Projects & Approach

Not a catalogue of services — a record of how I build resilient systems, teach what I build, and keep it practical with open tools.

🧩 This Website (NGINX, TLS, GPG, 3D)

Self-hosted, hardened, and documented. Clean headers, zero trackers, GPG-secured contact, and live 3D model hosting — the infrastructure itself is part of the portfolio.

  • Lean static pages + versioned assets & long-lived caching
  • Contact uploads encrypted on arrival with embedded public key
  • Model demos and image workflows tuned for performance

Ask about the setup →

🛠️ FOSS Everything (only use what I can audit myself)

Open-source first: Proxmox, WebODM, Arch, Docker, rsnapshot. I integrate, not just install — the goal is reliability on everyday hardware and budgets.

  • Operational discipline: backups, restore drills, and config history
  • Vendor-light footprints; fewer licenses, fewer surprises, reduced costs

🎓 Training the Next Generation

Purpose-built labs for real work: Linux hardening, legacy Windows sandboxes, Android emulation, and ticket systems (osTicket) for process thinking.

  • Exercises mirror production: break, secure, recover
  • Outputs: runbooks, checklists, and durable muscle memory

🖧 Proxmox Homelab Cluster

Old laptops, disciplined ops: scripted health checks, weekly inventories, and live migration practice. A small cluster that behaves like a serious one.

  • Teaching VMs for Linux, compliance, and troubleshooting
  • Failures treated as data — recovery rehearsed, not improvised

🛰️ Drone Mapping & Orthophotos

Drone flight plans processed with WebODM. Accurate orthos and 3D meshes for agriculture, land use, and property showcase.

  • Inspired by licensed software where I didn't want to spend $300 a month, this is what FOSS does
  • Presets that balance quality, workflows, and hardware limits

🤝 Working with AI (structured, not magic)

One step at a time, terminal feedback first, no silent leaps. Chats become living checklists, recovery prompts, and scripts I can reuse.

  • Structure the noise, use the assistant: info → command → confirm → next
  • Artifacts, not fluff: configs, playbooks and AI implementation that is dependable

Other Highlights

🔐 Self-Hosted Compliance Systems

From private ventures to legal practices — I help clients move away from SaaS and build hardened systems they fully control.

  • GPG-based contact and upload forms
  • Jurisdiction-aware hosting with minimal attack surface
  • Full handover documentation and resilience tests

🎓 Full Course Ecosystems

I’ve designed course architectures from scratch — covering foundational training to expert tracks — always focused on productivity and real deployment skills.

  • Multilingual, practical content across cybersecurity, DevOps, and Linux
  • Workshops customized per company risk profile
  • Training as a force multiplier — not a checkbox

📡 Satellite + Evac Audio Integration

Developed a real-time, instore music system that integrates directly with evacuation audio — used in regulated, high-traffic retail environments.

  • Satellite-fed audio fallback with local override
  • Secure messaging integration for alerts
  • Compliant with safety system handover standards

🚚 Hybrid Cloud for Automotive Supply Chain

Migrated a supplier of a major German automaker from on-prem only to a hybrid model with optimized backups and uptime logic.

  • Critical ERP modules kept local, rest in cloud
  • Automated backup chains and audit-friendly logs
  • Infrastructure cost reduced while improving resilience

🏥 Hands-On Infrastructure Builds

I don’t just design — I build. From cabling server rooms to setting up AV displays in hospitals and public institutions, I make infrastructure tangible.

  • Server racks, cabling, wireless bridging, failover logic
  • Conference and signage systems in real-world use
  • Always delivered fully documented and stress-tested

🙌 I Train for Free — If the Idea’s Worth It

If you're building something real and private — something that makes sense and isn't just for show — you can count on my help. No invoices. No catch.

Every project is documented, testable, and designed to run without me. That’s the goal.

Got a challenge? Let’s talk →


From the blog: Latest thoughts on compliance & smart ops → see the blog.