Open Source Infrastructure Deployment

I’m ready to replace every paid SaaS we use with a fully self-hosted, open-source stack and I need an experienced engineer to guide and execute the transition from start to finish.

The core of the project will run on Linux, though I’m happy to follow your advice if another OS layer adds stability or performance. The mandatory components include: Samba in AD mode providing file sharing, print and authentication services; a hardened Hypervisor for our VDI estate (I’m still weighing KVM, Xen or VirtualBox and welcome your input); FleetDM for device visibility across our Windows and macOS endpoints; and KeePassXC rolled out per user with tailored permissions.

Beyond installation I’ll need:

• Migration out of Dropbox to the new Samba file server, setting precise share and ACL rules so every team member lands with just the access they need.
• Shell/Bash scripts that disable password saving in all major browsers company-wide.
• Group Policy–style management (or equivalent for macOS) to standardise settings, automate onboarding and keep the domains clean.
• Network-level hardening: firewall rules, fail2ban/-equivalent, DDoS safeguards, plus any additional open-source tooling you recommend.
• Clear documentation and short hand-over sessions so my internal IT can maintain everything once you’re done.

Everything used must be genuinely open source—no freemium tiers or locked features.

If you have deep experience knitting these tools together securely and can work collaboratively while documenting as you go, let’s talk details and milestones.