I’m Adrian Jon Kriel. 28+ years building, hardening, and operating real infrastructure — Proxmox/ZFS fleets, cloud-exit, DNS/email, automation, on-prem AI — and single-handedly architecting and shipping production, multi-tenant SaaS in Go and TypeScript. AI-augmented, and disciplined about where it helps — which is how one person owns this much surface area end-to-end. And I’ve led from the front — Head of Infrastructure, CTO, and founder — owning roadmap, vendor and cost/risk decisions, and teams up to 35.
Not just advice. I architect, build, and operate full products — original, sole-authored, production-grade. Several are private; live demos and code walkthroughs on request.
Multi-tenant SaaS control plane to manage DNS across providers, safely (preview/diff/approve, rollback).
Multi-tenant payroll platform with a correct, to-the-cent statutory tax engine.
Operator-grade monitoring/alerting layer on top of Frigate NVR — kiosk wall, incident pipeline.
One CLI/TUI that detects and reconciles bans across 19 firewall/IDS/WAF backends via each tool’s native API.
.deb/.rpm via GoReleaser CIFleet automation for a VoIP carrier: bare-metal → clustered, multi-datacenter and on-prem.
One mail front-end for an entire hosting fleet: SMTP/IMAP/POP3 terminated centrally and routed per-domain to the correct backend mailbox server.
auth_http handler1,841★ across 54 original repos; running on real fleets and mail servers.
Beyond the flagship products — open-source tools used in production, infrastructure toolkits, and selected builds. All sole-authored.
Proxmox VE post-install optimisation & helper toolkit — one of the most-used in its niche.
ClamAV third-party signature updater running on mail servers worldwide; documented via Linux man pages.
One CLI/TUI that reconciles IP bans across 19 firewall/IDS/WAF backends via each tool's native API.
Opinionated, tested Debian/Proxmox hardening baseline: self-healing kernel-panic auto-reboot, BBR/sysctl tuning, surgical SSH allow-lists.
Proxmox VE/PBS operator toolkit: unattended bare-metal install, ZFS disk-replace, declarative firewall/pool reconcilers, backup verification.
Controller-safe time-sliced ZFS scrub scheduler, RAM-aware ARC autotuner, and auto-snapshot / purge for production fleets.
DNS-as-Code for ~230 production domains; zero-touch GitOps deploy across Cloudflare/DO/BIND; SPF flattening, DMARC reject, CAA, DKIM.
Concurrency-driven CI scheduler/runner (context lifecycle, sync.Cond) — the CI behind the Go projects.
4-zone irrigation controller: calibrated soil-moisture & flow sensing, seasonal scheduling, leak detection, flood protection.
The senior technical decision-maker — I own the call, not just the keyboard.
HA design, multi-site patterns, storage tuning, performance and capacity planning.
Kernel, I/O, network, and application tuning with measurable outcomes.
Web, proxy, DB, and platform improvements that cut cost, reduce risk, and raise uptime.
Turn “slow and fragile” into “fast and boring” with safe tuning, observability, and HA patterns.
Move away from the cloud safely — and run a custom SaaS platform with predictable cost and performance.
Authoritative + recursive DNS, fleet mail routing, deliverability, anti-spam, and continuity.
Build once, run forever: provisioning, hardening, lifecycle ops, runbooks.
When the solution needs hardware: ESP32/Arduino projects and custom automation workflows.
When it’s down, I get it back up — and make sure it stays up.
Build AI that actually works in production: on-prem or private cloud, with guardrails, audit trails, and zero “mystery box” dependencies. Ideal for US/EU teams that care about data residency, cost, and reliability.
Run modern LLM capabilities where your data lives — not the other way around.
Automation that executes, documents, and escalates — with human approval where needed.
Turn internal docs into an answer engine (without leaking private data).
The production stack I actually build and run with — from the bare metal up to multi-tenant SaaS.
I specialize in the infrastructure behind stores that must stay online: performance tuning, scaling, hardening, migrations, and “it’s broken right now” recovery.
Speed, stability, and security for WooCommerce at scale.
Production operations that keep checkout fast and predictable.
Pragmatic ops and performance improvements for real-world stores.
If you want to see how I think, the repos and runbooks are public.
Sanitized examples of Proxmox VE / Proxmox Backup Server dashboards from real deployments (50+ clusters). Click any screenshot to enlarge.
Tip: export as PNG/WebP and blur/redact hostnames, IPs, and client names.
This is a sanitized, multi-year timeline generated from private repositories, filtered for Proxmox, clusters, deployments, storage, databases, and related infra work.
Transparent ranges so we don’t waste each other’s time — final scope and a fixed quote follow a short call. Most clients start with an audit or a build sprint, then move to a retainer. Remote; US / EU / UK friendly; invoiced B2B via eXtremeSHOK or through an EOR.
from $5,000 · fixed · 3–5 days
from $1,800 / day · ~$225/hr
from $2,000 / day · ~$250/hr
from $5,000 / mo
$450 / hr · 4-hr min · 24/7
Let’s talk · equity-inclusive
Rates in USD; invoiced in GBP / EUR / USD. Day rate assumes remote, ~8 hours. Packages and longer engagements are discounted.
Quick intake, define the problem, align on outcomes, and get access safely.
Baseline, risks, bottlenecks, and “what breaks next” — documented and prioritized.
Hands-on fixes, automation, hardening, and monitoring. Changes are reversible and tracked.
Runbooks, diagrams, and clear next steps so your team isn’t dependent on me.
On-call, ongoing improvements, and “keep it boring” operations.
Email me and I’ll reply with available slots and next steps.
Email: admin@extremeshok.com
Send: a 2–3 sentence problem statement, your stack, urgency, and what “done” looks like.
$ printf "Need help: %s\n" "your problem here" | mail admin@extremeshok.comBoth. A short audit can produce a high-ROI plan, and we can then execute the top items.
Yes. I prefer least-privilege access, audit trails, and explicit scopes. You’ll get documentation, not mystery.
Neither. I build the right mix: on-prem, colocated, cloud, hybrid — whatever makes sense for cost, latency, and risk.
Yes. Retainers are ideal when you want stability, predictable improvements, and fast incident response.
No trackers. No ad pixels. No “growth hacks”. If you contact me, I only use your details to reply and deliver the work.
Privacy questions or deletion requests: admin@extremeshok.com.