ISP CRM & Network Management System (AltRadius)

Overview

The complete DevOps and platform layer of a production ISP CRM, billing and RADIUS suite: a 21-service Docker Compose stack built from 12 custom images across 13 GitLab repositories.

Architecture

What I built

• Own the complete DevOps and platform layer of a production ISP CRM, billing and RADIUS suite: a 21-service Docker Compose stack built from 12 custom images across 13 GitLab repositories.
• Built 12 tag-driven GitLab CI pipelines on Docker-in-Docker and BuildKit with a Harbor registry, multi-project triggers, in-image smoke tests, Cosign signing, SBOM and provenance attestations.
• Hardened delivery of licensed software: multi-stage builds with BuildKit secret mounts, encoded PHP and Cython-compiled Python sources, and CI checks that fail if any protected source ships in plaintext.
• Wrote the one-line production installer and a staged upgrade script that backs up config, preflights the new release and leaves the running version untouched on any failure.
• Customized FreeRADIUS 3.2 (SQL, REST, Redis cache, custom dictionaries) with a FastAPI management sidecar, and tuned PostgreSQL 17 / TimescaleDB behind PgBouncer.
• Delivered backups with pgBackRest to MinIO (WAL archiving, retention) and a custom React + FastAPI backup and restore dashboard, plus Prometheus and Grafana monitoring with exporters.