A growing collection of cloud infrastructure projects — each built with production-grade practices: IaC, security by default, and clean architecture.
Real systems running in production — the source is public where it can be.
Multi-site static hosting on AWS — the infrastructure powering this very site. Two S3 origins (portfolio + resume), each fronted by CloudFront with OAC-secured access. Single wildcard ACM certificate with DNS validation, CloudFront Functions for clean URL rewriting, and Route 53 alias records for apex, www, and subdomain routing.
View sourceA modern, pixel-perfect HTML/CSS resume served as a static site on its own subdomain. Demonstrates clean semantic HTML, responsive design, print-friendly styling, and zero-server architecture with CloudFront CDN delivery.
View liveBrowser-based administration interface for Dovecot/Postfix mail servers, built with FastAPI, HTMX, and Tailwind. Handles user administration, mail queue inspection, log analysis, IP blocking via UFW, disk capacity tracking, and threshold-based alerting. Security-hardened: an unprivileged web process talks to a root-level helper daemon over a Unix socket with strict input validation and command allowlisting.
View sourceWhat's next — projects in progress, expected to land soon.
REST API built with API Gateway, Lambda, and DynamoDB. Terraform-managed infrastructure with CI/CD pipeline for automated deployments.
Containerized applications running on ECS Fargate with Application Load Balancer, auto-scaling, and centralized logging via CloudWatch.
End-to-end deployment pipeline using GitHub Actions for building, testing, and deploying infrastructure and application code to AWS.