Hi there 👋

I’m a self-taught tinkerer focused on building gadgets, automation systems, and process control solutions. I brew beer, but the real interest is in measurement, repeatability, and continuously improving consistency from batch to batch.

That focus led me deeper into electronics, including heating and cooling systems, temperature control, and embedded hardware. I also run a home lab where I experiment with infrastructure, networking, and self-hosted services.

Detailed project write-ups, architecture notes, and lab documentation will follow.

Locking Down SSH in a DMZ for Hugo Deployments

Hardening SSH to a DMZ web server revealed that my Hugo deploys also needed outbound Git access. Later I removed the inbound deploy trigger entirely, and that turned out to be the best hardening step.

Automating Hugo Deployments (Git-Based Workflow)

How this site is published: posts are previewed, approved and committed from my home-lab console to a self-hosted Gitea, and a build host in the DMZ pulls read-only on a timer, rebuilds and syncs the site. Includes what I learned rebuilding it after losing the Git server.

A LAN-Only Web Console for My Home Lab

The scripts I used to run by hand from my desktop now live behind a small LAN-only web console. It uses passkey sign-in and a fixed list of audited actions. Claude drafts pages, and a security gate checks them before I approve anything.

Building a Private LDAP Address Book with OpenLDAP

A private OpenLDAP address book secured with LDAPS, providing centralised contact lookup for Mutt and Thunderbird on a LAN.

Home Assistant

What my Home Assistant OS setup runs: add-ons, integrations, dashboards, and how it connects to the Proxmox cluster and certificate automation.