MESH // PRIVATE
Private Mesh Networking
Designed and operate a Tailscale-first network architecture. All internal services are reachable only over the private mesh; anything public is an explicit, reviewed exception.
PORTFOLIO // INFRASTRUCTUREInfrastructure &
Infrastructure &
Network Administration
I build and run reliable infrastructure — servers, networking, and the automation that keeps them healthy. Selected builds below.
01
Selected Builds
Self-hosted // productionHARDENED // KEY-ONLY
Hardened Remote Access
Migrated SSH to key-only authentication as an unprivileged user, tunneled over the private mesh. Routing verified end to end across multiple machines.
WATCH // ALWAYS ON
Container Monitoring & Alerting
Real-time container health monitoring with alerts on CPU/memory thresholds, OOM kills, and unexpected exits, delivered straight to Discord.
AUTOMATE // EVENT-DRIVEN
Workflow Automation
Self-hosted n8n automation platform wired into internal REST APIs for scheduled jobs and event-driven workflows.
LEAST PRIVILEGE // BY DEFAULT
Rootless Containers
Container workloads run as an unprivileged user with a rootless daemon, shrinking the attack surface of the whole stack.
SINGLE PANE // LIVE
Infrastructure Dashboard
Web-based operations dashboard: live container status, host resource stats, and alerting in one place.
PATCH // ON SCHEDULE
Update Management
Automated container image update checks with scheduled maintenance windows, so patching is routine instead of a fire drill.
SHIPPED // EDGE
Static Site Deployment
Public website migrated to Cloudflare Pages with repeatable, one-command deploys.
02
Open Channel
AvailableNeed infrastructure
built right? Let's talk.
Open to roles and projects in network and server administration: Linux systems, private networking, container platforms, monitoring, and automation.