Skip to content
View dwoitzik's full-sized avatar
2 followers · 0 following

Achievements

Achievement: Pull Sharkx4Achievement: Pair Extraordinairex2Achievement: QuickdrawAchievement: YOLO

Achievements

Achievement: Pull Sharkx4Achievement: Pair Extraordinairex2Achievement: QuickdrawAchievement: YOLO

Block or report dwoitzik

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
dwoitzik/README.md

David Woitzik

Hybrid Cloud Engineer | Azure · Terraform · Zero-Trust

Designing and automating compliance-ready infrastructure for cloud and on-prem environments. Focused on ISO 27001, NIS2, and KRITIS-grade blueprints.

🛠 Technical Stack

  • IaC & Automation: Terraform, Ansible, Packer
  • Cloud: Microsoft Azure (AZ-104 certified)
  • Containers & Orchestration: Kubernetes (k3s), ArgoCD, Helm, Traefik
  • Networking & Security: MikroTik RouterOS, Zero-Trust NSGs, Private Link
  • Virtualization: Proxmox VE

📦 Enterprise Terraform Modules

Production-ready, compliance-grade Azure blueprints — full source, no lock-in.

Module What it solves
Azure Hub & Spoke — Zero-Trust Edition Zero-Trust NSGs, centralized Private DNS, DINE policy bypass
Azure Firewall — Forced Tunneling Edition Cycle-error-free deploy, KMS & Azure AD bypasses, dynamic IP Groups
Azure Acmebot — Enterprise VNet Edition Private Link isolation, Managed Identity, Let's Encrypt automation
Enterprise AI RAG — Zero-Trust Networking Azure OpenAI + AI Search, automated Shared Private Link, RBAC chaining

👉 woitzik.dev/templates

🏗 Open Projects

  • homelab-infrastructure — Full homelab IaC: Proxmox, k3s, MikroTik — Terraform + Ansible, GitOps via Atlantis

✍️ Writing

Deep dives on Azure, Terraform, and homelab engineering → woitzik.dev/blog

📬 Contact

LinkedIn | david@woitzik.dev

Popular repositories Loading

  1. homelab-infrastructure homelab-infrastructure Public

    Infrastructure as Code (IaC) for a multi-node hybrid homelab featuring Proxmox, MikroTik, and Azure integration.

    HCL 2

  2. dwoitzik dwoitzik Public

    Personal profile and technical Overview

  3. woitzik.dev woitzik.dev Public

    Source of woitzik.dev: an Astro blog about homelab operations, Kubernetes and Azure Terraform.

    MDX

  4. terraform-azurerm-acme-cert terraform-azurerm-acme-cert Public

    Terraform module for Let's Encrypt certificates in Azure Key Vault (Acmebot) in locked-down environments: Private Link, default-deny network rules, Managed Identity.

    HCL

  5. terraform-azurerm-hub-spoke terraform-azurerm-hub-spoke Public

    Terraform module for an Azure Hub & Spoke network: Zero-Trust NSGs, centralized Private DNS linked to every VNet, and a DINE policy bypass so Azure Policy remediation does not show up as drift.

    HCL

  6. terraform-azurerm-firewall-forced-tunneling terraform-azurerm-firewall-forced-tunneling Public

    Terraform module for Azure Firewall forced tunneling without the cycle error. KMS and Entra ID bypass routes, dynamic IP Groups, baseline FQDN policies.

    HCL