Projects

Things I build, evaluate and run — described plainly, with links to related writing.

This website — a static site built with Astro, served by Caddy with automatic TLS.

On-premises Kubernetes spread across independent datacenters, with workload and security domains separated by design.

A scanner platform built from independent services, Kafka-based messaging and an evidence-based asset model.

Kubernetes infrastructure for medical-grade environments, independently architected and implemented as a contractor.

Issuing, renewing and distributing TLS certificates automatically, with validation before anything ships.

Reusable GitHub Actions workflows and a standardised delivery path from build to Kubernetes, built for multiple teams.

Designing authoritative DNS for an on-premises environment so that zones and servers are managed as code.

Cross-cluster Kafka replication with MirrorMaker 2, deployed on Kubernetes with generated configuration and runtime secrets.

Prometheus and Grafana monitoring tuned so alerts are actionable — including distinguishing node-level from container-level failures.

Tooling around the FortiManager JSON-RPC API to automate device provisioning and configuration workflows.