Interesting to see how this compares to how we run things for EsperNet. - We don't use much cloud technology at present. That means we run our own DNS nameserv

Interesting to see how this compares to how we run things for EsperNet. - We don't use much cloud technology at present. That means we run our own DNS nameservers (using PowerDNS and a single MySQL node - AXFR and slave nameservers give us redundancy [1]). We implement Let's Encrypt renewals on top of this using the DNS challenge and have some custom software to securely push certificates to the IRC servers. This keeps costs down. - We've replaced our old Iris webchat with The Lounge in public mode, which is fully containerised. - We have some additional infrastructure for staff: our LDAP directory, an IdP which runs on top and provides SAML & OIDC auth, Git for code and some internal web services for pooling/depooling servers and monitoring. - Some of the staff have written services and IRCd modules to help control spam and support connection limit exemptions (for e.g. bouncers). [1] This allowed us to continue operating with no user-visible impact when we had a hardware failure on the primary DNS box.