DevOps & Infrastructure

A production-grade self-hosted infrastructure cluster hosting 15+ containerized services, split-horizon DNS, and automated backups on Proxmox VE.

// problem statement

Public cloud environments abstract away underlying hypervisors, storage, and networking layers. I needed bare-metal control to master enterprise virtualization, container orchestration, and failover mechanics.

// engineering solution

Engineered a multi-node Proxmox VE cluster hosting Nextcloud, Gitea, Paperless-ngx, and Vaultwarden via Docker Compose. Implemented PostgreSQL and Redis data backends, split-horizon DNS routing, and Authentik for centralized SSO/OIDC identity management.

// key outcome & impact

Maintains 15+ containerized daily productivity services with automated ZFS snapshot backups, split-horizon DNS routing, and centralized Authentik SSO authentication, eliminating reliance on third-party cloud tools.

                Public Internet / Local Network
                               │
                     Cloudflare DNS / Proxy
                               │
               Traefik Reverse Proxy (*.elic01.dev)
                               │
               ┌───────────────┴───────────────┐
               ▼                               ▼
        Authentik SSO (IdP)          Containerized Services
      (OAuth2 / OIDC / LDAP)       (Nextcloud, Gitea, Immich)
               │                               │
               └───────────────┬───────────────┘
                               ▼
                      Proxmox VE Cluster
                    (5x EliteDesk Nodes)
                               │
               ┌───────────────┴───────────────┐
               ▼                               ▼
       PostgreSQL / Redis              ZFS / PBS Backups

Infrastructure-as-Code (IaC) playbooks that automate multi-site VLAN provisioning, firewall policy rollout, and configuration compliance checks across Cisco Meraki hardware.

// problem statement

Configuring enterprise network appliances manually via GUI dashboards introduces human error, configuration drift across branch sites, and slow rollback times during network incidents.

// engineering solution

Engineered modular Ansible playbooks that interface directly with the Cisco Meraki REST API to push declarative firewall rules, manage SSID profiles, and enforce VLAN policies from Git repositories.

// key outcome & impact

Automated multi-site network configuration via declarative playbooks, reducing manual dashboard provisioning steps to a single executable script with complete Git-based change tracking.

Git Repository (IaC) ──► Ansible Engine ──► Meraki REST API ──► Enterprise Edge Hardware
 (declarative YAML)        (playbook tasks)   (HTTPS / Token)       (VLANs, SSIDs, Firewall)