Selected work
Practical work focused on secure access, resilient services, and infrastructure I actually run myself. Tap a card for full details.
Full-stack production web app for primary and high schools to manage house competition points, with Google OAuth and role-based access for staff, students, and admins.
Production app designed for reliable school house-point workflows and clear role-based access.
Raspberry Pi infrastructure running DNS filtering, mesh VPN, password vault, and media services. Private by default, accessible from anywhere I trust.
Self-managed environment focused on privacy, reliability, and secure authentication. Real experience with the boring parts of operating infrastructure.
WireGuard-based private access across devices and services, with simple policies and strong defaults. Reduces public exposure while keeping trusted access frictionless.
Designed to reduce public exposure while keeping trusted access simple and reliable.
More projects are in progress — documented as they mature.