A selection of client work and my own infrastructure.
Client projects
Linux infrastructure
Building complete infrastructures for clients: Active Directory on Linux with Samba, sensors and other field devices connected via VPN, GPU clusters for compute-heavy processing, Kubernetes with k3s, Cilium and GitOps via Argo CD, and Gitea with Gitea Actions for code and CI/CD.
OpenVPN servers with Ansible
For sensors and cameras in the field, I use Ansible to deliver complete OpenVPN servers in minutes, including certificates and ready-to-use client configurations for up to 490 devices.
My own infrastructure
Single sign-on
Central identity management for all my self-hosted services, with Authelia as OpenID Connect provider and LLDAP as directory. Sign-in with passkeys, access control via groups.
Container hosting and hardening
About a dozen services run as rootless Podman containers, managed through systemd. Automatic updates with rollback, certificates that renew themselves, and hosts locked down on a default deny basis with nftables.
shellcrafted.ch – this website
Statically generated with Hugo, content as Markdown in Git. Every push triggers a Forgejo Actions pipeline that builds and deploys the site automatically. No CMS, no database.