What I build and operate

I build infrastructure, automate its day-to-day work, and test how it recovers. These are the skills I use across AutomationLab, with projects that show the decisions, results, and lessons behind them.

Platform

I turn a server request into a configured Windows or Linux machine with addressing, inventory, and monitoring. I keep the infrastructure and configuration in code so later changes follow the same recorded path.

Tools: Proxmox, Kubernetes / K3s, Terraform, Ansible, Helm, NetBox.

See the server provisioning project →

Reliability and recovery

I connect monitoring to investigation and bounded remediation. I test backups by restoring them, and watch for missed work so a silent pipeline cannot look healthy.

Tools: Zabbix, Prometheus, Grafana, Proxmox Backup Server, Python.

See the restore verification project →

Identity and security

I automate account lifecycles, certificate renewal, and credential rotation, with approval gates around destructive changes. I make expiry, failed renewal, and exceptions visible before they interrupt access.

Tools: Active Directory, Entra ID, AD CS, Vault, Duo, cert-manager, Cloudflare.

See the certificate and secret renewal project →

Automation and delivery

I turn recurring operational tasks into versioned pipelines with validated inputs, review gates, and retained results. I use separate environments and workers suited to each workload to test changes before production.

Tools: Jenkins, Gitea Actions, Argo CD, Kaniko, Python, PowerShell.

See the Jenkins project →