╭─ ~/bkr ──────────────────────────────────────────────╮
│ │
│ ██████╗ ██╗ ██╗██████╗ │
│ ██╔══██╗██║ ██╔╝██╔══██╗ severe code. │
│ ██████╔╝█████╔╝ ██████╔╝ heavy deploys. │
│ ██╔══██╗██╔═██╗ ██╔══██╗ no business cards. │
│ ██████╔╝██║ ██╗██║ ██║ │
│ ╚═════╝ ╚═╝ ╚═╝╚═╝ ╚═╝ hamburg · de │
│ │
╰──────────────────────────────────────────────────────╯
$ whoami
solo operator. ships go, templ, htmx. runs the cluster.
$ uptime
12y+ in tech · 0 standups this week · cluster green
$ ps -ax | head -6
PID CMD
001 go run ./cmd/synkraft
002 k3s-server
003 postgres
004 traefik
005 templ generate --watchwhat's running, what's deprecated.1
+ shipping boring tech that doesn't page at 3am
+ go + templ + htmx end-to-end — one language, one mental model
+ small k3s clusters on hetzner — real workloads, sane bills
+ running synkraft.co — brand & digital systems
+ hosting unionstack.dev — hosting & innovation
- microservices for a form that emails a PDF
- "we'll just use vercel for this"
- twelve-color tech-radar quadrants in the standup decklanguages:
primary: go # one language all the way down
secondary: typescript # when the browser insists, not before
glue: bash # nothing else is honest about it
frontend:
html: templ # types for a templating engine. yes.
hypermedia: htmx # the rest of the spa-pretending-to-be-a-thing
style: tailwind # the css i actually finish writing
infra:
orchestrator: k3s # k8s for grown-ups, not f500 cosplay
host: hetzner # bills you can read, bandwidth you can use
ingress: traefik
certs: cert-manager
datastore:
default: postgres # the answer is almost always postgreshow an engagement actually runs — no decks, no discovery calls billed by the hour.
flowchart LR
a[intake] --> b[scope & quote]
b --> c{advisory<br/>or build?}
c -->|advisory| d[audit + written brief]
c -->|build| e[design · build · ship]
d --> f((retainer))
e --> f
run by synkraft.co · hosted on unionstack.dev
two repos earn the open badge — the rest is intentionally locked.
drwx------ bkr neovim-config/ modular nvim, lazy.nvim, lsp, treesitter
drwx------ bkr pentestContainer/ self-contained pentest sandbox, docker
- neovim-config — modular config built on lazy.nvim. lsp, treesitter, telescope, all the boring-good stuff. portable across machines.
- pentestContainer — spin up, recon, exploit in a sandbox, destroy. no host pollution.
~50 repos behind the wall. roughly:
client/ synkraft builds, brand systems, nda-locked
infra/ k3s, hetzner, authelia, nextcloud — too much state in git
wip/ half-built tools not ready for review
scratch/ bootcamps, leetcode, experiments
open code here is intentional. not a portfolio.
Note
the contribution graph is hidden by design. 95% of commits land in private repos — public-only undersells, private-counted misleads. read what's open instead.2
$ git log --since='1 week ago' --oneline | wc -l
[redacted]· · ·