NixOS Desktop running
Intel i5-6500 running NixOS 26.05. Full declarative config with flakes, sops-nix secrets, and custom modules for all services.
NixOSFlakessops-nix
Bitcoin Node running
Bitcoin Knots full node with LND Lightning Network on Umbrel. Automated daily backups via systemd timers over Tailscale mesh.
BitcoinLightningLND
SIEM Stack running
Grafana + Loki + Fluent Bit pipeline ingesting router syslog from OpenWrt via syslog-ng. Automated alert rules for failed auth, service anomalies, and firewall blocks.
LokiFluent BitGrafanaDetection Rules
Network Security running
OpenWrt with BanIP, AdGuard Home, and unbound DNS. syslog-ng aggregating firewall blocks, DNS queries, and auth attempts. VLAN segmentation for service isolation.
BanIPAdGuardVLANsUnbound
Mesh Network running
Tailscale mesh across NixOS desktop, MacBook Air M3, Umbrel, and iPhone. GL-iNet AR750S with hardened DNS and firewall rules.
TailscaleWireGuardOpenWrt
HackTheBox learning
Actively working through HackTheBox machines to develop offensive security skills. Understanding attacker techniques to inform better network defence and detection engineering.
CTFPentestingOffensive basics
Self-hosted Services running
Nextcloud, CouchDB (Obsidian LiveSync), Vaultwarden, Linkwarden, Gitea — all declaratively managed via NixOS modules with nginx reverse proxy and Let's Encrypt.
NextcloudVaultwardenGitea
Local AI Stack running
Ollama on MacBook Air M3 with Open WebUI on NixOS served over Tailscale. RenderCV + Ollama pipeline for automated CV tailoring from job descriptions.
OllamaLM StudioOpen WebUI