Self‑taught DevOpsSec engineer building a production‑grade home cloud, one system at a time.
Building Proxmox clusters, UniFi networks, and structured systems from the ground up.
Platform Engineering
A 3‑node Proxmox VE cluster forms the compute core of my home cloud, backed by centralized ZFS, NFS, and OMV storage pools. VMs are provisioned from templates and protected by automated snapshots and scheduled backup jobs.
Network Engineering
The home network runs on a UniFi Cloud Gateway, Switch, and Access Point. VLAN segmentation isolates services, while enterprise‑style monitoring provides traffic visibility.
Storage & Backup
Proxmox Backup Server provides deduplicated, encrypted backups for VMs, LXCs, and hosts, verified through regular restore tests. TrueNAS and OpenMediaVault turn affordable DAS hardware into a hybrid NAS for VM backups, ISO storage, and general cloud storage.
Structured engineering projects across cloud, networking, automation, and agentic systems.
Open‑source LLMs run locally through Ollama, oMLX, LocalAI, LM Studio, and llama.cpp, integrated with Docker MCP tools and runners. An Ubuntu‑based AI server repurposes an older Nvidia GPU for GPU‑accelerated inference with Ollama.
View projectA deterministic, token‑driven workflow for developing structured SME applications, moving from VDA to IDD, CDD, and SDD. DESIGN.md acts as the contract, keeping fonts, palettes, and spacing locked and outputs deterministic across runs.
View projectSix to seven modular Ansible playbooks handle container deployment, service configuration, and system hardening. Each workflow is validated for idempotence and reproducibility across nodes, integrated with SSH and inventory files.
View projectNginx Proxy Manager handles DNS‑01 for internal services and HTTP‑01 for the public‑facing blog on a custom domain. Caddy adds automatic HTTPS and local wildcard TLS for localhost services without manual certificate handling.
View projectk3s clusters provide lightweight Kubernetes orchestration at the app layer, alongside MicroK8s. MicroCloud clusters deployed across physical nodes form the OS layer of a secure, scalable micro‑cloud.
View projectA modular secrets registry tracks rotation schedules for SSH keys, API tokens, and TLS certificates, with each rotation logged and dependent services updated. SSH access is hardened with key‑based authentication, disabled root login, and a custom port.
View project