Access, Network and Communications: VPN, MikroTik, SSO, Email, Video Conferencing and Telephony

This service covers the tasks that connect people, offices and services: secure access, the router, single sign-on, email, video conferencing and telephony. Come with a specific task: remote access to an office network, emails landing in spam, your own video conferencing instead of Zoom, or telephony with the customer card in your CRM. I configure the setup, test it on real devices and document the configuration.

What you can order

The price is per project. If a task falls across several rows, for example a VPN with Keycloak login or Jitsi integrated with telephony, we agree on one price before work starts.

How the work goes

1. You describe the task and the number of users or devices. If you need advice before ordering, write to me on Telegram.
2. I clarify the scheme: what connects to what, which access is needed, which platforms are used.
3. I configure and test it on your devices and services.
4. I hand over documentation: the configuration, client settings and administration procedures.

What usually comes up in the work

• VPN for remote access or connecting offices. WireGuard and OpenVPN for the specific task: access to an office network, site-to-site between locations, integration with MikroTik and Keenetic. I set up clients on every platform.
• MikroTik isn’t doing what it’s supposed to. Routing, firewall, Reverse Proxy (RouterOS 7.22+), EoIP tunnels, traffic prioritization for streaming or VoIP. If something won’t connect, I run diagnostics and find the cause.
• Video conferencing without Zoom and without a subscription. Jitsi Meet on your server in Docker with Nginx as a reverse proxy, authentication and recording via Jibri. You keep control of your data and only pay for the VPS.
• Emails don’t reach the inbox. SPF, DKIM and DMARC, MX and PTR records, and your own mail server on Mailcow when needed.
• Many services, each with its own password. Keycloak gives one login for Nextcloud, Grafana, internal dashboards and VPN, with two-factor authentication. Suits teams of 5 or more.

Related articles

These materials show how I approach the setup. You can read them before ordering.

VPN

• OpenVPN: Part 1 — Protocol, Editions and Clients
• OpenVPN: setting up Ubuntu server and Keenetic client
• Mesh VPN: Part 4 — Headscale or WireGuard: your own server instead of Tailscale

MikroTik

• A Complete Guide to Configuring MikroTik for Office and Home
• Setting Up an OpenVPN Server on MikroTik RouterOS: A Complete Practical Guide
• Native Reverse Proxy in MikroTik RouterOS 7.22+: Complete Setup Guide

Keycloak and SSO

• What is Keycloak: SSO, OAuth 2.0, and open-source account management
• OpenVPN: Part 3 — Login via Keycloak (SSO and two-factor authentication)

Email

• Email Setup: Part 3 — Self-Hosted Mail Server (using Mailcow as an example)
• DNS configuration for mail and website: Part 2 — Email protection (SPF, DKIM, DMARC)

Jitsi Meet

• How to Install Jitsi Meet on Your Server Using Docker
• Jitsi Meet: Enabling Authentication and Server Optimization

Telephony

• Business Telephony: Part 3 — SIP Telephony Directly or an In-House PBX

FAQ

Do I need my own server?

VPN, Keycloak, Mailcow email, Jitsi Meet and MikoPBX need a server: a VPS, Dedicated or cloud. Keycloak and the mail server need at least 2 GB RAM, and the mail server also needs a dedicated IP. If you have no server, you can get a BigMike Cloud VPS.

Which MikroTik hardware is supported?

Any model: RouterBOARD, CCR, hAP, hEX, RB5009 and others, with RouterOS 6.x and 7.x. I work remotely via WinBox or SSH. If you already have a configuration, I can audit it and point out the problem areas.

Can you fix only email deliverability?

Yes. If you don’t need your own server, I set up SPF, DKIM and DMARC for the existing domain and find out why emails are rejected or flagged as spam.

What does the MikoPBX setup include?

Connecting 10 internal SIP extensions and 5 external lines, an IVR menu, AmoCRM integration (calls, customer cards, analytics), notifications for incoming and missed calls, basic protection and backup.

Is this a one-off job or ongoing support?

This service is a one-off job. For continuous monitoring and alerts there is monitoring and observability, and for outages, incident response.

How to order

Write to me on Telegram @BigMike_help: briefly describe the task and say how many users or devices there will be. I reply on business days. Other ways to reach me are on the contacts page.