Skip to content

Hardened Self-Hosted Infrastructure Platform

A privacy-focused infrastructure environment for secure remote access, internal services, DNS filtering, password management, media access, monitoring, and automation.

Core technologies: Linux, ZFS, KVM/QEMU, WireGuard, OpenResty, Docker, Vaultwarden, Jellyfin, AdGuardHome, Bash, Lua

Engineering focus: security, reliability, privacy, automation, operational control

Highlights

  • Designed layered access controls for internal and public-facing services
  • Built reverse proxy rules for route-level authorization
  • Implemented secure remote access without relying on third-party tunnels
  • Used ZFS for storage reliability, snapshots, replication, and recovery
  • Integrated DNS privacy, filtering, and internal service discovery

More detail to come.