Infrastructure Monitoring
Grafana dashboards show uptime, CPU, memory, disk, container metrics, and system health.
Self-Hosted Infrastructure Platform
Infrastructure, security, monitoring, and automation built from scratch.
ByteGeist Cloud is a self-hosted infrastructure platform built on Ubuntu, Docker, Authentik, Grafana, Loki, Prometheus, CrowdSec, Gitea, and Woodpecker CI.
26Containers
20+Services
11Protected Apps
SSOAuthentik
CI/CDWoodpecker
Architecture Overview
Designed like a small production platform.
Traffic flows through Nginx Proxy Manager, access is controlled through Authentik, and the environment is monitored, logged, secured, backed up, and documented.
About ByteGeist
Built to prove real infrastructure skills.
- Centralized SSO and 2FA
- Monitoring and log aggregation
- Automated CI/CD pipelines
- Threat detection and response
- Backups and disaster recovery
- Technical documentation
Operations
Monitoring & Logging
Centralized Logging
Loki and Grafana provide searchable logs for containers and infrastructure troubleshooting.
Security
Identity & Threat Protection
Centralized Identity
Authentik provides SSO, OAuth2, OIDC, Forward Auth, access control, and 2FA.
Threat Detection & Response
CrowdSec detects malicious SSH activity and creates firewall decisions to block attackers.
Development
Git Hosting & CI/CD
Self-Hosted Git
Gitea hosts infrastructure code, documentation, project files, and portfolio development.
CI/CD Automation
Woodpecker runs automated pipelines connected to Gitea repositories.
Platform
Service Portal
Operations Portal
Dashy provides quick access to infrastructure, observability, and development services.
Service Catalog
Organized access to security tools, utilities, file management, and public sites.
Recovery
Documentation & Disaster Recovery
Recovery Planning
ByteGeist includes documented restore procedures, backup validation, service inventory, DNS information, recovery priorities, and full environment rebuild planning.
Technical Challenges
Problems Solved
OIDC Integration
Resolved redirect URI mismatches, user provisioning, and authorization issues.
Forward Auth
Integrated Authentik Forward Auth with reverse proxy protected services.
Observability
Built centralized metrics and logging using Grafana, Prometheus, Loki, and Alloy.
Security Hardening
Implemented SSH key-only login, Fail2Ban, CrowdSec, UFW, TLS, and SSO.
Core Skills Demonstrated
Linux Administration
Docker & Compose
Reverse Proxies
Networking
TLS / SSL
DNS Management
Identity Management
SSO / OAuth2 / OIDC
Monitoring & Observability
Centralized Logging
CI/CD Automation
Security Hardening
Threat Detection & Response
Backup Strategy
Disaster Recovery
Technical Documentation