Experience
My work spans web products, infrastructure, and the day-to-day operation of services.
Software
I build web applications across interfaces, APIs, relational data, authentication, and transactional email.
Infrastructure and operations
I run services on Proxmox and Debian LXC, using containers, private networking, health monitoring, and encrypted off-pool backups. Recovery exercises help check that those backups are usable.
Security and reliability
I work with least-privilege service identities, scoped credentials, OIDC with PKCE, and hardened runtimes. I prefer secure defaults, fewer moving parts, and documentation that explains how to operate a system.
Toolkit and interests
- Software: Rust, TypeScript, JavaScript, Bun, HTML, and CSS.
- Data and identity: PostgreSQL, SQL migrations, OIDC, and WebAuthn.
- Infrastructure: Linux, Proxmox, LXC, Docker Compose, systemd, Nginx, ZFS, Cloudflare Tunnel, and Tailscale.
Outside the work: self-hosting, photography, long-form technical writing, and home networking.