Case study · DevOps & Hosting

Five business websites. One server. Zero open ports.

How the MM Group of Companies — hotel, commercial building, restobar, and corporation — ended up on a single hardened server I host and monitor, instead of five scattered hosting bills nobody watched.

The problem

Five business websites means five things that can go down, five renewals to forget, and five logins nobody remembers. The group needed every site fast, always online, and looked after by one accountable person — not a ticket queue.

What I did

Audited everything — every domain, registrar login, DNS record, and expiry date in one inventory. You can't host what you haven't mapped.
Consolidated onto one server — a single VPS running Nginx virtual hosts, one per site, serving static files in milliseconds.
Connected one Cloudflare Tunnel — an outbound-only connection, so the firewall stays shut. No port forwarding, no exposed origin IP.
Locked down TLS end to end — wildcard origin certificate, Full Strict encryption, WAF and rate limiting at the Cloudflare edge, scoped per site.
Made it self-watching — health checks that restart the tunnel on silent drops, auto security patching, log rotation, and private admin access with automated snapshots.

The architecture

Visitor → Cloudflare edge (DNS + SSL + WAF)
        → Cloudflare Tunnel (outbound only, no open ports)
        → Nginx (routes each domain)
        → site files / apps

Verified results

5 / 5 sites live — check for yourself:

Every site on my Live Sites list carries a badge that pings its real URL from your browser and shows the round-trip time — proof, not promises. Adding site number six is now a five-minute routine: one folder, one Nginx block, one tunnel route.