Jelia.nyc

IT strategy & consulting · New York

Someone who has actually run the thing you are trying to fix.

Independent infrastructure and systems consulting. I audit what you are running, tell you plainly what is wrong with it, and then do the work — identity, migrations, mail, hosting, and AI that earns its keep.

Jelia.nyc

What I do

Five things, done properly

Priced by outcome, not by the hour. Every engagement starts with an audit, because advice given without looking at the estate is just opinion.

01 · Audit

Infrastructure & security audit

What you run, what it costs, what is exposed, and what breaks when the person who built it leaves. Delivered as a prioritised list with severity and effort against every finding — not a slide deck.

02 · Identity

Single sign-on across the estate

One login for everything, including the tools that were never designed for it. OIDC, SAML and LDAP, with an auth proxy in front of the apps that cannot speak either.

03 · Migration

Off the legacy platform

Windows Server, IIS and .NET estates moved to something currently supported, with a tested rollback and a runbook a colleague can follow at 2am.

04 · Sovereignty

Own your stack

Mail, files, analytics, chat and monitoring on infrastructure you control, with working SPF, DKIM and DMARC. Fewer subscriptions, no vendor reading your data.

05 · AI

AI that earns its keep

Where a model genuinely removes work — and, just as usefully, where it does not. Private endpoints, real integration into your systems, costs you can predict.

Proof

I run all of this for myself first

Nothing here is theory from a certification. Every service above is running in production on infrastructure I own, maintain and get woken up by.

39Domains under management
62Hosts behind one edge
215Mailboxes, self-hosted
99.999%Measured uptime
  • Self-hosted mail with SPF, DKIM and DMARC that actually pass
  • Single sign-on across dozens of applications, including ones with no native OIDC
  • Nightly backups, monitoring and alerting that reaches a human
  • 20+ years in enterprise infrastructure. United States Marine Corps, 1986–1990.

The stack

The tools I actually run

Not a list of things I have read about. Every application below is in production on infrastructure I own and maintain — one identity across all of it, one edge in front of it. They are live; open any of them.

AuthentikIdentity provider & SSO One login for every service on this page. Speaks OIDC, SAML and LDAP, with an authenticating proxy in front of the applications that speak none of them. auth.jelia.nyc NextcloudPrivate cloud & file sync Files, calendars and contacts synced across devices — the self-hosted answer to Dropbox and Google Workspace, with no vendor reading the contents. cloud.jelia.nyc RoundcubeEnterprise mail system Webmail over a self-hosted Postfix and Dovecot server: 215 mailboxes across 39 domains, with SPF, DKIM and DMARC that actually pass. webmail.jelia.nyc MailmanMailing list manager Announcement and discussion lists with public archives, self-service subscription and per-list moderation — running on the same mail server, not a third party. list.jelia.nyc Jitsi MeetVideo conferencing Browser-based meetings with no account, no app and no third party in the middle. Media goes peer-to-peer where it can and through our own relay when it cannot. video.jelia.nyc The LoungePersistent team chat Always-on IRC that keeps reading history while you are disconnected and is reachable from any browser — a team channel that does not depend on a SaaS. irc.jelia.nyc WordPressPublishing platform The newsroom for the estate: editorial workflow, scheduled posts and a REST API that feeds headlines to the other sites. news.jelia.nyc Uptime KumaMonitoring & alerting Every host, certificate and service probed continuously, with alerts that reach a human before a customer is the one who notices. uptime.jelia.nyc UmamiPrivacy-first analytics Traffic, referrers and page performance without cookies, fingerprinting, or handing visitor behaviour to an advertising network. umami.jelia.nyc

AI tooling

What I build with

Claude Code does the day-to-day engineering here, wired into the estate through the Anthropic API with per-job cost accounting. Copilot and GPT earn their place where they fit the job better — the point is choosing deliberately, not betting the estate on one vendor.

Claude CodePrimary engineering assistant Does the day-to-day build and operations work across this estate, wired in through the Anthropic API with per-job cost accounting.
Anthropic APIModel access in production The Claude models behind the Ask Claude widget deployed across 25 sites, and the scheduled agents that keep content current.
GitHub CopilotAlternative — in-editor Line-by-line completion, for the work that is typing rather than reasoning about a whole system.
OpenAI GPTAlternative — kept deliberately Held in the mix on purpose, so that no single vendor holds the estate and each job goes to whichever model suits it.

Product names and logos identify the tools in use. No affiliation, partnership or endorsement is implied.

How it works

Three steps, no surprises

Step one

A conversation

Thirty minutes. You describe what hurts. If I am not the right person, I will tell you that and point you at who is.

Step two

The audit

A fixed-price look at the estate, ending in a written, prioritised findings list you own outright — whether or not you hire me to fix any of it.

Step three

The work

Scoped from the findings, priced per outcome, with a definition of done agreed before anything starts.

Contact

Tell me what is broken

The more specific you are, the more useful the first reply will be. Serious enquiries only — I take a small number of engagements at a time.

Start the conversation