IT support engineer building Linux infrastructure in public. Working on getting better than yesterday.
I work in 1st and 2nd line support at an MSP in London. I spend my evenings learning Linux currently and building projects to put what I'm learning into practice.
An Ubuntu server built from scratch in a Multipass VM, then locked down. A dedicated admin user with sudo, key-only SSH with password and root login disabled, and a UFW firewall that denies all incoming traffic except SSH, HTTP and HTTPS.
This site, deployed on AWS using Terraform. Content stored in a private S3 bucket, served globally over HTTPS via CloudFront with Origin Access Control so the bucket stays private. TLS certificate managed by AWS Certificate Manager. DNS handled by Cloudflare. Terraform state stored remotely in S3 with DynamoDB state locking.
Notes on what I'm building and learning, mostly for my own benefit.