A growing collection of cloud infrastructure projects — each built with production-grade practices including IaC, security best practices, and clean architecture.
Multi-site static hosting on AWS — the infrastructure powering this very website. Two S3 origins (portfolio + resume), each fronted by CloudFront with OAC-secured access. Single wildcard ACM certificate with DNS validation, CloudFront Functions for clean URL rewriting, and Route 53 alias records for apex + www + subdomain routing.
View source →A modern, pixel-perfect HTML/CSS resume served as a static site on its own subdomain. Demonstrates clean semantic HTML, responsive design, print-friendly styling, and zero-server architecture with CloudFront CDN delivery.
View live →A web-based administration interface for Dovecot/Postfix mail servers. Built with FastAPI, HTMX, and Tailwind CSS — enables browser-based mail server management including user administration, mail queue inspection, log analysis, IP blocking via UFW, disk capacity tracking, and threshold-based alerting. Security-hardened architecture: unprivileged web process communicates with a root-level helper daemon over a Unix socket with strict input validation and command allowlisting.
View source →REST API built with API Gateway, Lambda, and DynamoDB. Terraform-managed infrastructure with CI/CD pipeline for automated deployments.
Containerized applications running on ECS Fargate with Application Load Balancer, auto-scaling, and centralized logging via CloudWatch.
End-to-end deployment pipeline using GitHub Actions for building, testing, and deploying infrastructure and application code to AWS.