Home Lab & Self-Hosted Infrastructure
Proxmox virtualization, a full Netdata/Prometheus/Loki/Grafana observability stack, DNS-layer filtering, a self-hosted credential vault, and the capacity-management discipline that keeps 14+ nodes healthy.
Cloud Fleet & Infrastructure-as-Code
A 6-node cloud fleet tied together over a mesh VPN, configured with Ansible, patched on a scheduled maintenance window — and what happened, and what changed, the day two nodes disappeared without warning.
Building a Production Business App
A FastAPI + PostgreSQL invoicing and finance system, built module by module: multi-currency handling, generated PDFs, payments and bank reconciliation, VAT compliance reporting — shipped and still running.
Network Engineering & Hardening
Rolling out VPN access to a distributed workforce, choosing a DNS filtering strategy that actually holds up under scrutiny, and the investigate-before-you-fix discipline behind a real hardening pass.
Open-Source Enterprise Networking
A full corporate network stack — OPNsense firewall, WireGuard VPN mesh, and an inline Suricata IDS running 7,700+ rules — replacing a legacy commercial UTM with zero per-seat licensing, plus open-source directory services as a capability on request.
What AI Can Actually Do Here
Every case study on this page — including the hardening pass that secured this very site — was built working alongside an AI coding agent. Not a chatbot answering questions: a system that reads logs, forms a hypothesis, backs up before it touches anything live, and is honest about what it doesn't know. This is what that actually looks like, judgment calls included.