High-end IT services

Engineering services
for software that has to work.

Stefan Köllner — over 30 years of software engineering. Web, backend, mobile, custom domain software, Linux operations, AI-assisted tooling — built and shipped from Hamburg, Germany for mid-sized companies, agencies and specialised industries across Europe.

30+
Years engineering
6
Service domains
EU
Hosted & operated
1:1
No agency layer

About

Six domains. One specialist. Direct contact.

stuf.rocks is the service brand of ndtss/Stefan Köllner — based in Hamburg, with over 30 years of software engineering across web, desktop applications, embedded data acquisition, mobile app development, Linux server operations and AI-assisted tooling. The shop offers concrete, scope-bound engagements; larger custom work runs via direct coordination.

What's delivered here is not generic agency output — it's code from a specialist who chooses the stack, writes the code, operates the servers, and answers the emails. Architecture principles (loose coupling, testability, extensibility) are non-negotiable: the result is software you can still change two years from now.

Also behind ndtss — NDT Software Solutions, with products in use across Europe and the GCC. Over a decade of hands-on Linux server operations rounds out the toolbox.

Expertise

Where this is useful.

WEB
Web frontends
Astro · TypeScript · Tailwind

Fast, accessible, server-rendered websites and web apps. Static-first where it fits, dynamic where it has to. SEO and i18n built in.

  • Astro 6 + Tailwind 4 stack, Next.js
  • Multi-language (EN+DE mirror)
  • Component-driven design system
  • Lighthouse-clean by default
  • CMS-ready (Decap, Sanity, on demand)
API
Backend & APIs
Python · Node · PostgreSQL

Backend services from a single Flask script to a multi-tenant API. Built for explainable performance, clean migrations and operability — no surprise scaling cliffs.

  • Python (Flask, FastAPI) + Node
  • PostgreSQL, SQLite, MongoDB
  • REST + JSON, OpenAPI on demand
  • Background jobs, queues, schedulers
  • Observability and structured logs
APP
Custom software
Desktop · Domain-specific tooling

Bespoke applications where off-the-shelf software doesn't fit: data acquisition, reporting, databases, data migration, device integration, signal processing, industry-specific tooling. Delphi (Master Developer certified), Python, .NET on request.

  • Hardware integration (USB, serial, IP)
  • Real-time data and signal processing
  • Domain-native UX and data structures
  • Long-term maintenance posture
  • Migration paths from legacy systems
OPS
Linux operations
Debian · nginx · ISPConfig · WireGuard

Production Linux clusters — web, mail, monitoring, backup. A proven master/slave HA architecture, available for your stack.

  • Multi-Linux cluster on Debian (master/slave HA)
  • nginx + ISPConfig hosting
  • Postfix + Dovecot with DKIM/SPF/DMARC
  • WireGuard mesh, restic backup
  • monit-based monitoring + alerting
AI
AI-assisted tooling
Claude Code · MCP · Knowledge Bases

Custom Model Context Protocol (MCP) servers and AI-augmented developer workflows. Not chatbots — real tooling that connects an LLM to your repos, data and operations.

  • Python MCP servers (tools tailored to your domain)
  • Knowledge-base design and crystallize workflow
  • Claude Code agent definitions
  • Repo automation and code-review augmentation
  • Cross-repo federation patterns
SEC
Security & hardening
SSH · firewall · backups · audits

Server hardening, code audits, dependency review, restore-tested backups. Small enough to ship in days, serious enough for production.

  • SSH + nftables baseline
  • fail2ban, unattended-upgrades
  • Off-site backup with restore test
  • Dependency and license audit
  • Code review against architecture principles

Industries

Who this is for.

Mid-sized companies that have outgrown their hosting provider, agencies that need an engineer instead of a freelancer, start-ups that need their first production stack done right, specialised industries (NDT, instrumentation, niche manufacturing) that need software built around their domain.

Mid-sized companies

In-house web, backend, server consolidation, AI-assisted internal tools.

Agencies & studios

Engineering capacity for complex projects: Astro, custom backend, infrastructure.

Start-ups

First production stack done right — architecture that survives the first hire.

Specialised industry

NDT, instrumentation, lab automation, niche manufacturing — domain-native software.

Trades & associations

Practical websites and tooling without the agency overhead.

