Engineering that returns control, efficiency and data sovereignty to the organizations that run it.
Building secure, reproducible and production-inspired engineering projects.
Developmi is the personal engineering brand of Miguel Lozano.
This organization hosts open-source projects focused on infrastructure engineering, networking, DevSecOps, cloud architecture, security automation, and self-hosted platforms.
The goal is simple:
- Build practical engineering tools.
- Share production-inspired architectures.
- Promote infrastructure sovereignty.
- Contribute reusable open-source components.
Projects here are production-tested. Not prototypes. Developmi is not a company and does not provide commercial support through this organization. Client-specific implementations, proprietary Infrastructure as Code, and consulting deliverables remain private.
- ☁️ Cloud & Infrastructure Engineering
- 🛡️ DevSecOps
- 🌐 Networking
- 🔥 Caddy & Coraza WAF
- 🏗️ Infrastructure as Code
- 📦 Self-hosted Platforms
- 📈 Observability
- 🔐 Zero Trust
- 📚 NIST-aligned Hardening
- 💾 Disaster Recovery
🛡️ Caddy WAF
Production-hardened Docker image - Caddy + Coraza WAF + OWASP CRS v4.29.0. Cosign-signed, SLSA provenance, Trivy scanning, non-root (UID 1337), multi-arch amd64/arm64.
🖥️ Caddy WAF UI
Management UI for caddy-waf. Go stdlib only, zero runtime dependencies. Centralized control plane for WAF rules, logs and threat visibility.
⚙️ Hardened
Ansible framework for bare metal - NIST 800-53 aligned, Tailscale zero-trust mesh, CrowdSec, Vault-backed secrets, Molecule tested.
Sovereign ELT platform - dlt + dbt + ClickHouse + Metabase. Multi-tenant, RBAC-isolated, 93 automated quality tests in production.
Developmi projects follow a consistent engineering philosophy:
- Security by Default
- Reproducible Builds
- Infrastructure as Code
- Supply Chain Security
- Minimal Operational Complexity
- Automation First
- Semantic Versioning
- Open Standards
Open-source repositories published here represent reusable engineering components intended for the community.
Commercial implementations, customer infrastructure, and proprietary automation remain outside this organization.
Security is not a feature; it is the baseline.