Live in production
CheckPulse
Multi-region uptime, DNS, and SSL monitoring for agencies. Deployed, public, and handling real traffic.
Solo, Mar 2026 to present
- 3
- Regions
- 2+
- Consensus
FastAPIPostgreSQLRedisCelery
Projects
Systems I have actually built, at the size they actually are. Each page states my role, the timeframe, what is running, what is still in progress, and where every number came from. Projects, not employment: I own and operate all of this myself.
Live in production
Fleet Watchdog
A ~250-line Python watchdog that runs on a different host from the agent fleet it watches, built after a cron job failed 970 times in four days and alerted exactly once.
Solo, Sep 2026 to present
- 970
- Silent failure streak
- 4
- Same bug, different layers
PythonSystem cronSSHWebhook alerts
Live in production
Highly Available DNS Pair
Two PowerDNS nodes behind a keepalived VIP. Replication was silently dead, two health checks in a row could not return failure, and only a real failover test caught the second one.
Solo, Sep 2026
- 20/20
- Failover probes
- ~4 s
- VIP release
PowerDNS RecursorPowerDNS Authoritativekeepalived / VRRPSQLite
Live in production
Restore-Tested Backups
Nightly restic backups to a host on different physical hardware, proven by an actual restore: 9,849 messages read back out of the restored database.
Solo, Sep 2026 to present
- 5
- Databases with a copy
- 9,849
- Restore test
resticPostgreSQLSQLitePython
Complete
Distributed Log Analyzer
Go master-worker system that parses a 3.3 GB, 10M-line access log. 36s single worker, 6s at 8-11 workers.
Solo, Jan 2025
- 3.3 GB
- Input size
- 10M+
- Lines
GogRPCGoroutines / channelsDocker
Complete
API Gateway
A Go gateway written from scratch: JWT auth with RBAC, layered rate limiting, round-robin load balancing, Prometheus metrics.
Solo, Feb 2026
GoRedisJWTPrometheus
Design phase
Talos Kubernetes Platform
Three Talos clusters across a 7-host vSphere estate. Design freeze, IP plan, and failure tests written before any VM exists.
Solo, May 2026
- 3
- Clusters
- 3+3
- Topology
Talos LinuxKubernetesvSphere / ESXiOpenTofu
In progress
Data Pipeline Platform
Kafka-based event pipeline built in explicit tiers. Producer, consumer, and metrics are working; the reliability tiers are not built yet.
Solo, Jan 2026 to present
Apache KafkaPythonPostgreSQLDocker Compose
In progress
Cloud Infrastructure Pipeline
Terraform modules for provisioning AWS environments, wired to a CI deployment workflow.
Solo, Jan 2026 to Sep 2026
TerraformAWSGitHub ActionsPython
Live in production
Homelab Infrastructure
A 7-host vSphere cluster that runs everything else on this page, managed through the vCenter API rather than the web UI.
Solo, Nov 2024 to present
- 7
- ESXi hosts
- 132
- CPU cores
VMware vSphere 8vCentergovcCloudflare Tunnel
Live in production
Three-Environment Kubernetes Platform
dev, staging and production RKE2 clusters on bare vSphere, with VIP failover proved by forcing a leadership transfer rather than assuming one.
Solo, Sep 2026 to present
- 3
- Clusters
- 15/15
- Nodes Ready
RKE2 v1.36.4kube-vipCiliumingress-nginx
Live in production
Fleet Observability
77 scrape targets feeding a metrics stack that is deliberately not allowed to page me, because alerting stays in one place.
Solo, Sep 2026 to present
- 77
- Scrape targets
- 23.6M/hr
- Ingest rate
VictoriaMetricsvmagentGrafanablackbox_exporter
Live in production
Public Edge Without Inbound Ports
Exposing an on-premise Kubernetes cluster to the internet through a Cloudflare tunnel, while the existing production site keeps serving as the rollback.
Solo, Sep 2026 to present
- 0
- Inbound ports
- 4
- Tunnel connections
Cloudflare Tunnelcloudflaredingress-nginxstep-ca
Live in production
Alert-to-Runbook Responder
A scheduled responder that turns a watchdog alert into a diagnosis and an allowlisted runbook, with the only auto-applied fix chosen because its failure mode was 970 silent skips.
Solo, Sep 2026 to present
- 2,658
- Ticks recorded
- 189
- Incidents
PythonPostgreSQLSystem cronSSH
Live in production
Self-Hosted Forge and CI
Forgejo with branch protection and Kubernetes-hosted runners, where the first green CI run was a false positive and the pipeline was not trusted until it had failed for the right reason.
Solo, Sep 2026 to present
- 6
- Parallel CI jobs
- #11 / #14 / #15
- Red/green cycle
ForgejoForgejo ActionsKubernetes (RKE2)Docker-in-Docker
Live in production
Internal CA with Automated Renewal
A step-ca certificate authority issuing 24-hour leaf certificates to four services, where the renewal path, not the CA, is the part that was built and tested.
Solo, Sep 2026 to present
- 24 h
- Leaf lifetime
- 4
- Services on the CA
step-casystemd timersCaddyLinux
Live in production
Durable Postgres Task Queue
A PostgreSQL queue that runs my long-running agent work, including a job-application pipeline that has submitted 27 applications with a human approving every one: SKIP LOCKED claims, leases with heartbeats, a reaper, approval gates and capped concurrency.
Solo, Sep 2026 to present
- 111
- Tasks processed
- 2 days
- Reaper bug
PostgreSQLPython (asyncpg)System cron
Live in production
GitOps and a Signed-Image Gate on Three Clusters
Flux reconciling dev, staging and production from one public repo, with Kyverno refusing any image not signed by a GitHub Actions workflow in my org. Every gate was proven able to fail before it was trusted.
Solo, Oct 2026 to present
- 3/3
- Clusters under Flux
- 3 s
- Drift repaired
Flux v2.9KustomizeKyverno v1.19cosign (keyless)