IT infrastructure, systems, web platforms, automation, and self-hosted services.
I build practical systems that connect infrastructure, operations, and automation—from networks and servers to storage, monitoring, web platforms, and media workflows. My background includes paid client and live-environment IT work dating to approximately 2010, alongside hands-on lab and personal infrastructure projects.
Privacy-safe engineering notes and reusable patterns for homelab systems, storage, monitoring, automation, and resilient operations.
Published examples use synthetic names and generalized architecture. Live configurations, topology, credentials, device identities, security coverage, property details, and private media remain private.
Repeatable macOS and Linux environment setup using chezmoi, Homebrew, shell configuration, and configuration-as-code practices.
A staged infrastructure-modernization project built around discovery, documentation, recoverability, and least privilege:
- inventory and configuration baselines before changes
- segmented services and controlled trust boundaries
- backup, restoration, power-loss, and continuity planning
- monitoring, alerting, and documented operating procedures
- read-only automation first, with approval gates for future actions
This work is documented publicly only as reusable architecture and sanitized examples—not as a map of the live environment.
A controlled workflow for media ingest, integrity verification, backup, AI-assisted organization and editing, privacy inspection, human approval, and publishing. Source media remains preserved, and automated decisions stay reversible.
Design, deployment, migration, administration, and troubleshooting for WordPress and other web platforms, including hosting, domains, DNS, SSL, email, databases, performance, security hardening, and integrations.
- Networking and security: TCP/IP, VLANs, managed switching, Wi-Fi, PoE, routing, VPNs, segmentation, pfSense, FortiGate, UniFi, Aruba, and Cisco
- Windows and identity: Windows Server, Active Directory, Group Policy, DNS, DHCP, permissions, server roles, and WSUS
- Linux and virtualization: Ubuntu, CentOS, Red Hat, Proxmox VE, VMware vSphere, virtual-machine provisioning, and infrastructure monitoring
- Storage and monitoring: TrueNAS, Synology and other NAS platforms, backup and recovery workflows, Grafana, health monitoring, alerts, and capacity planning
- Support and communications: endpoint troubleshooting, cameras/NVR, VoIP/PBX, AV systems, digital signage, and client-facing technical support
- Web and automation: WordPress/CMS, hosting, migrations, APIs, integrations, shell automation, configuration management, and AI-assisted workflows
I publish reusable methods, sanitized documentation, and portfolio-safe demonstrations—not live infrastructure. Public repositories intentionally exclude credentials, private topology, internal hostnames, device identifiers, configuration exports, security-system details, property information, recovery locations, and private media.