StationX and Udemy training turned into code: ARP spoofer, port scanner, keyloggers, C2 backdoor, hash cracker, brute-forcer, vulnerability scanner. Written to think like an attacker — obsolete now, but the homework was done.
PORTFOLIO NODE / ONLINE
LABS · PROJECTS · INFRASTRUCTURE · EXPERIMENTS
DUMMY OPS
LINUX · PYTHON · DEVOPS · CLOUD · AUTOMATION
Build it. Break it. Understand it. Automate it.
$
_
01 / REAL WORLD APPLICATION
PRODUCTION EXPERIENCE
A project that actually runs.
RUNNING
Not a mockup. Not a tutorial. A Flask + FastAPI micro-social platform on Docker Swarm — designed, broken, secured, and kept alive in production for years.
Nginx fronts the stack, Certbot delivers free HTTPS, hCaptcha keeps bots out. Behind the curtain: PostgreSQL, Celery chewing through a RabbitMQ broker with a Redis backend, HashiCorp Vault guarding the secrets, and SendGrid + Mailtrap carrying every email.
GitLab runs the CI/CD heartbeat — tests, build, publish on every master push. Terraform raises the DigitalOcean droplet, Cloudflare takes the hits, NameCheap owns the name, ConsentManager handles consent. Betterstack watches the logs, Codacy judges the code, Snyk + Aikido hunt app-level flaws and Lynis audits the system.
Even the tests have a story: TabNine and Cursor helped build the suite — and since 2026, Mistral-vibe finishes the test coverage. Fully AI-assisted, human-verified.
3+
YEARS IN PRODUCTION
90+
REAL BOOKS IN THE CATALOG
17+
REAL BOOKS CATEGORIES IN THE CATALOG
LIVE PLATFORM
REAL SCREENSHOTS / AUTO-ROTATING
01
/
06
CATALOG / STATS
USERS / STATS
CLOUDFLARE / SHIELD
BETTERSTACK / LOGS
SONARQUBE / QUALITY
OWASP ZAP / SCAN
LIVE APPLICATION / LOGICAL PATH
ONLINE
USER
HTTPS
CLOUDFLARE
EDGE
DIGITALOCEAN
COMPUTE
SWARM
RUNTIME
FLASK / API
APPLICATION
POSTGRESQL
DATA
CELERY
RABBITMQ
REDIS
VAULT
SENDGRID
BETTERSTACK
02 / LINUX LABORATORY
LPIC / SYSTEM ADMINISTRATION
Learn it. Repeat it.
17 virtual machines. One command: vagrant up. A disposable Linux laboratory for LPIC certification — and for breaking things on purpose.
DNS primary and secondary, Kerberos KDC, OpenLDAP, vsFTP, Squid with and without SSL bumping, Dovecot mail, OpenVPN, a bastion with its own SSH certificate authority, Bacula backups, NAS storage and a log analyzer — every machine plays a real infrastructure role, provisioned by Ansible.
From RHEL 4-era habits to today's systemd and firewall-cmd world: LUKS, self-signed CAs, TSIG keys, nmap, SELinux thinking. A lab built to be destroyed and rebuilt — that's the point.
DNS / DHCP
VSFTP / SQUID
KERBEROS / LDAP
NAS / LUKS
ANSIBLE
NMAP / BACULA
LAB EVIDENCE
REAL SESSIONS / 17 VMS
01
/
06
ANSIBLE / PING
BASTION / SSH CA
SQUID / SSL BUMP
DNS / TSIG
OPENLDAP
BACULA / BACKUP
03 / CI-CD · AWS
DELIVERY LABORATORY
Commit to cloud.
DEMO / LEARNING
PIPELINE / EXECUTION PATH
LIVE SIMULATION
GITHUB
WEBHOOK
JENKINS
PIPELINE
MAVEN
WAR BUILD
DOCKER
DOCKERHUB
EKS
KUBERNETES
ALB
ROUTING
jenkins@controller
LIVE / 4 ROUTES
EKS / CLUSTER
JENKINS / CI
AWS / CONSOLE
WAZUH / MONITORING
Three pipelines, one GitHub push: Tomcat standalone (Maven WAR), Docker containers to DockerHub, and Kubernetes on EKS. An Application Load Balancer routes HTTPS by path prefix to whichever target you want to watch.
