Currently building internal automation tools at work, including an email templater (finished), a Windows media creation utility (finished), a chatbot to assist field technicians (planning), software stack assembler (PoC), and full-stack installer (PoC). Everything below is separate, self-directed infrastructure work on my own time.
Remote 路 Certified Kubernetes Administrator 路 LinkedIn
Normally this kind of infrastructure work would come from a job, but I wanted to learn the open-source side of it properly, so I've been building my own. My homelab runs on GitOps because I hate drift, and most of what's below followed from that. I'm always seeking better systems, whether that be digitally or offline.
flowchart LR
R["ubernutty-cluster<br/>(git repo)"] --> F["Flux<br/>reconciles every 10 min"]
S["SOPS + age"] -. decrypts secrets .-> F
F --> I[infrastructure]
F --> M[monitoring]
F --> A[apps]
I --> RN["Renovate<br/>CronJob"]
M --> P["Prometheus<br/>+ Grafana"]
A --> L[Linkding]
A --> AB[Audiobookshelf]
L --> CF["Cloudflare Tunnel<br/>(outbound, no open ports)"]
AB --> CF
Rebuilt daily by a GitHub Action that reads the cluster repo, not the cluster.
| Flux | v2.9.6 |
| Last infrastructure change | 2026-10-07 (4 days ago) |
| Renovate dependency PRs | none open, 5 merged in the last 30 days |
| Apps under GitOps | 2 |
Updated 2026-10-11 12:42 UTC
| What | Where | What's in there |
|---|---|---|
| GitOps and continuous reconciliation | ubernutty-cluster | Flux applying layered kustomizations, cluster state driven entirely from git |
| Secrets management | ubernutty-cluster | SOPS + age. No plaintext secret has ever been committed |
| Observability | ubernutty-cluster | kube-prometheus-stack dashboards |
| Dependency hygiene | ubernutty-cluster | Self-hosted Renovate CronJob raising PRs when a new version releases |
| CI/CD and releases | devops-study-app | GitHub Actions building and pushing images to GHCR, release-please handling versioning |
| Container fundamentals | container-practice | Multi-stage builds |
| Environment management | dotfiles | chezmoi-managed shell, Neovim, and mise-pinned runtimes across machines |
| Declarative systems | nixos-backup | Whole desktop reproducible from a flake with one command |
| Firmware debugging | my-vial-keyboards | QMK/Vial keymaps, plus porting boards off memory-starved AVR chips to RP2040 |
Certified Kubernetes Administrator (CKA) 路 Credential ID LF-rf1c3fcxxm 路 verify
CompTIA A+, Network+, and Security+: earned, now lapsed. Listing them for accuracy, not claiming them as current.