Projects

Seven builds, with the failures left in

Each write-up follows the same shape — the problem, what I actually did, the stack, and the result. The interesting part is usually the thing that went wrong in the middle.

Read the k3s cluster on AWS case study

Self-directed learning project

Self-hosted k3s cluster on AWS with Flask/PostgreSQL and Cloudflare

A single-node Kubernetes cluster on EC2 running a public Flask app over Traefik and Cloudflare — with the API server closed to the internet and reachable only over a Tailscale mesh.

  • Control-plane OOM restart loop
  • EXTERNAL-IP advertising
  • Exposure boundary
  • Cloud
  • Kubernetes
  • Networking
Read the Purple Team training lab case study

MICROS training center

Purple Team training lab across 15 workstations

A 15-seat teaching lab where every station is both attacker and defender — Kali on bare metal hosting an Ubuntu Suricata sensor, rolled out entirely by script over SSH.

  • Security
  • Deployment
  • Linux
Read the Diskless network security audit case study

My own infrastructure · ~40 clients

Authorized internal security audit of a diskless game-club network

A read-only audit of a diskless game-club network I own, written up as a versioned report with a prioritized vulnerability table and a remediation plan for skeptical staff.

This was an owner-authorized audit of infrastructure I own myself, read-only throughout: port scanning, banner grabbing, and share/service enumeration only — no exploitation, and no changes to the live boot images.

  • Security
  • Networking
  • Audit
Read the Fleet automation & WSUS case study

Micros · production domain

PowerShell fleet automation and WSUS operations

Mass-enabling remote management across a domain — including the machines you cannot reach remotely yet — plus a WSUS patch pipeline on SSL covering roughly 150 machines.

  • Automation
  • PowerShell
  • Windows
Read the ESP32 BLE servo stack case study

Personal hardware project

ESP32 BLE servo-control stack (firmware + Python client)

A full firmware-to-client control link: a custom BLE GATT service on an ESP32 driving two servos, and an asyncio Python client that reconnects on its own.

  • Embedded
  • Hardware
  • Python
Read the AD → Excel reporting tool case study

Micros · internal tooling

Active Directory to Excel reporting tool

A one-command Python tool that rebuilds a previously hand-maintained company spreadsheet straight from Active Directory over LDAP.

  • Automation
  • Python
  • Windows
Read the AD360 Russian localization case study

Micros · unsupported customization

ManageEngine AD360 Russian localization

Roughly 41,000 lines of Java resource files translated into Russian by hand, keeping placeholders, embedded HTML, and unicode escapes intact and loadable.

  • Localization
  • Windows