I keep the platforms running that others build on.

From hand-run deploys to a one-minute pipeline

Problem. Every release was a manual wrangler run with an undocumented config workaround. "Deployed" and "live" kept disagreeing because content lived in D1 revisions, not the seed file.

Built. A GitHub Actions pipeline that builds the Astro site, patches the adapter's broken config, and deploys to Workers on every merge. Migrated the zone between Cloudflare accounts, added DKIM/DMARC email, wrote the runbook.

Merge to main → live in one minute. Nobody needs my laptop to ship.

A Kubernetes platform a small team can actually operate

Built. DigitalOcean Kubernetes provisioned with OpenTofu, apps delivered through Helm and ArgoCD, secrets in Infisical, and a Prometheus + Grafana + Loki stack so failures show up on a dashboard before Slack.

The team deploys by opening a PR. Access, secrets, and rollbacks follow the same path.

The dashboard that died every restart

Problem. An AI agent's dashboard went unreachable after container restarts. No errors in any log.

Root cause. Shared Docker network namespace silently broke on restart. Fixed with separate bridge networks and Caddy resolving through Docker DNS. Packaged the deployment as a Copier template.

Template on GitHub

Reusable Docker stacks for AI and WordPress

Built. HTTP healthchecks and pinned images for OpenClaw, default model + agent search for AnythingLLM, and a WordPress stack where Ansible pulls plugins from object storage at build time. Ran a Docker MCP Gateway POC for safe agent tool access.

Seeing traffic and errors on a site that had neither

Built. SigNoz with OpenTelemetry collectors and structured Caddy access logs for a marketing site with live webinar traffic. Slow pages and 5xx spikes now visible in one place.

LinkedIn cold-message generator

A Next.js app that turns a job description and a profile into a short outreach message. Built for my own job search, kept online because friends kept asking for the link.

Try it live