I will install and secure openproject on rhel with selinux, ldap, sso and bim
Linux Systems Administrator, RHEL, SELinux, Ansible, and DevOps
About this Gig
Need OpenProject on RHEL with SELinux left ON? I deploy, secure and hand over production-ready OpenProject on Docker, Podman or Kubernetes (K3s + Helm, 3-node HA). Rocky/Alma compatible.
WHAT I SET UP
Install, PostgreSQL, persistent storage, HTTPS/HSTS, SMTP
SELinux enforcing + firewalld, never disabled
Users, roles, projects, custom workflows, templates
LDAP / Active Directory login and group sync
SAML / OIDC SSO: Keycloak, Microsoft Entra ID
BIM: IFC viewer and BCF issue workflows
My own backup manager (OpenProject API, scheduled, restore)
Full DR backup of database + files, S3/NFS offsite
Uptime Kuma monitoring and alerts
Air-gapped installs, upgrade and rollback plans
Documentation and admin handover
PACKAGES:
Launch = core install.
Business & BIM = + LDAP, BIM, offsite backup.
Enterprise = + SSO, K3s HA.
CUSTOM ORDERS WELCOME: need something not listed, or an existing OpenProject fixed, upgraded or migrated? Message me first and I will send a custom offer.
Everything is built and tested in my own RHEL lab, so you get a verified way back.
Not included: OpenProject Enterprise licences, hosting or domain fees.
Software type:
Workspace
•
Control Panels
•
Other
My Portfolio
Other Support & IT Services I Offer
FAQ
Which OpenProject edition do I need?
Community is free and covers install, LDAP login, backups and Kubernetes. LDAP group sync, SAML/OIDC SSO and BIM are Enterprise (BIM edition) features. Licences are bought from OpenProject, not me. Unsure? Message me.
Docker, Podman or K3s: which is best?
Docker or Podman suits one server and small teams. K3s with Helm suits larger teams that need scaling or already run Kubernetes. I check your resources first and recommend the simplest option that fits.
Do you keep SELinux enabled?
Yes. On RHEL servers I keep SELinux enforcing and firewalld active, and fix labels and policy instead of disabling it. Ubuntu and Debian servers work too, with their own hardening.
Which Linux and RHEL licence do I need?
RHEL is my main platform and Rocky/Alma are compatible. Red Hat offers a no-cost developer subscription; check Red Hat's current terms for your use. I do not supply licences. Other distros: just ask.
Do you test backups, or just set them up?
I test them. My backup manager runs scheduled OpenProject API backups; a separate script takes full disaster-recovery backups of database and files. Both are restored and verified. You get written recovery steps.
Need LDAP, SSO or BIM on the Launch package?
Upgrade to Business & BIM (LDAP, BIM, offsite backup), or add Additional Hours: LDAP and BIM take about 1.5 hours each, SSO about 2. SSO and BIM need an Enterprise licence from OpenProject.
Can I run OpenProject on K3s or HA?
Yes. Add the K3s single-node or K3s 3-node HA extra to Launch or Business. Enterprise includes both. HA covers the cluster control plane; database and storage HA are quoted separately. You provide 3 servers.
Can you work on my existing OpenProject?
Yes. Message me first with your version and goal. I send a custom offer for fixes, upgrades, migrations or anything not listed, so you pay for the actual work.
Is offline or air-gapped installation possible?
Yes. I install from pre-loaded images and packages on servers with no internet. Message me before ordering so I can see how files reach the server, then I send a custom offer.
Do you offer support after delivery?
Yes. 30 days of questions about the delivered setup are included. Extra help, updates or maintenance can be booked with Additional Hours or a custom offer.

