What does WZ-IT operate on DigitalOcean Droplets?

We take over the agreed guest scope: Linux patching, hardening, monitoring, backup management, and documented services or applications. DigitalOcean remains responsible for the underlying platform; scope and response are agreed separately.

Do you support all Droplet classes?

We manage suitable Linux Droplets and first assess CPU model, memory, storage, traffic, and availability objectives. Right-sizing and product changes are based on measurements rather than blanket recommendations.

How do you obtain access?

The account and billing remain with the customer. We use separate, least-privilege team and SSH access wherever possible. Account passwords are not used as the regular shared access method.

Can you recover a Droplet that no longer boots?

We analyze the failure and, for suitable public Droplets, can also use the browser-based Droplet Console. Whether repair is possible depends on the cause, data state, and available backups.

What remains to be operated with DigitalOcean Kubernetes?

DOKS manages the control plane and performs cluster upgrades. Workloads, add-ons, access, observability, PodDisruptionBudgets, capacity, and preparation for node replacement remain a separate operating scope. DOKS is therefore priced separately.

Do you manage App Platform and Managed Databases?

Configuration, integration, monitoring, and migration can be included after an audit. DigitalOcean remains responsible for the managed platform layer; application, data model, access, and integrations are scoped separately.

Can you integrate DOCR and infrastructure as code?

Yes, where required. Container Registry, API, doctl, or Terraform can be part of the target architecture. Infrastructure as code is optional and not assumed for every small environment.

How do you use VPCs and Cloud Firewalls?

We place resources in VPCs according to traffic flows and protection needs and restrict public endpoints with Cloud Firewalls and local firewalls. Cross-region or peered networks and DOKS-specific limits are considered first.

Do Reserved IPs automatically provide high availability?

No. A Reserved IP can be reassigned to another Droplet in the same datacenter. Health checks, replication, switching logic, capacity, and tests are still required for a reliable HA design; we do not promise a blanket failover time.

Do you configure DigitalOcean Load Balancers?

Yes, where the service fits the architecture. Listeners, certificates, health checks, backend access, and failure behavior are planned together with application and network.

Are DigitalOcean backups or snapshots sufficient?

That depends on RPO, RTO, and data consistency. DigitalOcean now offers automatic backups at multiple intervals; snapshots are manually created images. For databases and application data, we add application-consistent, separate backups and recovery tests where required.

Do you use Spaces as a backup target?

Spaces can be used for suitable S3-compatible tools, archives, or application objects. Whether it is sufficiently separate as a backup target depends on account, region, access, and failure domain and is not assumed by default.

Can you resize Volumes?

Yes, with planning and a safeguard. DigitalOcean recommends taking a snapshot before the irreversible expansion; the filesystem then needs to be expanded. Volumes cannot be reduced and are not included in Droplet backups.

Can existing systems remain in our DigitalOcean account?

Yes. The provider contract, infrastructure, and invoices remain with the customer. WZ-IT receives documented technical access and takes over only the agreed operating scope.

What does management cost?

Monitoring-only starts at €49.90 net per server and month; our team reviews alerts and notifies your team during service hours. Operating an existing Linux Droplet starts at €149.90 net per month. DOKS and other platform services are priced by scope.

What contract term and notice period apply?

The service can be cancelled monthly, with 30 days' notice to the end of the month.

Do you support migrations from AWS or Azure?

Yes. We compare services, data, dependencies, egress, operating effort, and target architecture and plan test migration, cutover, and rollback. We do not promise a blanket saving or a direct one-to-one mapping.

How quickly does WZ-IT respond?

Response time follows the selected service level. Production and Critical include 24/7 response to qualified P1 incidents; provider response and repair times remain separate.

Managed DigitalOcean Droplets: Linux administration and operations

From a single Droplet to a Kubernetes cluster, we take over the agreed operational scope. Monitoring runs around the clock; human response follows the selected service level. Your systems remain in your DigitalOcean account.

