Personal Projects
Here's a selection of my personal projects. These are experiments and initiatives I've worked on outside my daily work to explore cloud-native technologies, security, and automation. Where possible, I link to the corresponding Git repositories so you can view the code and setups directly.Docker and Hardening
My personal projects started with Linux, Docker, and experiments with containerization and hardening. I’ve tried to apply best practices: hardening Linux servers with Ansible, using minimal Docker images for efficiency and security, and generally using open-source tools like Proxmox and pfSense.
This website uses only static content and a minimal Nginx
Ansible playbooks for my Debian and Proxmox servers, including basic hardening
Terraform setups for reproducible infrastructure for rapid prototyping
Towards Kubernetes
To test whether containerized setups could be production-ready, I started exploring Kubernetes and the broader cloud-native ecosystem. This allows me to integrate monitoring, automation, and orchestration in a scalable way. I’m currently migrating my projects to Kubernetes and planning to test pipelines and monitoring.
Find my current Kubernetes setup here
I use Talos Linux for my self-hosted Kubernetes, check it out
Desktop and Security Experiments
I’ve since switched to a Linux desktop and am currently exploring immutable desktops, specifically OpenSUSE Aeon. I’m also testing hardware security devices, currently including Nitrokeys, and trying out alternatives to common solutions like Yubikey.
Check out my Nitrokey setup here Link to my desktop experiments
My Future Plans
Looking ahead, I plan to:- Complete my migration to Kubernetes
- Build monitoring and alerts for all setups with Prometheus and Grafana
- Create CI/CD pipelines with Tekton
- Address dependencies in my projects using SBOMs and Renovate
- Integrate NetBox for network and infrastructure management
- Explore security-focused tools like Wazuh and OpenBao
- Build continuous security and compliance checks with Kyverno
- Engage with practice-relevant ISO standards such as BSI Grundschutz and ISO 27001