Projects
A few things I've built. Each one is described by what it does and what I learned, not how my network is laid out.
Home lab
A Proxmox cluster of containers and virtual machines behind an OPNsense firewall, with a managed Cisco switch configured from the command line. It runs identity and certificate services (Authentik single sign-on and a Smallstep internal certificate authority), power-aware shutdown through a UPS, and scheduled backups. Everything is documented, and I treat the documentation as part of the system.
Lab audit dashboard
A Python dashboard with several modules that collects the current state of the lab and flags anything that has drifted from the documented configuration. Building it taught me how failures hide in small details: a check can pass and still tell you less than you think it does.
Domain, certificates and mail
I registered a domain and set up email on it with SPF, DKIM and DMARC, so mail is authenticated and hard to spoof. I also set up Let's Encrypt with the DNS-01 challenge, which proves domain ownership through DNS alone, using an API token limited to a single zone. Next, I'm extending publicly trusted certificates to services that stay private.
Ecne
An agentless network scanner that fingerprints hosts and builds a structured model of a network, a kind of digital twin, for security assessment. It works without storing credentials.
Neit
Early-stage research into breach-and-attack simulation. It runs attack scenarios against a model of a network, and it is designed so that anything it generates can only run in an isolated, disposable environment behind a separate validation layer.