Hybrid Cloud Engineer. Azure, Terraform, infrastructure automation.
I'm a Hybrid Cloud Engineer working mostly with Azure, Terraform, and Zero-Trust network design. At work I build production infrastructure. Here I publish the Terraform templates and write-ups I wanted when I was solving the same problems.
Right now I'm focused on Azure infrastructure for environments that have to pass ISO 27001, NIS2, and KRITIS audits.
kube-prometheus-stack on a small k3s cluster: no memory limit took down a 4GB node, then the TSDB filled its NFS volume. The real values that fixed both.
Read →StatefulSets with local PersistentVolumes don't survive node failures. CloudNativePG operator manages PostgreSQL replication, failover, and backups without depending on a distributed storage layer like Longhorn.
Read →Traefik's RateLimit middleware on k3s and the source criterion that decides whether it works. Why my Immich limit put every visitor into one bucket.
Read →HashiCorp Vault OSS on Kubernetes holds secrets for 25+ services. Bringing its policies, auth methods and roles under Terraform in 6 reversible stages, with zero Vault downtime.
Read →8 production-ready patterns for NSGs, Private Endpoints, Forced Tunneling, and Managed Identities. Sent to your inbox right after you sign up.
