dependency-aware startup, process-group shutdown and service logs
  • HTTP, TCP and execution probes with explicit service states
  • Terminal and web consoles, diagnostics and machine-readable status

Go · YAML · Process supervision · Health checks

Local development · macOS and Linux

Read the repository and documentation ↗

Database reliability & recovery

Patroni HA Dockerized ↗

A PostgreSQL high-availability lab and operations toolbox on Docker Compose. It combines Patroni, a three-node etcd quorum, HAProxy routing and PgBouncer connection pools.

  • Leader election, replication, failover and read/write routing
  • WAL archiving, backup retention and point-in-time recovery workflows
  • Setup and recovery wizards, pgBadger analytics and cross-cluster DR switchover tooling

PostgreSQL · Patroni · etcd · HAProxy · PgBouncer

Single-host stack · recovery and failover exercises

Read the repository and documentation ↗

Monitoring infrastructure

Zabbix Docker Compose ↗

A containerized monitoring deployment combining Zabbix Server and its web interface with MariaDB persistence, Traefik routing and certificate automation.

  • Configuration for Zabbix 6.x and 7.x deployments
  • Environment-based service, domain and version configuration
  • Documented startup, maintenance, logs and troubleshooting procedures

Zabbix · MariaDB · Traefik · Docker Compose

Monitoring deployment configuration

Read the repository and documentation ↗

Security assessment workflows

Maborak LLM Skills ↗

Reusable engineering prompts and command templates. The current catalog provides an application-security assessment workflow and the mabo-pentest command wrapper.

  • Project-scoped discovery and a target-specific assessment plan
  • Approval stages, local validation and separate remediation decisions
  • Chronological test reports, evidence references and an append-only execution trace

Markdown · Command templates · Assessment reporting

Assessment workflow templates

Read the repository and documentation ↗

What needs to change?

Tell us what you run today, the problem you need to solve and your timeline.

Contact engineering

Technologies we work with

  • Argo CD
  • Kubernetes
  • Docker
  • Podman
  • Ansible
  • Jenkins
  • Chef
  • Proxmox VE
  • Google Cloud
  • Linux
  • Red Hat
  • CentOS
  • NGINX
  • Apache
  • Traefik
  • Prometheus
  • Grafana
  • PostgreSQL
  • MySQL
  • MariaDB
  • Redis
  • etcd
  • Qdrant
  • Elasticsearch
  • Logstash
  • Kibana
  • PagerDuty
  • Go
  • Python
  • FastAPI
  • PHP
  • TypeScript
  • React