Uses
The infrastructure and tooling I rely on day to day.
Infrastructure
- Proxmox VE
- Self-hosted virtualisation; multiple nodes, 100+ VMs.
- Docker · Docker Compose
- The packaging unit for nearly every workload.
- Kubernetes
- Container orchestration; hardened with kube-bench.
- VMware Workstation
- For Active Directory attack labs.
- Nginx · HAProxy
- Reverse proxying and TLS termination.
Delivery pipeline
- GitHub Actions
- Reusable workflows, BuildKit caching.
- Argo CD
- Deployment through GitOps.
- Terraform · Ansible
- Infrastructure and configuration as code.
Security
- Trivy
- Container image and dependency scanning.
- Semgrep
- SAST, wired into the pipeline as a merge gate.
- HashiCorp Vault
- Centralised secret management.
- Cosign
- Image signing and verification.
Observability
- Prometheus · Grafana
- Metrics and dashboards.
- ELK
- Centralised logging.
- Sentry
- Application error tracking.
- Wakapi (self-hosted)
- My own coding-time analytics.