Droplets & platform services
Systems remain in your account
Service levels up to 24/7 for P1

Configure DigitalOcean operations To server audit

Reviews

IT Beratung Service Consulting Soforthilfe

Companies worldwide trust WZ-IT

Read client reviews

DigitalOcean

Operate DigitalOcean infrastructure with clear ownership

Droplets, DOKS, Managed Databases, and App Platform distribute responsibility differently between provider and customer. We map these boundaries, take over the agreed operations, and document access, maintenance, monitoring, backup, and incident response.

Droplet Operations
We take over the agreed operation of Linux, services, and applications on existing or new Droplets.
DigitalOcean Kubernetes (DOKS)
For DOKS, we distinguish the managed control plane from operating workloads, add-ons, access, and upgrade preparation.
Cloud Firewalls & VPC
We plan VPCs, Cloud Firewalls, load balancers, and administrative access as one coherent network and security model.

Responsibility

What DigitalOcean does not cover - and we do

DigitalOcean operates the cloud platform and, depending on the service, additional platform layers. Operating systems, workloads, data, and configuration remain wholly or partly with the customer.

DigitalOcean

Your responsibility at DigitalOcean

Under the shared responsibility model for Droplets, DigitalOcean secures the infrastructure beneath the Droplets; securing your data and systems is your responsibility.
Automated Droplet backups must be enabled and selected to match RPO and retention.
DOKS manages the control plane and technical upgrade process; DigitalOcean also notes possible workload disruption and the need for PDBs.
Volumes are not included in Droplet backups; data consistency and recovery require a separate plan.
Monitoring alerts trigger a WZ-IT response only where this is included in the service level.

WZ-IT

What we take over

Patching and updates in coordinated maintenance windows
Security hardening: SSH keys, Cloud Firewalls, VPC isolation
System and service monitoring; response according to service level
Backup management with a defined failure domain; recovery tests according to the agreed scope
Incident handling including ticket coordination with DigitalOcean

DigitalOcean service areas

Which DigitalOcean products we operate and connect

DigitalOcean combines Droplets with VPC, platform, and data services. We can cover more than the Linux guest by designing networking, DOKS, data services, deployment, and recovery as one operating scope.

Droplets & compute

Operate Droplets and their compute features as production systems

Select Basic, General Purpose, CPU-Optimized, or Memory-Optimized Droplets by workload
Use Private Droplets or public Droplets according to the access model
Use images, snapshots, tags, and cloud-init for repeatable provisioning
Configure Volumes Block Storage for separated data paths
Operate Linux, Docker, reverse proxies, databases, and agreed applications

Scope boundary and notes

We take over suitable Linux Droplets from baseline hardening through application-aware operations and include the related DigitalOcean resources.

Responsibility boundary: DigitalOcean operates the hardware and virtualization platform. The operating system, installed software, data, and applications remain customer responsibilities unless WZ-IT takes them over.

Outcome: A documented Droplet scope with repeatable provisioning and ongoing maintenance.

VPC & edge

Design VPC, firewalls, and load balancers as one network architecture

VPC, VPC Peering, VPC NAT Gateway, and Private DNS by Region and topology
Cloud Firewalls with tags and local host firewalls as a coordinated ruleset
Reserved IPs for supported failover scenarios within their limits
Regional HTTP, Network, or Global Load Balancers by protocol and architecture
Integrate DNS, TLS certificates, VPN, and administrative access

Scope boundary and notes

We define private and public data flows and configure DigitalOcean networking products around the application.

Responsibility boundary: VPCs are regional, and Reserved IPs and Load Balancers have product-specific limits. High availability and failover are therefore not inferred from individual features.

Outcome: A traceable traffic flow from the public endpoint to the private workload.

DOKS & deployment

Operate DigitalOcean Kubernetes and Container Registry

DigitalOcean Kubernetes (DOKS) with node pools, upgrades, and autoscaling
DigitalOcean Container Registry (DOCR) for images and cluster integration
Ingress, certificates, secrets, policies, deployments, and GitOps
Volumes, Load Balancers, and VPC integration for stateful workloads
Application observability, capacity, and recovery

Scope boundary and notes

For DigitalOcean Kubernetes, DigitalOcean operates the control plane. WZ-IT covers node pools, add-ons, workloads, and their operating and recovery procedures by scope.

