Welcome to my portfolio

Secure Sync: Syncthing & Cryptomator

This project demonstrates how to build a private and secure storage solution using two powerful open-source tools. We use Syncthing for automated, real-time data backup between two Linux nodes and Cryptomator for transparent client-side encryption. This architecture ensures that sensitive files are always available on multiple devices while remaining completely unreadable to unauthorized users.

Project No. Two

Dynamic Stack: Nginx, MariaDB & PHP (LEMP)

This project demonstrates how to build a high-performance web hosting infrastructure using the LEMP stack on a Debian environment. We use Nginx as a lightweight, high-concurrency web server, MariaDB for robust relational database management, and PHP-FPM for efficient dynamic content processing. This architecture provides a stable and scalable foundation for deploying modern web applications, such as WordPress, while ensuring optimized resource management and secure data handling.

Project No. Three

Secure Immich Cloud: Proxmox, Docker & LUKS

This project demonstrates how to build a professional-grade, private media hosting environment. We transformed a Proxmox hypervisor into a secure NAT gateway using nftables to host an Immich micro-services stack via Docker.
The strength of this architecture lies in its layered security: combining LUKS encryption with LVM volume management and LXC user mapping. This ensures that all media is encrypted at rest and strictly isolated within an unprivileged container. The result is a secure, self-hosted alternative to public cloud providers that keeps you in total control of your data without sacrificing performance.