English · Français
I'm an independent systems administrator. I work on infrastructure and defensive security: Linux, containers, networking, identity and PKI.
I automate, harden and document. Here, I share my configurations and projects around self-hosting.
Contact me · LinkedIn · X · PGP key
- Systems & containers — Linux, virtualization, Docker and Kubernetes.
- Automation — reproducible configuration, administration and updates.
- Defensive security — hardening, web protection, VPNs and access control.
- Identity & PKI — IAM, certificates and chains of trust.
| Domain | Stack |
|---|---|
| Systems & virtualization | Debian, Ubuntu, Proxmox, TrueNAS |
| Containers | Docker, Kubernetes |
| Automation | Ansible, Rudder, Renovate |
| Networking & web protection | Traefik, WireGuard, NetBird, UniFi, BunkerWeb |
| Identity & security | Authentik, step-ca, Wazuh, Splunk |
| Languages & data | Bash, Python, Go, PostgreSQL |
My lab is where I work on mail, identity, security and networking.
- Mail — Stalwart, Proton Mail; DKIM, DMARC, MTA-STS and DANE.
- Identity — Authentik, OIDC, OAuth 2.0, SAML and LDAPS.
- Security — Wazuh, step-ca, BunkerWeb and Vault.
- Networking — Traefik, Nginx, WireGuard, NetBird and UniFi.
View the animated contribution calendar
