I build, test and secure cloud infrastructure.
I’m Geoffrey, a Cloud and DevOps engineer. I work with Linux servers, containers and automated pipelines, currently working on backup and disaster recovery.
This site shows the work: what I built, how I tested it, what broke and what I changed. My direction is cloud security and DevSecOps, so web security practice and server hardening sit next to the infrastructure projects.
Each project has its own page. If you want the code first, every page starts with a link to the repository.
Start here
ProjectsWrite-ups with architecture, tests and results
WritingArticles on backups, Terraform and CI/CD
CTF write-upsWeb security practice, on its own site
Projects
ZeroDriftIn progressTerraform for an AWS VPC and server, with every change reviewed as a pull request before it is applied.
Quiz app deployLiveA containerized app that deploys with GitHub Actions to EC2 and to a Proxmox server, exposed through Cloudflare Tunnel.
Tested backups labWrite-up dueLVM snapshot backups of KVM guests, restored and verified, plus what broke during kill testing.
Kubernetes backup and recovery labPlannedA lab rebuild of a backup pipeline with persistent storage, S3-compatible targets and PostgreSQL point-in-time recovery.
Home lab networkingLiveIsolated VMs on Linux bridges with NAT, Windows Server DNS and DHCP, Twingate access and key-only SSH.
Infrastructure health agentIn progressA Python agent that checks CPU, memory, disk, services and endpoints, then sends a plain-language alert to Discord.
WAF in front of Juice ShopPlannedModSecurity with the OWASP Core Rule Set in a home lab, tested against a deliberately vulnerable app.
Small jobs I take on
- Tested backups: automated backups with a restore test and a short runbook.
- Linux server hardening: key-only SSH, firewall, updates and a before-and-after report.
- Docker and CI/CD: containerize an app and deploy it with GitHub Actions.
- Bash automation: Tested scripts for server tasks.