You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This blog is my build log: raw notes from the trenches of learning GitOps, k3s, FluxCD, and
16
-
everything in between. If it's not committed, it doesn't exist.
23
+
A production-minded bare-metal ARM64 k3s cluster on a Raspberry Pi 4, managed entirely with
24
+
<strong>FluxCD</strong>. Git is the only source of truth — if it's not in the repo, it doesn't exist.
17
25
</p>
18
-
26
+
<ul>
27
+
<li><strong>Secrets:</strong> SOPS + age encryption, never plaintext in Git</li>
28
+
<li><strong>Ingress:</strong> Cloudflare Tunnel for zero-trust external access</li>
29
+
<li><strong>Apps:</strong> linkding, Ghost blog, Obsidian LiveSync (CouchDB) — all declarative, all reconciled</li>
30
+
<li><strong>Learned the hard way:</strong> recovered from a force-push that triggered Flux pruning and wiped my cloudflared deployment. <code>git reflog</code> is a skill.</li>
31
+
</ul>
19
32
<divclass="callout">
20
-
<strong>Currently working on</strong>
21
-
Preparing for Azure Security Engineer and KCNA/KCSA certifications, while deepening my GitOps
22
-
practice with k3s and FluxCD.
33
+
This is where I experiment before I deploy at work. The tooling here maps directly to what production platform engineering looks like.
Hardened serverless API on AWS using least-privilege IAM, CORS controls, secrets management,
39
+
and fully automated deployment via CI/CD. No manual steps post-deploy.
40
+
</p>
41
+
42
+
<h3>🎮 <ahref="https://github.com/MrGuato/enshrouded-docker"target="_blank"rel="noopener"><code>enshrouded-docker</code></a> — Containerized Game Server (DevOps)</h3>
43
+
<p>
44
+
Immutable container infrastructure with runtime auto-update logic, semantic versioning, CI/CD
45
+
publishing via GitHub Actions, and non-root execution with minimal attack surface. Built through
46
+
real CI/CD failures — Wine + Docker on Ubuntu 22.04 with WineHQ and Xvfb.
<pclass="author-card-bio">Security Engineer based in Boston, MA. Building production-minded infrastructure with a security-first mindset. If it's not committed, it doesn't exist.</p>
0 commit comments