Solutions Engineer → DevOps
runs a family media platform and a DevOps lab off three machines in the same rack.
Building a 3-node Proxmox homelab, GitOps pipelines, and infrastructure-as-code. Solutions Engineer by day, DevOps by night.
pg. 01 — profile
Collection · pg. 02
Currently a Solutions Engineer in Hong Kong, building homelab-infra on the side — a 3-node Proxmox cluster that's both my family's private cloud and a production-grade DevOps playground: Terraform, Ansible, K3s, ArgoCD, and CI/CD, all as code.
"Live like no one else today, so that you can live like no one else tomorrow." — Dave Ramsey
Collection · pg. 03
Collection · pg. 04
A 3-node Proxmox cluster, built in public — part family media platform,
part DevOps playground, all of it as code. All three tiers are
live: family services (Jellyfin, Nextcloud, Immich) alongside a
core-infra tier (DNS, GitLab, full observability) and a
lab tier running real GitOps — K3s,
ArgoCD, Helm, commit-to-deploy proven end to end. Every
push is gated by CI and Trivy security scans, nearly every
image is version-pinned instead of :latest; a timed
PBS restore drill — 12 minutes, full recovery — proved the reliability
story instead of just claiming it. Next: the first VLAN zone, then
time the lab's own teardown drill. If it isn't in git, it doesn't
exist.
Traffic enters through a Cloudflare Tunnel — zero open ports — to three public apps: Jellyfin, Nextcloud, and Seerr (Jellyfin SSO, approval required). Every admin plane is Tailscale-only. All three tiers are clustered and live, right down to the lab's K3s + ArgoCD + Traefik Ingress, with commit-to-deploy proven end to end — this very site runs there too, as a hardened replica deployed through ArgoCD. A MikroTik managed switch handles the LAN, with VLAN segmentation to be phased in one zone at a time and a JetKVM for out-of-band console.
A 10-inch rack — printed by me, designed by the MakerWorld community. Small enough for a desk, rigid enough to hold real hardware: this is where the rest of this page actually runs. The third node, the MacBook Pro, sits right on top.
Printed from KWS Rack V2, MikroTik rack ears, GMKtec rack mount, and a universal rack shelf — all open designs on MakerWorld.
The pipeline is already proven — one git push travels
through CI, Trivy security scans, and ArgoCD to a live Kubernetes
rollout with no kubectl. This card is just waiting on the
screen recording of it, end to end.
Grafana Fleet Overview (system health) and a public Uptime Kuma status page (service uptime) are both live — real infra, watchable in real time.
./demo.sh up is built to stand up a mini k3s lab on AWS spot
in a few minutes and print a live URL; ./demo.sh down tears
it down — a few cents per run, nothing left behind.
Collection · pg. 11