My Works
Most of it revolves around my server: how it's configured, secured, monitored and deployed to. The code and documentation of each project are on GitHub.
Featured Projects
Homelab
My home server, run like production and managed with Ansible.
Encrypted backups with monthly restore drills, external monitoring, hardening and self-hosted CI/CD with rollback, all reproducible from Ansible roles.
Cowrie Honeypot
SSH and Telnet honeypot in Docker, isolated from my home network.
Layered isolation (non-root, read-only filesystem, iptables in DOCKER-USER and systemd) and an isolation test that stops the service if it fails.
Ops Assistant
Discord bot to operate my server from my phone.
A root collector, an unprivileged bot with read-only tools for an LLM, actions that need confirmation and an external watchdog on Cloudflare Workers defined in Terraform.
All Projects
Homelab
My home server, run like production and managed with Ansible.
Cowrie Honeypot
SSH and Telnet honeypot in Docker, isolated from my home network.
Ops Assistant
Discord bot to operate my server from my phone.
Oficina Pixel
Status dashboard for my server as a pixel-art building.
Bodycam RP
Browser-based bodycam overlay configurator for FiveM and GTA Roleplay streamers.