
A private cloud and homelab architecture using Tailscale, Caddy, private DNS, browser-trusted TLS, nftables, and DOCKER-USER filtering to keep internal services reachable to trusted devices only.

A retired Dell OptiPlex turned into an always-on private homelab for remote LAN access, containerized services, reverse proxying, and trusted internal HTTPS.

A WordPress hardening project that combines Cloudflare edge security, a custom security plugin, browser-enforced policies, reduced default exposure, and a passkey-only admin login.