0x01 Production Virtualization Platform
The platform behind an active client engagement. Proxmox VE runs the production
VMs behind a pfSense firewall on a network I segmented myself: 12 hosts across a /24,
static leases, firewall policy written per segment. Nothing sits exposed at the edge. Public traffic
arrives through a Cloudflare Tunnel, so there are no inbound ports to forget about.
Guests are provisioned and hardened with Ansible, which keeps the build repeatable
and makes drift easy to spot.
Proxmox VEKVM
pfSenseWireGuard
Cloudflare TunnelAnsible
0x02 Federated Social Platform
Mastodon built from scratch on Ubuntu 24.04 LTS for a client's community product.
Postgres, Redis, Ruby through rbenv, nginx out front, SSH locked down. The
interesting part turned out to be mail: account verification was failing silently
because the instance could not deliver. I moved outbound mail to an authenticated
relay and aligned SPF, DKIM, and DMARC until messages reached inboxes.
Ubuntu Servernginx
PostgreSQLRedis
SPF/DKIM/DMARC
0x03 Private LLM Inference Service
Language models running on hardware I control, with a small service that hands
messages to local inference and returns the reply in the thread. No third-party API,
and no client data leaving the environment. That was the requirement that started
the project, since the use case is healthcare and "probably private" was never
going to be good enough.
PythonOllama
REST APIsystemd
0x04 Diaspora Pod & Mobile Client
A second federated platform, themed to the client's brand, plus an Android client
that wraps it in a WebView. I built it, signed it, and then spent a while in the
Chrome remote inspector working out why it behaved differently on a real phone
than it did on my desk.
DockerRuby on Rails
SCSSAndroid Studio
0x05 ORLabs, Security Consulting
Vulnerability assessment, penetration testing, and virtual CISO
work for small organizations that cannot staff a security function. Recon and
scanning through to a findings report a non-technical owner can actually act on,
plus the written policy that usually needs to exist first.
ReNgineOpenVAS
MetasploitKali
vCISO AdvisoryHIPAA
0x06 Workflow Automation
Selenium built on the Page Object Model, driving HUD program application workflows
that used to be filled in by hand. Slow, repetitive, easy to get wrong, and now a
script that runs the same way every time.
PythonSelenium
Page Object Model