Packer bakes the golden image, Terraform raises the infrastructure (state in S3), Ansible finishes the configuration. Wazuh watches over everything. Costs mean the lab wakes on demand — as a live POC of the whole chain.
SOUNDTRACK SLOT
SUNO MUSIC / COMING HERE
04 / CLOUD DELIVERY
RENDER
DEPLOY
GITHUB
TEST
CIRCLECI
POETRY
COVERALLS
SMALL PIPELINE / FAST FEEDBACK
Build small. Ship often.
A Django blog, backend-first, pushed to Render by CircleCI — the same DevOps ideas, deliberately fewer moving parts.
In production: native Python on Render. No Docker, no Gunicorn, no Nginx. Locally: the full container experience with Gunicorn and Nginx via docker-compose. CircleCI runs the workflow, Coveralls tracks coverage, Poetry keeps dependencies honest.
And the honest lesson of free tiers: instances spin down when idle, so the first visitor after a nap waits 50+ seconds. Cold starts, live, as a feature.
PIPELINE MEDIA
LIVE DEMO / SCREENSHOT
01
/
01
DJANGO / RENDER
05 / HOMELAB
INFRASTRUCTURE LAB
Proxmox Laboratory
Proxmox since v6 — six to seven years of homelab. Today the cluster explores Ceph for distributed storage, and the LPIC lab runs live topologies inside it.
CLUSTER ONLINE
CLUSTER TOPOLOGY
WITH CEPH
02
PROXMOX NODES
01
NAS NODE
01
CLUSTER
LAB ILLUSTRATIONS
PROXMOX / NODES / LOGICAL VIEW
01
/
04
NODE 01
NODE 02
ODROID / NAS
LOGICAL VIEW
TECHNOLOGY INVENTORY
LAB ENVIRONMENT
ANSIBLEAPACHEGALERA
GLUSTERFSPCSDJANGO
DNSDHCPDOCKER
DOCKER SWARMDOVECOT
ELASTICSEARCHFASTAPIFLASK
GITLABGLPIGRAFANA
HAPROXYJENKINSMARIADB
MAXSCALEMEDIAWIKIMEMCACHED
NAGIOSNEXUSNGINX
OPENLDAPOPENSCAPOPENVAS
POSTGRESQLPROMETHEUSRUNDECK
SQUIDTERRAFORMVARNISH
VAULTWILDFLYCEPH
MONITORING
Linux distributions
Volontairement, des versions obsolètes sont laissées en place.
05 / 01 · TECH RADAR
INSTANT NEWS / ONE PICK
One signal from the noise.
AUTO / 30s
06 / CONTINUOUS LEARNING
ABOUT / CURRENTLY EXPLORING
The lab is never finished.
Infrastructure is an excuse to keep learning.
Operating systems, Python, networking, cloud, automation, security — they only make sense when they're wired together through real projects.
CURRENT MODE
BUILD / TEST / REPEAT
OTHER PROJECTS
OPEN SOURCE / EXPERIMENTS
VIEW ALL
ANSIBLE / GLPI / PANDAS
Dynamic Inventory
PRIVATE / CYBERSECURITY LAB
Ethical Hacking Playground
NOT YET ON SCM
CMDB to automation: an Ansible inventory generated straight from GLPI, one Pandas transformation at a time.
OPEN REPOSITORY FLASK / RABBITMQ / CELERY Async Task LabThe Flask + RabbitMQ + Celery pattern from the main webapp, distilled to its simplest moving parts.
OPEN REPOSITORY DOCKER / FAIL2BAN / MODSECURITY Dockerized DVWATwo projects in one: run the deliberately vulnerable app, then learn to jail it with fail2ban and filter it with ModSecurity.
OPEN REPOSITORY PACKER / TERRAFORM / ANSIBLE AWS CI/CD POCGolden image, provisioned infra, post-config — then a micro CI/CD chain at work. A live "how" demonstration, on demand.
OPEN REPOSITORY SPRING / TOMCAT / EKS Crook OpsA satirical single page about the bad IT habits we all meet in prod — shipped through Jenkins, Ansible and EKS.
OPEN REPOSITORY ANSIBLE / AUDIT Compiled Software SignaturesBecause package managers can't see what was compiled by hand: a JSON fingerprint file, set and updated by Ansible.
OPEN REPOSITORY
LINUXPYTHONDEVOPS
NETWORKINGANSIBLEDOCKER
KUBERNETESCLOUD
SECURITYMONITORING