DevOps Engineer
Building automated infrastructure for secure OS images, hardened containers, and platform migrations at one of Germany's largest hosting providers.
Automated OS Image Builds
Built pipelines for automatically building safe, production-ready Linux images delivered to end customers.
Hardened Container Security
Created CI/CD pipelines for secure container builds, triaging and fixing CVEs, attesting VEX files for supply chain transparency.
Virtuozzo → KVM Migration
Developed a converter to migrate legacy customer VMs from Virtuozzo to KVM, enabling platform modernization at scale.
Automated building of secure Linux images for customers
Hardened container builds with CVE fixes & VEX attestation
Virtuozzo to KVM conversion tooling
Build and delivery pipelines with GitLab CI
Scripting and automating operational workflows
The IONOS Image Factory
Most of my day-to-day happens inside the Image Factory: the team and the fully automated pipeline behind it. It pulls in upcoming Linux releases, layers on the IONOS-specific config, and keeps security scans and tests running constantly, so a new OS is production-ready the moment it ships. When Ubuntu 26.04 LTS launched, our customers could deploy it on day one, with nobody waiting around for an image to be hand-built.
The same idea carries past the OS images too. We build CVE-free application containers used across the entire IONOS Group, with triage and patching automated in the pipeline. I also helped build a converter that migrates legacy customer VMs from Virtuozzo to KVM, and wrote a good chunk of it myself, which is what lets us modernize the older platform without doing it by hand.
Fully Passive Proxmox Server
A completely silent, fanless server that runs 24/7. It's my container registry and self-hosted GitHub Actions runner, and it hosts pretty much everything I run at home. Home Assistant, media, the odd internal tool, it all lives here.
The Build: Zero Moving Parts
Fanless aluminium chassis with passive heatsink design
14 cores / 20 threads, 35W TDP: perfect for passive cooling
All-flash storage in a ZFS array: silent, fast, power efficient and reliable
Error-correcting memory for server-class reliability
Gallery
Energy Efficiency
Every part was picked for power efficiency as much as performance. With no fans and no spinning disks, the system drops into deep C-states most servers never reach, and it still runs ECC memory for the peace of mind.
Between the i5-13500T's 35W TDP, Powertop, and some custom LTR and ASPM tuning, it idles around ~15W, about what a light bulb pulls. And when I actually need the compute, all 14 cores and 20 threads are right there.
of 150W max
Homeserver Ansible: Infrastructure as Code
Ansible-based automation for managing my Proxmox homeserver. Handles SSH key deployment, power optimization with Powertop and Intel LTR, Docker service installation, and security hardening, all through a modular, role-based architecture.
Capabilities
- ▶Automated SSH key deployment across all hosts
- ▶Powertop auto-tuning & Intel LTR for deep C-states
- ▶Security hardening with firewall rules & unattended upgrades
- ▶Container registry for all personal projects
- ▶GitHub Actions self-hosted runner for CI/CD
- ▶Modular role-based Ansible architecture
Tech Stack
FirePhenix
Gaming Community Platform
A full-stack gaming community platform serving ~1000 users across multiple services. Built from scratch with a Flask/Valkey backend, Vue 3 frontend, custom Discord and TeamSpeak bots, and automated CI/CD, all running on self-managed infrastructure.
Features
- Flask REST API with Valkey-backed caching, rate limiting & pub/sub messaging
- MariaDB with parameterized queries, batch upserts & cross-platform data aggregation
- Custom Discord & TeamSpeak bots with real-time voice tracking and event-driven architecture
- Vue 3 + TypeScript + Pinia SPA with Chart.js dashboards and activity heatmaps
- Steam OpenID authentication with cross-platform account linking via verification codes
- Docker Compose orchestration: MariaDB, Valkey, TeamSpeak, Flask API, Vite frontend
- GitHub Actions CI/CD building images, publishing them, and triggering the self-hosted runner to update the Docker Compose stack
Tech Stack
→ Private Registry
Infrastructure
MariaDB, Valkey, TeamSpeak, Flask API and Vite frontend orchestrated via Docker Compose with health checks and dependency ordering.
Valkey-backed rate limiting with per-endpoint policies, Steam OpenID auth, HTTPONLY sessions, parameterized queries and cross-platform verification codes.
GitHub Actions builds and publishes images, then triggers the self-hosted HomeServer runner to pull updates and roll out the Docker Compose stack with health checks.
About Me
Well… this doesn't look like Berlin.
Kyoto, Japan. Turns out the homelab runs fine without me.
I've been tinkering with computers since I was a kid. It started with taking apart the family PC and running a Minecraft server for my friends, and somewhere along the way it turned into a real thing for infrastructure and self-hosting.
I like making things work end to end, from the code itself to the server it runs on to the pipeline that ships it. The part I enjoy most is building things people actually use, whether that's a gaming community or some small tool that makes a day a little easier.
I'm based in Berlin, and most of my spare time goes into the homelab. Usually that means pushing it a bit further, shaving off idle watts wherever I can, and finding the next thing to self-host.
Interests
Get in touch.
Want to work together, have a question about one of my projects, or looking for a DevOps and infrastructure engineer? Drop me a message.