MAKE
IT WORK.

Network and cloud security, servers, and infrastructure, built to stay private and reachable.

Explore the work

The systems
behind the screen.

Most of my work is around network and cloud security, setting up servers, and the infrastructure that holds it all together.

Network &
cloud security.

Understanding what's exposed, how systems connect, and who has access.

Explore Cyber

Servers &
infrastructure.

Setting up servers and services with attention to reliability, maintenance, and how everything fits together.

Selected work.

Recent infrastructure projects, described at the level of architecture and outcome.

A wall-mounted network cabinet with a patch panel, a switch, and two rackmount servers.

A private-by-default server platform.

Two Ubuntu servers running containerized services behind one front door. The only way in from the internet is an outbound Cloudflare Tunnel; everything else answers only on private networks and Tailscale. Updates, reboots, and monitoring run on a schedule.

  • Cloudflare Tunnel
  • Tailscale
  • Caddy
  • Docker
  • Beszel
Blue and gray Ethernet cables in switch ports with green and amber link lights.

Encrypted DNS with automatic failover.

When plain DNS stopped working on the local network, both servers moved to DNS-over-HTTPS: Quad9 first, Cloudflare as backup, and a scheduled check that returns to the primary once it recovers. A documented DNS-over-TLS path covers recovery.

  • DNS-over-HTTPS
  • dnscrypt-proxy
  • systemd-resolved
A wireless access point mounted on an office ceiling.

Lantern, a local network monitor.

A native Mac app that measures connection health, maps the local network, discovers devices, and keeps the evidence behind each failure. History stays in a local database, with no cloud account.

  • Rust
  • Tauri
  • SvelteKit
  • SQLite

Self-hosted analytics that keep visitors private.

Analytics for several sites and apps, run on owned hardware. A collector holds events while the service is down and replays them in order, and visitor IP addresses never reach the disk.

  • Docker
  • Caddy
  • Python
A desk with a closed laptop, an open notebook, a small network switch, a blue Ethernet cable, and coffee.

Where it started.

A few earlier projects, from my days building iOS Shortcuts.

Self-hosted
and recoverable.

Services run on owned hardware, with documented setup, updates, and recovery.

Two compact servers, a small network switch, and a UPS on a white shelf.

Look closer.
Build stronger.

Practical work across networks, cloud environments, and the servers that connect them.

Explore Cyber

A question, an idea, or something worth making better.

LET'S TALK.