Evidence from systems that had to run, report, recover, and stay understandable.

01

Fleet-wide CrowdSec Deployment

Custom parsers and coordinated rollout across an 11-node homelab fleet.

02

Graylog SIEM And Fleet Logging

Graylog SIEM with OpenSearch backing and rsyslog forwarding across the fleet.

03

WireGuard Peer Provisioning

Ansible-driven provisioning against the pfSense REST API with auto-IP assignment, QR code generation, and WireGuard site-to-site tunnels between servers.

04

Immich Platform Migration

Photo platform migration with NFS mounts, external libraries, and a custom Grafana dashboard.

05

Twenty CRM Deployment

Deployed Twenty CRM for a business environment with the application stack, supporting services, and operational setup needed to run it reliably.

07

Broadcast Platform Build

AKLEIN STUDIO — Cloudflare Pages with two custom Workers, a KV-cached RSS aggregator across nine sources, and an R2 API Worker serving a JSON endpoint for a dynamically rendered mix archive. AzuraCast on homelab. No CMS. No platform lock-in.

These aren't AI-generated deliverables pointed at a domain. Every site I build is reviewed at the HTML, CSS, and compliance layer — proper disclosures, verified data routing, form security, and analytics that don't silently ship visitor data to third parties. If you're in a regulated-adjacent space like financial services, that gap matters.