Responsibility boundary: The managed DOKS control plane does not automatically cover workers, add-ons, Kubernetes objects, persistent data, or application functionality.

Outcome: A complete Kubernetes operating scope above the managed control plane.

Data Services & PaaS

Integrate Managed Databases, Spaces, and App Platform deliberately

Managed Databases for PostgreSQL, MySQL, Valkey, MongoDB, Kafka, or OpenSearch after assessment
Spaces Object Storage and Spaces CDN for suitable object and media data
App Platform for suitable web, worker, and job components
Manage Trusted Sources, TLS, users, database parameters, and capacity
Document application integration, migration, and deployment paths

Scope boundary and notes

Managed services reduce certain platform tasks but still require network, data, access, and application configuration.

Responsibility boundary: With Managed Databases and App Platform, the data model, queries, application, permissions, cost, and recovery objectives remain in the customer scope.

Outcome: A PaaS deployment with explicit responsibility instead of an assumption of complete provider operation.

Backup & operations

Control backups, monitoring, and incidents over time

Droplet Backups at an appropriate interval plus Snapshots for planned rollback points
Include Volumes and databases separately in the recovery design
Complement DigitalOcean Monitoring and Alert Policies with WZ-IT service checks
Document restore tests, RPO, RTO, and restart sequence
Handle provider tickets, incidents, and migrations with technical isolation

Scope boundary and notes

We combine native DigitalOcean features with application-aware checks and human response according to the service level.

Responsibility boundary: Droplet Backups do not automatically protect every attached Volume or application state. Response and recovery require separate agreement and testing.

Outcome: A verifiable operating and recovery process for Droplets and connected platform services.

One operating model

One operating model for DigitalOcean and additional systems

The provider is only one operating location. WZ-IT connects servers, clouds, and on-premises systems into a documented environment with consistent monitoring, controlled access, and one coordinated service level.

View hybrid and multi-cloud operations

Location and control

Contracts, accounts, and administrative control remain with you. We take over the agreed technical operations without moving the infrastructure into a closed hosting product.

Private connectivity

NetBird, WireGuard, or existing site connections integrate further clouds, Proxmox systems, and on-premises networks through controlled paths.

Operations and response

Monitoring, updates, backups, documentation, and incident response are designed across all participating systems and operated according to the selected service level.

Monitoring · SLA · Operations

DigitalOcean
Private connectivity
Cloud · Proxmox · On-premises

Target architecture

Scope Droplets and platform services separately

The operating scope follows the product, responsibility boundary, and application.

Components

Target architecture components

Select Droplet classes according to load profile and availability target
Treat DOKS as a separate Kubernetes operating scope
Assess Managed Databases, Spaces, and Volumes against data and recovery requirements
Plan VPCs, Cloud Firewalls, load balancers, and Reserved IPs together
Use the API, doctl, or Terraform for reproducible changes where required

View server management and pricing

Principle

Scope before automation

We automate only the components whose ownership, changes, and rollback path are clear.

How we take over existing DigitalOcean systems

The audit first establishes current state, responsibilities, and required action.

01
Audit
We check current state (security, updates, backups)
02
Hardening
We implement agreed safeguards and technical access
03
Onboarding
We configure monitoring, alert paths, maintenance windows, and documentation
04
Operations
We perform the documented operating duties according to the service level

Service scope

Monitoring or full operations

With Monitoring Only, our team reviews alerts and notifies your team during service hours; incident resolution stays with you. Your servers remain in your provider account. The first managed Linux server starts at €149.90; progressive volume pricing applies from the second server.

