Our Clients
End-to-end projects — PACS servers for medical imaging, an outsourced IT department, website and email migrations, resilient retail infrastructure
DevOps
Non-profit Organization
Launch of vgrf.shop and two Cyrillic IDN mirrors complementing the main vgrf.ru site
- •Launched vgrf.shop — React + Vite front-end forked from main site with Gitea Actions autodeploy
- •Connected two Cyrillic IDN domains (вгрф.рф, вооружённый-гражданин.рф) with 301 redirects
- •DNS zones on our own Technitium: A/AAAA, CAA, MX, SPF, DMARC, MTA-STS, TLS-RPT
- •DNSSEC NSEC3 ECDSA-P256 with DS publication at the registrar
- •Let's Encrypt certificates via DNS-01 (IDN domains by punycode names)
- •Email domain in Exim: no-reply mailbox, info@* aliases, DKIM signing RSA + Ed25519
- •Restored SEO prerender (Puppeteer) across all vgrf-family sites
- •Moved the whole site family (5 domains) to a new hosting platform with zero downtime: HTTP/3, brotli compression, CI deploys and monitoring
ChatOps
Corporate Communications
Deployed Rocket.Chat corporate messenger from scratch
- •Rocket.Chat on Docker — full installation and setup
- •MongoDB 8.0 replica set — reliable data storage
- •Nginx reverse proxy with WebSocket support
- •Let's Encrypt SSL certificate with auto-renewal
- •Data restoration from backup
- •Zabbix monitoring — 22/24 metrics under control
- •UFW firewall — access restricted to allowed IPs
- •Lead intake from the project website into a private specialists' channel
- •On-site chat widget: visitors write on the website, specialists reply from Rocket.Chat
- •Conversations can be resumed later from any device
- •Email notification on new replies; conversations auto-deleted 30 days after the last message
- •Support for rockgame.ru on our infrastructure
- •1C-Bitrix CMS — configuration and support
- •Percona MySQL 8.0 — dedicated database for the site
- •Nginx with optimized Bitrix configuration
- •Let's Encrypt SSL certificate with auto-renewal
- •LVM — online disk expansion without downtime
- •IPv6 dual-stack configuration
Infrastructure
Healthcare
PACS server deployment with DICOM integration, 20TB of imaging storage, and vSphere virtualization for a medical clinic
- •Deployed a PACS server for DICOM-compliant archiving of CT, MRI, and X-ray studies
- •Integrated the PACS archive with Toshiba CT and Siemens MRI scanners over the DICOM protocol
- •Designed and provisioned 20TB of storage for imaging studies, with a backup scheme on top
- •Connected the clinic's three office locations over a MikroTik VPN
- •Virtualized 1C:Medicine on a dedicated VM on VMware vSphere
- •MikoPBX IP telephony — 30 internal extensions
- •Wi-Fi monitoring in Zabbix: UniFi controller and 6 access points
- •Active Directory and Group Policy audit with documentation; firewall cleanup — 9 obsolete rules removed
Outsourcing
Chemical Industry
Replaced a three-person in-house IT department with full outsourcing — from first-line support to DevOps
- •Replaced 3 in-house IT specialists with a fully outsourced team
- •First-line support for 71 workstations — PCs, printers, software
- •Active Directory: migration from local accounts to a domain, audit of 47 Group Policies
- •3-host VMware vSphere cluster with HA and DRS for critical systems
- •Veeam Backup with cloud replication for disaster recovery
- •Zabbix monitoring: servers, 43 IP cameras on 5 managed switches, Wi-Fi controller with 16 access points
- •Dr.Web endpoint protection on 26 workstations with virus-database freshness checks
- •Lab PC boot time cut from 16 minutes to seconds — Group Policy processing in 1 s instead of 980 s
Migration
Education
Moved 7 academy websites off Tilda, the main MODX site and email for 8 domains onto the client's own server
- •7 subdomain sites exported via the Tilda API and moved to the client's server: nginx, Let's Encrypt, HTTPS + HSTS
- •Main site upgraded during the move: MODX Revolution 2.8.1 → 2.8.9, PHP 7 → 8.3, Percona Server 8.4
- •Staging check before cutover: 103 of 103 sitemap URLs matched production
- •Lead forms on 7 sites moved to an in-house handler, replacing paid Tilda integrations
- •Email for 8 domains on the client's server: per-domain DKIM, DMARC, MTA-STS, anti-spam and anti-virus, daily backups
- •DNS on our cluster with DNSSEC
- •Server hardening: key-only access, file integrity monitoring and an audit trail of admin actions
- •The academy founder's personal site razygraev.com: moved off Tilda, DNS on our cluster with DNSSEC, domain email on the client's own server, Telegram channel feed without Tilda services
- •SEO preserved: canonical, Open Graph and JSON-LD on 96 pages, sitemap, llms.txt; consent-gated analytics
Infrastructure
Retail
Rebuilt SQL Server backups and gave stores automatic failover to a backup link for a battery retail chain
- •Head office and 3 stores joined into a single network supported by one team
- •SQL Server backups rebuilt: every production database in the daily backup, compressed and verified — 11 GB instead of 45 GB, about 4 minutes
- •Zabbix monitoring of 1C and SQL Server services and of backup freshness for each database
- •Automatic failover for stores: if the office's main ISP goes down, store links switch to a backup tunnel in about 2 seconds
- •Failover verified on a real ISP outage
Ready to Transform Your IT Infrastructure?
Get a free consultation and IT assessment
Response within 30 minutes