Solutions Engineer → DevOps
runs a family media platform and a DevOps lab off three machines in the same rack.
Building a 3-node Proxmox homelab, GitOps pipelines, and infrastructure-as-code. Solutions Engineer by day, DevOps by night.
pg. 01 — profile
Collection · pg. 02
Currently a Solutions Engineer in Hong Kong, building homelab-infra on the side — a 3-node Proxmox cluster that's both my family's private cloud and a production-grade DevOps playground: Terraform, Ansible, K3s, ArgoCD, and CI/CD, all as code.
"Live like no one else today, so that you can live like no one else tomorrow." — Dave Ramsey
Collection · pg. 03
Collection · pg. 04
A 3-node Proxmox cluster, built in public — part family media platform, part DevOps playground, all of it as code. All three tiers are live: family services (Jellyfin, Nextcloud, Immich) alongside a core-infra tier (DNS, GitLab, full observability) and a lab tier running real GitOps — K3s, ArgoCD, Helm, commit-to-deploy proven end to end. Every push is gated by CI and Trivy security scans; a timed PBS restore drill — 12 minutes, full recovery — proved the reliability story instead of just claiming it. Next: finish the VLAN rollout, then time the lab's own teardown drill. If it isn't in git, it doesn't exist.
Traffic enters through a Cloudflare Tunnel — zero open ports — to three public apps: Jellyfin, Nextcloud, and Jellyseerr (Jellyfin SSO, approval required). Every admin plane is Tailscale-only. All three tiers are clustered and live, right down to the lab's K3s + ArgoCD + Traefik Ingress, with commit-to-deploy proven end to end. A MikroTik managed switch handles the LAN, with VLAN segmentation rolling out zone by zone and a JetKVM for out-of-band console.
A 10-inch rack — printed by me, designed by the MakerWorld community. Small enough for a desk, rigid enough to hold real hardware: this is where the rest of this page actually runs. The third node, the MacBook Pro, sits right on top.
Printed from KWS Rack V2, MikroTik rack ears, GMKtec rack mount, and a universal rack shelf — all open designs on MakerWorld.
The pipeline is already proven — one git push travels
through CI, Trivy security scans, and ArgoCD to a live Kubernetes
rollout with no kubectl. This card is just waiting on the
screen recording of it, end to end.
Grafana Fleet Overview (system health) and a public Uptime Kuma status page (service uptime) are both live — real infra, watchable in real time.
./demo.sh up stands up a mini k3s lab on AWS spot in ~4
minutes and prints a live URL; ./demo.sh down tears it down —
a few cents per run, nothing left behind.
Collection · pg. 11