Software, infrastructure, hardware repair, and mixed builds, including work that isn't public on GitHub.
You're looking at it! A rebuild of my portfolio site from Angular to Astro + React in order to simplify the stack while keeping high-quality UI, theming, and of course, high accessibility...
The public-facing BLAXSTAR website and platform work: a cohesive UI system, reusable components, and a structure that supports content + services over time. Key highlights: CSS-first Tail...
A cohesive homelab environment supporting multiple servers and services with internal DNS, secure access, and repeatable operational patterns. Key highlights: Structured internal naming +...
A custom Pi-hole-based DNS service for internal resolution (intranet services, naming, and ad-blocking), including reverse-proxy admin routing. Key highlights: Fixed admin routing edge ca...
A terminal-first peer manager for TELEGRAPH that focuses on safe, repeatable provisioning and clean exports. Key highlights: Menu-driven TUI workflow without heavy dependencies “Atomic” p...
A custom Keycloak instance with SSO + OIDC Integrations. Single sign-on and OIDC authentication flows for services across my stack, with attention to correct redirect handling and environ...
A custom VaultWarden instance with SSO via HERMES. Key highlights: Resolved redirect/URI configuration inconsistencies between environments Validated web flows vs desktop protocol-scheme...
A centralized instance of the NGINX reverse proxy that routes multiple services behind clean domains, with TLS termination and predictable internal/external access patterns. Key highlight...
A PXE environment designed for repeatable imaging and unattended provisioning, with a menu to select different OS installers and workflows. Key highlights: Inspired by enterprise imaging...
A self-hosted asset CDN that serves images and static files for BLAXSTAR services. This project includes storage layout decisions, reliable directory structure, and production-safe permis...
A secure WireGuard server for VPN access to my homelab with correct routing between VPN and LAN networks. Key highlights: Tuned AllowedIPs to avoid route conflicts and blackholes Diagnose...