Live in production
CheckPulse
Multi-region uptime, DNS, and SSL monitoring for agencies. Deployed, public, and handling real traffic.
FastAPIPostgreSQLRedisCelery
Projects
Systems I have actually built, at the size they actually are. Each page states what is running, what is still in progress, and where the numbers came from.
Live in production
Fleet Watchdog
A ~250-line Python watchdog that runs on a different host from the agent fleet it watches, built after a cron job failed 970 times in four days and alerted exactly once.
PythonSystem cronSSHDiscord webhooks
Live in production
Highly Available DNS Pair
Two PowerDNS nodes behind a keepalived VIP. Replication was silently dead, two health checks in a row could not return failure, and only a real failover test caught the second one.
PowerDNS RecursorPowerDNS Authoritativekeepalived / VRRPSQLite
Live in production
Restore-Tested Backups
Nightly restic backups to a host on different physical hardware, proven by an actual restore: 9,849 messages read back out of the restored database.
resticPostgreSQLSQLitePython
Complete
Distributed Log Analyzer
Go master-worker system that parses a 3.3 GB, 10M-line access log. 36s single worker, 6s at 8-11 workers.
GogRPCGoroutines / channelsDocker
Complete
API Gateway
A Go gateway written from scratch: JWT auth with RBAC, layered rate limiting, round-robin load balancing, Prometheus metrics.
GoRedisJWTPrometheus
Design phase
Talos Kubernetes Platform
Three Talos clusters across a 7-host vSphere estate. Design freeze, IP plan, and failure tests written before any VM exists.
Talos LinuxKubernetesvSphere / ESXiOpenTofu
In progress
Data Pipeline Platform
Kafka-based event pipeline built in explicit tiers. Producer, consumer, and metrics are working; the reliability tiers are not built yet.
Apache KafkaPythonPostgreSQLDocker Compose
In progress
Cloud Infrastructure Pipeline
Terraform modules for provisioning AWS environments, wired to a CI deployment workflow.
TerraformAWSGitHub ActionsPython
Live in production
Homelab Infrastructure
A 7-host vSphere cluster that runs everything else on this page, managed through the vCenter API rather than the web UI.
VMware vSphere 8vCentergovcCloudflare Tunnel
Live in production
Three-Environment Kubernetes Platform
dev, staging and production RKE2 clusters on bare vSphere, with VIP failover proved by forcing a leadership transfer rather than assuming one.
RKE2 v1.36.4kube-vipCiliumingress-nginx
Live in production
Fleet Observability
76 scrape targets feeding a metrics stack that is deliberately not allowed to page me, because alerting stays in one place.
VictoriaMetricsvmagentGrafanablackbox_exporter
Live in production
Public Edge Without Inbound Ports
Exposing an on-premise Kubernetes cluster to the internet through a Cloudflare tunnel, while the existing production site keeps serving as the rollback.
Cloudflare Tunnelcloudflaredingress-nginxstep-ca