Existing ndtss customers

Continuity of engineering style across products and services.

Services

What is on offer.

Each service has a fixed scope and a fixed price. Larger engagements are composed of multiple packages. To book, open the packages page or write to hello@stuf.rocks.

Software Engineering
Architecture, custom software, domain code, AI tooling.
+

Custom software engineering across the full stack — backends, domain-specific applications, device integration and embedded data acquisition. Architecture-first, written to remain maintainable in year three.

  • Web backends with REST, GraphQL or WebSocket APIs
  • Databases, data migration and ETL pipelines
  • Device integration, signal processing, embedded data acquisition
  • Mobile app development for production deployments
  • Stack: Node, Python, .NET, Delphi (Master Developer certified)
  • Architecture principles: loose coupling, testable, extensible, fully documented
NDT software reference

For non-destructive testing software in production: ndtss.de — products in use across Europe and the GCC (eddy current acquisition, signal processing, reporting). Project references on request.

Server Operations
Linux clusters, mail stacks, hardening.
+

Production Linux operations for your stack. From a single VPS to a multi-host master/slave HA cluster — built and run with the same care as a production environment.

  • Linux server management on Debian and Ubuntu
  • Multi-host Linux clusters with master/slave high availability
  • Web stack: nginx, Apache, ISPConfig site management
  • Mail stack: Postfix, Dovecot with DKIM, SPF, DMARC
  • Backup strategies: rsnapshot, git-backup, Nextcloud snapshots
  • WireGuard site-to-site VPN, TLS via Let’s Encrypt
Web Design
Sites, all-inclusive packages, ongoing care.
+

Modern, lightweight web sites — static-first with Astro 6 + Tailwind 4 (or Next.js where it fits). Built for speed, accessibility and SEO from day one. All-inclusive packages bundle hosting, mail, cloud and ongoing care.

  • Static sites with Astro 6 + Tailwind 4 (or Next.js)
  • Headless CMS integration (Decap, Strapi)
  • SEO basics and Lighthouse-clean by default
  • Multilingual sites (i18n, EN/DE mirror, more on request)
  • All-inclusive packages: hosting, mail, cloud, webmail, ongoing care
  • Component-driven design system, brand-consistent
Monitoring & Management
Remote administration, RMM, helpdesk.
+

Endpoint and server monitoring with managed RMM. Patch management, remote support, helpdesk ticketing — everything needed to keep a fleet of devices and servers running predictably.

  • NinjaOne RMM for endpoints (Windows, macOS, Linux)
  • Patch management and unattended remote support
  • Helpdesk ticketing for users and on-site partners
  • Backup monitoring, AV/EDR integration on request
  • Server monitoring with Prometheus, Grafana, Uptime-Kuma
  • Alerting on email, signal or webhook
Consulting & Architecture
Architecture reviews, stack decisions, tech audits.
+

Architecture reviews, stack decisions and technology audits — done by someone who has shipped production systems, not someone selling slides. Decision-grade output you can act on.

  • Architecture reviews of existing codebases
  • Technical consulting (stack choice, build-vs-buy)
  • Migration strategy for legacy systems
  • Vendor selection and technology audits
  • Code reviews against architecture principles
  • Mentoring for in-house engineering teams

Stack

What it is built with.

Frontend / Web
  • Astro 6
  • TypeScript
  • Tailwind 4
  • Decap CMS
  • View Transitions
Backend / Services
  • Python 3.13
  • Flask · FastAPI
  • Node 20+
  • PostgreSQL
  • SQLite
  • MongoDB
Desktop / Domain
  • Delphi 13 Enterprise · Master Developer
  • FMX · VCL
  • OpenGL · Skia
  • .NET on request
Linux Operations
  • Debian Linux
  • nginx
  • ISPConfig
  • Postfix · Dovecot
  • WireGuard
  • restic · monit
AI Tooling
  • Claude Code
  • Model Context Protocol
  • Python MCP servers
  • Knowledge bases
  • Repo automation
Hosting & Delivery
  • Own DE infrastructure
  • Let's Encrypt TLS
  • Gitea CI
  • Static + dynamic
  • EU data residency

Next step

Let's talk about your project.

Tell me the task in two paragraphs. If a package fits, link it. Reply usually within 1–2 working days.

Email
hello@stuf.rocks
Based in
Hamburg, Germany