Projects

Windows like enterprise stack on Debian/Proxmox with zero trust access.

• VLAN segmentation for DMZ, Infra, Clients, IoT
• Zero inbound; admin plane over VPN only
• Selected admin UIs gated by Cloudflare Access MFA

Secure remote Proxmox management via Cloudflare Tunnel (pve.heckit.dev) with Access MFA.

• Per app Access policy with identity challenge

Cisco + Aruba switches with pfSense firewall for routed VLANs and policy filtering.

• DHCP per VLAN; routed access via pfSense
• Resolved ICMP to default gateway with ACL + rule audit

Interactive LED installations using FastLED with wireless control and on device UI.

• Animations with palette blending
• UI on microcontroller no laptop required

Self-hosted platform for private file sharing, photo storage, and calendar collaboration — a secure, privacy-focused alternative to commercial clouds.

• Shared photo galleries and documents through private user accounts
• Collaborative calendar sharing and integrated password vault
• Object storage backend for durable and scalable media storage

Next.js + Tailwind on Vercel with Cloudflare DNS for a fast, secure site you can host for about $12 per year.

• Modern stack built collaboratively with ChatGPT for efficiency and simplicity
• Zero-cost hosting on Vercel’s free tier; domain-only expense
• Cloudflare DNS with HTTPS, caching, and CDN security features
• Responsive design, accessible UI components, and clean typography
• Privacy-friendly analytics via Umami (no cookies, no tracking bloat)

Low cost receiver for FAA Remote ID using SDR with real time map and alerts.

• Decode RID beacons; parse and display telemetry
• Local alerting; optional privacy respecting map

Centralized auth for Linux services with Kerberos/LDAP; exploring Windows trust for mixed env.

• SUDO, HBAC, and SSH key distribution via IPA
• Service accounts + host enrollment workflow

Network print service for mixed clients via CUPS/IPP with SMB sharing, isolated on IoT VLAN.

• IPP Everywhere for driver light setup; Bonjour/mDNS discovery
• Samba share for legacy Windows clients; per user ACLs
• Printer isolated on IoT VLAN; egress-only rules to print host

Vendor free, local only IP cams with segmented VLAN access and encrypted remote viewing.

• Cameras isolated on IoT VLAN with egress controls
• Remote access via WireGuard + HTTP auth proxy

Observability for homelab services and network endpoints.

• HTTP/DNS/ICMP probes with alerts
• System metrics and dashboards per service