Project Overview
We developed a scalable hosting platform as a team. The goal was to create a robust environment capable of hosting PHP, Laravel and static websites within containers. Because we operated from our own dedicated server rack in a datacenter, we had complete control over the entire infrastructure. Strict network isolation and security were central requirements to ensure all hosted applications remained fully protected.
My Role
I focused on securing the platform by protecting the login process and the backend infrastructure, using pentesting to identify and resolve vulnerabilities.
The Realisation
We built the core infrastructure using RKE2 Kubernetes. Every deployed website operates in its own separate namespace, providing strict network isolation. For data persistence, we utilized Longhorn distributed block storage, complemented by an NFS share on a dedicated virtual machine for secure backups.
Figure 1: High level architecture of the hosting platform
All traffic is filtered through an OPNsense firewall. To keep track of the system health, we set up Grafana for real time monitoring. Finally, we integrated a client dashboard where users can view logs and trigger seamless automated deployments via GitHub Actions.
What I Learned
Through this project, I gained practical experience in configuring OPNsense firewalls and establishing secure connectivity to our hardware in the datacenter. I also significantly improved my pentesting skills by continuously testing the infrastructure for vulnerabilities and implementing security mitigations.