Our work, explained in depth.
Technical write-ups of how we design, build, secure, and ship production systems — the challenge, the approach, the specifics, and the outcome for each service we offer.
Infrastructure & Hosting
Hardened Production Web Hosting
How we host static and app sites on hardened Linux: auto-renewing Let’s Encrypt TLS, HTTP→HTTPS, HSTS, a tuned CSP, and a one-command deploy.
Read the case studyPrivacy-First Self-Hosted Analytics
A self-hosted analytics dashboard built from your own access logs: rotation-aware ingestion, scheduled refresh, and access behind HTTP auth.
Read the case studyWeb Development
Portfolio & Marketing Platforms
Responsive marketing and portfolio sites on a hand-built design system, data-driven content, generated SVG art, and full SEO/accessibility.
Read the case studyLong-Form Document Theming
Theming and structuring 15,000+ word documents for the web: anchored table of contents, scroll-spy, reference-first layout, and responsive tables.
Read the case studyCI/CD & Release Automation
Safe, One-Command Deploys Across a Multi-OS Fleet
A controller-and-agent Jenkins pipeline that builds across ten nodes and five operating systems, installs atomically, and cuts a release on every push to main.
Read the case studyA Jenkins Pipeline for a 10-Node, Multi-OS Build Fleet
A controller-and-agent Jenkins pipeline that builds across a deliberately heterogeneous fleet — Ubuntu, Fedora, FreeBSD, Solaris, and OpenBSD — with a multibranch build matrix, atomic installs, and one-command releases. Three idempotent Ansible playbooks stand up the controller, the agents, and their toolchains.
Read the case studyAutomated Build & Test: A Merge-Gating Test Pyramid
A three-tier test pyramid plus a lint gate: a ~2.5-minute fast suite for feedback and a full 3,000+ test run that gates every merge.
Read the case studyConfiguration Management
Ansible Server Provisioning & Hardening
Idempotent Ansible playbooks that provision and patch a heterogeneous multi-OS fleet from one control node, with check-mode preview and git-based audit.
Read the case studyTerraform on AWS
Declarative AWS provisioning with Terraform: a free-tier t3.micro on Amazon Linux 2023, read-only data lookups, named-profile auth, and a ready-to-run SSH output.
Read the case studyTerraform on Azure
Declarative Azure provisioning: resource group, VNet, subnet, NSG, NIC, and a Standard_B1s Ubuntu VM — with a Spot-instance recipe for constrained regions.
Read the case studyTerraform on GCP
Declarative GCP provisioning: a self-contained VPC, subnet, and firewall around an Always-Free e2-micro on Ubuntu 24.04, authenticated with gcloud ADC.
Read the case studyTerraform on Oracle Cloud
Declarative OCI provisioning: VCN, gateway, routing, security list, subnet, and an Always-Free VM.Standard.E2.1.Micro on Ubuntu 24.04.
Read the case studyMulti-Cloud Provisioning from One Config
Module composition that provisions four VMs across four clouds from a single config, serialized with -parallelism=1 to avoid cross-cloud API races.
Read the case study