Server operationsfrom €149.90Monitoring Only from €49.90

Configure server operations Pricing and service levels

Onboarding typically starts within 1 to 2 business days after signing

Payment

Bank transfer

Other routes

Conversation

Managed operations for DigitalOcean infrastructure

We assess your environment and clearly scope Droplets, platform services, and Kubernetes operations.

Discuss DigitalOcean operations →Entry

Server audit

The audit first establishes current state, responsibilities, and required action.

To server audit →

Frequently Asked Questions

Answers about Droplets, DOKS, networking, backups, and service levels

TopicsDroplets & Operations DOKS & Platform Services Networking & Security Backup & Storage Takeover, Cost & Service Level

Droplets & Operations

DOKS & Platform Services

Networking & Security

Backup & Storage

Takeover, Cost & Service Level

Knowledge

Further guides

In-depth knowledge from our knowledge base.

Guides

Further entry points

Reviews & projects

Operations that visibly relieve customers

Customer feedback on monitoring, updates, maintenance, support and stable production systems.

Networking & Provisioning

WZ-IT moved our studio infrastructure from decentralised individual devices to a central platform: every site is securely connected via VPN, new devices are onboarded automatically and an entire site is provisioned from a template, without manual steps on location. What impressed me most is the breadth and depth of their knowledge: Timo and Robin are not a typical IT provider who sets up a server and leaves. The two of them think their way into highly complex infrastructure and software topics, work through every requirement we put in front of them, and build networking, provisioning and operations so that everything fits together in the end. WZ-IT is an excellent partner for complex software, network and architecture projects.

Steve KirchnerManaging Director, nextGYM GmbH

View project

International

Built in Germany's Ruhr Valley. Running worldwide.

WZ-IT designs, develops and operates infrastructure and software for clients in Germany and internationally. We deliver projects remotely and continue supporting them in ongoing operations after go-live.

Selected projects

Read client reviews

Enquiry

What can we take over for you?

Tell us briefly what it is about - we will get back to you within one business day.

Straight with Timo and Robin - no sales team, no pitch
A professional assessment of your situation
Concrete next steps for infrastructure, software or AI

The conversation is free and non-binding.

WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.

Jakob ÖschlbergerInno7 GmbH

Email[email protected]Phone+49 2922 875068

WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.

Jakob ÖschlbergerInno7 GmbH

Managed DigitalOcean Droplets: Linux administration and operations

Droplet Operations

DigitalOcean Kubernetes (DOKS)

Cloud Firewalls & VPC

Your responsibility at DigitalOcean

What we take over

Operate Droplets and their compute features as production systems

Design VPC, firewalls, and load balancers as one network architecture

Operate DigitalOcean Kubernetes and Container Registry

Integrate Managed Databases, Spaces, and App Platform deliberately

Control backups, monitoring, and incidents over time

Location and control

Private connectivity

Operations and response

Monitoring · SLA · Operations

Target architecture components

Scope before automation

Audit

Hardening

Onboarding

Operations

Managed operations for DigitalOcean infrastructure

Server audit

Droplets & Operations

What does WZ-IT operate on DigitalOcean Droplets?+

Do you support all Droplet classes?+

How do you obtain access?+

Can you recover a Droplet that no longer boots?+

DOKS & Platform Services

What remains to be operated with DigitalOcean Kubernetes?+

Do you manage App Platform and Managed Databases?+

Can you integrate DOCR and infrastructure as code?+

Networking & Security

How do you use VPCs and Cloud Firewalls?+

Do Reserved IPs automatically provide high availability?+

Do you configure DigitalOcean Load Balancers?+

Backup & Storage

Are DigitalOcean backups or snapshots sufficient?+

Do you use Spaces as a backup target?+

Can you resize Volumes?+

Takeover, Cost & Service Level

Can existing systems remain in our DigitalOcean account?+

What does management cost?+

What contract term and notice period apply?+

Do you support migrations from AWS or Azure?+

How quickly does WZ-IT respond?+

Guides

Further entry points

Built in Germany's Ruhr Valley. Running worldwide.

Selected projects

Read client reviews

What should we take over at DigitalOcean?