Currently available for new projects

Your IT department. Without the department.

I build, secure and automate IT infrastructure for small and medium businesses around Augsburg — from network segmentation and hardened Linux servers to fully automated provisioning with Ansible.

  • IT Security
  • Networking & Wi-Fi
  • Servers & Virtualisation
  • Linux, Windows & macOS
  • Backup & Disaster Recovery
  • Automation
  • Smart Home
  • Support & Maintenance

Services

Eight areas — in practice, most projects touch several of them at once.

IT Security

The focus of my master's degree. I find weaknesses and close them before someone else does.

  • Vulnerability assessment & penetration testing
  • System hardening and firewall configuration
  • IDS/IPS and SIEM analysis
  • PKI, certificates and 2FA rollout
  • Incident response

Networking & Segmentation

Properly separated networks instead of something that just grew — planned, built and documented.

  • VLAN designs for office, production, guests and IoT
  • UniFi, MikroTik, OPNsense/pfSense
  • WireGuard, OpenVPN and IPsec for remote work
  • Wi-Fi surveys and structured cabling
  • Rack builds and fibre

Servers: Linux, Windows & macOS

Linux is where I specialise — I look after Windows and macOS environments just as well. Operations, migration and monitoring, happy to act as a second pair of eyes on existing systems.

  • Debian, Ubuntu, RHEL/Rocky, Arch
  • Windows Server, Active Directory, group policy
  • macOS as a server: Mac mini/Studio, file services and Time Machine
  • Proxmox, VMware ESXi, Hyper-V, Docker, LXC
  • nginx, Apache, Caddy, reverse proxies and TLS
  • Mail servers, Samba, file servers and backups

Automation

Anything done twice by hand belongs in code — reproducible and reviewable.

  • Ansible roles, playbooks and inventories
  • Terraform and infrastructure as code
  • Tooling in Bash and Python
  • Automated backups and patch management
  • GitLab CI and GitHub Actions

Smart Home & IoT

Automation that runs locally and needs no cloud account — vendor independent.

  • Home Assistant, Homebridge, KNX, Loxone
  • Zigbee, zigbee2mqtt, Z-Wave, MQTT, ESPHome
  • Shelly components and Raspberry Pi setups
  • Cameras, access control and alerting
  • Heating, lighting and solar energy monitoring

Web & Cloud

Fast, accessible sites without tracking bloat — properly built rather than clicked together.

  • Web design and hand-built implementation
  • WordPress, TYPO3 and online shops
  • Hosting, domains, TLS and email setup
  • Nextcloud, Microsoft 365, Google Workspace
  • Hetzner, Azure and AWS

Hardware & Embedded

From the electrical engineering half of my degree: from circuit board to finished server.

  • Microcontrollers: Arduino, ESP32, STM32, Raspberry Pi
  • VHDL, FPGA design and digital logic
  • Prototyping, soldering, PCB design, measurement
  • On-site PC and server builds
  • Data recovery and procurement advice

Support & Maintenance

Ongoing operation rather than one-off projects — with a maintenance agreement if you want one.

  • Maintenance contracts and regular updates
  • Remote support and on-site visits
  • Server migration and IT relocations
  • Workstations, printers and peripherals
  • IT documentation and training

Technologies

What I work with day to day. Missing something? Just ask — much of it transfers.

Operating systems & virtualisation

  • Debian
  • Ubuntu
  • RHEL / Rocky
  • Arch
  • systemd
  • Windows Server
  • Windows 10 / 11
  • Active Directory
  • Group Policy
  • WSUS
  • macOS
  • Time Machine
  • Proxmox
  • VMware ESXi
  • Hyper-V
  • Docker
  • LXC
  • Kubernetes

Networking

  • UniFi
  • MikroTik
  • OPNsense
  • pfSense
  • VLAN
  • WireGuard
  • OpenVPN
  • IPsec
  • DNS / DHCP
  • Pi-hole
  • AdGuard
  • Fibre

Security

  • System hardening
  • nftables / iptables
  • IDS / IPS
  • Wazuh
  • PKI & certificates
  • LUKS
  • VeraCrypt
  • 2FA / MFA
  • Penetration testing
  • Security audits

Automation & code

  • Ansible
  • Terraform
  • Bash
  • PowerShell
  • Python
  • PHP
  • JavaScript
  • TypeScript
  • Go
  • C / C++
  • SQL
  • Git
  • GitLab CI
  • GitHub Actions
  • REST APIs

Monitoring & backup

  • Prometheus
  • Grafana
  • Zabbix
  • Checkmk
  • Restic
  • Borg
  • Veeam

Smart home & IoT

  • Home Assistant
  • Homebridge
  • KNX
  • Loxone
  • Zigbee
  • zigbee2mqtt
  • Z-Wave
  • MQTT
  • ESPHome
  • Shelly
  • Raspberry Pi

Hardware & embedded

  • Arduino
  • ESP32
  • STM32
  • VHDL
  • FPGA
  • Digital logic
  • PCB design
  • Measurement
  • Server hardware

Web & cloud

  • nginx
  • Apache
  • Caddy
  • WordPress
  • TYPO3
  • Nextcloud
  • Microsoft 365
  • Google Workspace
  • Hetzner
  • Azure
  • AWS

Projects

A selection of completed work.

