Haseeb ArshadHaseeb Arshad
← All projects
Hosting engineeringPilot + Production

Self-Hosted Web and Billing Platform

A multi-site hosting platform plus an isolated FOSSBilling pilot designed around strong tenant boundaries, repeatable upgrades, and evidence-driven operations.

CaddyKubernetesFOSSBillingPHPMariaDBGitHub Actions

3

production websites

3x

site replicas

Private

billing pilot

The challenge

What the system needed to solve

Migrate several websites away from shared hosting and explore a customer-facing hosting stack without letting a billing experiment weaken the production cluster.

The build

Engineering decisions

01

Moved three independently versioned websites to stateless, anti-affined Kubernetes deployments behind redundant Caddy ingress.

02

Created container build pipelines and automated immutable-digest promotion for each site.

03

Designed a private-only FOSSBilling pilot with a dedicated service boundary, trusted private certificates, upgrade controls, backups, and a threat model.

04

Added public endpoint probes, certificate monitoring, GitHub-hosted off-site checks, and operational dashboards.

Architecture

How the pieces connect

  1. 1Independent site repositories
  2. 2Container build and registry
  3. 3GitOps deployment
  4. 4Redundant web edge
  5. 5Isolated billing and provisioning plane

Results

What changed

  • Public websites no longer depend on a shared-hosting control panel.
  • Source, image, and running release are traceable for every site.
  • The billing platform remains deliberately private until its security and recovery gates justify broader exposure.