Skip to content
View variablenix's full-sized avatar
🎧
Focusing 💻
🎧
Focusing 💻
22 followers · 30 following

Achievements

Achievement: YOLOAchievement: Pair Extraordinairex2Achievement: QuickdrawAchievement: Pull Sharkx3Achievement: Arctic Code Vault ContributorAchievement: Starstruck

Achievements

Achievement: YOLOAchievement: Pair Extraordinairex2Achievement: QuickdrawAchievement: Pull Sharkx3Achievement: Arctic Code Vault ContributorAchievement: Starstruck

Highlights

  • Pro

Organizations

@KDN-Cloud

Block or report variablenix

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
variablenix/README.md
Marshmellow the cat

AK

Network Architect  •  Infrastructure Engineer  •  Automation Engineer  •  Homelab Enthusiast

Automation powered Enterprise architecture standards Infrastructure as code active Security hardened CrowdSec IDS/IPS active 99.9 percent uptime

System Overview

I build reliable, secure, and automated systems across enterprise infrastructure and containerized environments. My approach combines production-grade observability, CI/CD practices, and isolation by design so services remain resilient as they scale.

Technical Arsenal

🌐 Networking

pfSense firewall
Active VLAN segmentation
VPN and WireGuard
Strict firewall management

🤖 Automation & IaC

Terraform
Ansible
Python and Bash

🐳 Infrastructure

Docker
Dockhand
Proxmox and ESXi virtualization

⚙️ DevSecOps

Self-hosted Gitea
GitHub cloud source control

🔐 Security & Identity

Authentik IAM and SSO MFA enforced
OIDC and SAML enabled SSL and TLS hardened

📊 Observability

Grafana Prometheus
InfluxDB Telegraf

🏠 Homelab Blueprint

My private lab is the R&D environment for my professional work—a place to test configurations before they reach production.

  • Automation first: Version-controlled Ansible playbooks and Terraform manifests manage server state and deployments.
  • Hardened security: pfSense at the edge, strict inter-VLAN routing, local recursive DNS with Unbound, and automated TLS certificate rotation.
  • Production-at-home observability: Centralized monitoring built around a 99.9% uptime standard.

🏗️ Homelab Stack

Tools, services, and projects powering KDN Lab.

pfSense firewall Active VLAN segmentation Unbound recursive DNS Terraform infrastructure as code Ansible configuration management Docker containerization Dockhand container management Proxmox and ESXi virtualization WireGuard VPN CrowdSec IDS and IPS Authentik IAM and SSO MFA enforced OIDC and SAML enabled SSL and TLS hardened Self-hosted Gitea GitHub cloud source control Automated CI and CD Automated TLS certificate rotation Grafana observability Prometheus monitoring InfluxDB time series database Telegraf metrics

🎵 Beyond the Terminal

Ableton Live 11 Studio One 6 Roland TR-808 Roland TR-909 Roland Boutique series Analog and digital drum machines Synthesizers and sound design

When I’m not configuring subnets, I’m at The Sound Booth, exploring audio engineering, studio automation, and generative audio-visual systems.

GitHub Foundations badge GitHub administrator badge

Pinned Loading

  1. kdn-observability-stack kdn-observability-stack Public

    Production-grade Grafana dashboards for a 10+ node Proxmox lab, featuring CrowdSec, UniFi, and GitOps monitoring. Sanitized for public distribution.

    Python

  2. cups-prometheus-exporter cups-prometheus-exporter Public

    Prometheus exporter for CUPS print server: exposes printer status, job counts, and scheduler health as metrics. Docker-ready with Grafana dashboard support.

    Python 2

  3. dotfiles dotfiles Public

    The core essentials of my CLI workflow. Contains custom shell aliases for speed, a clean Vim configuration, and a persistent Tmux environment.

    Vim Script

  4. GoBot GoBot Public

    Extensible Go IRC bot with TLS/SASL, multi-network support, plugins, games, reminders, URL titles, and Prometheus metrics.

    Go 1

  5. relay-soju-runbook relay-soju-runbook Public

    An operational runbook for deploying Soju IRC bouncer with Relay IRC client, including DNS-01 TLS certificates, CertFP/SASL authentication, network migration, backups, and troubleshooting.

  6. KDN-Cloud/ops-ref KDN-Cloud/ops-ref Public

    Quick-reference sheets for git, vim, bash, docker, and beyond.

    1