Server administration

Migration to Proxmox with monitoring

Thanks Max, the migration went smoothly and the new environment is really easy to find your way around.
Proinovest GmbH
Show details

Replaced an ageing single server with a virtualised Proxmox environment. Services moved into separate VMs, backups automated, and monitoring set up with Prometheus and Grafana.

Outcome: Individual services can be maintained independently; outages are reported, not discovered.

  • Proxmox
  • Rocky Linux

Smart home

Local home automation without the cloud

It is really nice that everything runs locally and I do not have to create any cloud accounts. Controlling everything is much simpler now. Best of all, I can open the front door with my fingerprint without anyone else having my data.
Private client
Show details

Home Assistant as the central controller for lighting, heating and blinds, connected over Zigbee (zigbee2mqtt) and Shelly components. Cameras and access control moved into their own VLAN, separated from the rest of the network.

Outcome: Control keeps working without internet, and no device data leaves the house.

  • Home Assistant
  • zigbee2mqtt
  • Shelly
  • MQTT

Networking & hardware

Office move with a new server rack and network

With the business running, it was important that the move happened over the weekend. Thank you for being so flexible and preparing everything so well. We were able to get straight back to work on Monday.
Proinovest GmbH
Show details

Supported the move to a new site: rebuilt the server rack and set up the network from scratch — modular, so it can grow with the business.

Outcome: Tidy, extensible infrastructure instead of years of ad-hoc additions.

  • Server rack
  • Networking
  • Site move

Web & CMS

TYPO3 upgrade across five major versions

We tried it ourselves several times and always failed. Thank you, Max, for carrying out the upgrade so cleanly. The website is running flawlessly again.
A public authority in Hesse — the name cannot be disclosed for data protection reasons.
Show details

Brought a long-neglected TYPO3 installation up to date step by step, across five major releases — carried out together with a partner in a very short time.

Outcome: The website runs on a supported version again and receives security updates.

  • TYPO3
  • PHP
  • Upgrade

Server administration

Nextcloud upgrade from version 13 to 31

Thank you, Max. According to the official Nextcloud technician, upgrading from 13 to 31 in one go is not possible. You pulled it off, and our Nextcloud is running flawlessly again.
Under the GDPR the client cannot be named, as the Nextcloud instance is publicly accessible.
Show details

Nextcloud cannot jump straight from version 13 to 31 — every major version has to be passed through on its own. That is exactly how the instance was taken across all 18 major versions; data, database and the LDAP integration were carried over completely.

Outcome: A current Nextcloud with no data loss; users still sign in with their existing credentials.

  • Nextcloud
  • LDAP
  • Database
  • Upgrade

Automation

Automated certificate distribution

From now on I no longer have to arrange for the certificates to be installed. That saves us time and money, as we always had to hire an external service provider. Thank you, Max!
WKS Systemtechnik GmbH
Show details

The certificates expire every three months and had to be renewed and distributed to the systems each time. Both now happen automatically.

Outcome: No more manual work every three months, no risk from a forgotten renewal.

  • TLS certificates
  • Automation

Wi-Fi & networking

UniFi Wi-Fi for a restaurant and terrace

Thank you, Max — the Wi-Fi now works everywhere in the restaurant and on the terrace. Our guests love that they can connect without any trouble.
El Greco
Show details

Equipped a restaurant's dining room and terrace with UniFi components so the Wi-Fi is reliably available everywhere.

Outcome: Stable Wi-Fi coverage out to the terrace — orders and payments are now taken right at the table.

  • UniFi
  • Wi-Fi

Smart home

Smart home for a house of over 400 m²

Thanks Max, I never thought I would be able to control the heating, lighting and blinds while I am out. Everything is much more comfortable now and I am saving energy.
Private client
Show details

Planned and set up home automation for a house of more than 400 m².

Outcome: The whole house can be controlled centrally.

  • Home automation

And much more

Your project could be here

This is just a selection — there are many more projects. Got a plan or a problem that needs solving? Tell me about it.

Start a project

Reviews

What clients write on Google.

5.0 out of 5 stars from one review on Google

So far there are only star ratings without a written review. As soon as someone adds a few lines, they will appear here.

Reviews from Google · Last updated: 18 Oct 2026

All reviews on Google Write a review on Google

Reviews are fetched to this server once a day and served from here. Your browser never connects to Google.

About me

Photo of Max Mazanec

I'm Max Mazanec, a freelance IT consultant based in Augsburg, Germany. I started freelancing while still studying, and never stopped.

I studied computer science and electrical engineering at Augsburg Technical University of Applied Sciences, specialising in IT security for my master's. That combination is why I'm equally comfortable writing an Ansible playbook and wiring up a server rack.

University also left me with a network of specialists. Which means: if something falls outside my field, I say so and pass you on — and if you prefer, I handle the communication so you still only deal with one person.

Security isn't only needed in hardware — it's needed everywhere.

Education

  • 2019 – 2021 Master of Science — Computer Science and Electrical Engineering Augsburg Technical University of Applied Sciences Focus on IT security · software development, team collaboration
  • 2016 – 2019 Bachelor of Engineering — Computer Science and Electrical Engineering Augsburg Technical University of Applied Sciences Focus on computer engineering

Let's talk.

A short description is enough — I usually reply the same working day.

Save contact

By submitting you consent to your details being processed to handle your enquiry. See the privacy policy for details.