Full-stack product engineering
Next.js on the front, a typed data layer behind it, and the boring-but-critical parts — auth, payments, email — wired in properly instead of faked.
Software · Infrastructure · Design
I build systems that carry
the whole weight themselves.
From the database and the reverse proxy to the last pixel of the interface — one coherent stack, self-hosted, and owned end to end.
What I actually do
Not a menu of buzzwords — a short list of things I take responsibility for, from first commit to the pager going off at 3am.
Self-hosted infrastructure
Docker Compose stacks with a single reverse proxy, private internal networks, and databases that never touch the public internet.
Security-first file & data handling
Per-file envelope encryption, scoped share links, and access layers that assume the worst — no object is ever one guessed URL away.
Design that gets out of the way
A single design system in tokens, carried by type and whitespace, so the content is the thing you notice — not the chrome around it.
Recent work
All projects →- Running
Self-hosted presence platform
A single compose stack running auth, commerce, CRM, analytics and encrypted file sharing behind one Next.js front door.
- In progress
Encrypted file vault
Per-file envelope encryption with share links, access codes, and streaming decryption for media — no object ever leaves the auth layer.
- Planned
Carrier tracking sync
A scheduled job that reconciles package tracking numbers against carrier APIs and surfaces status on the user dashboard.
Imagery is placeholder (Lorem Picsum) pending real screenshots.