diff --git a/README.md b/README.md index 0cc26c5..c9d0846 100644 --- a/README.md +++ b/README.md @@ -1,3 +1,47 @@ +## About me + +# 👋 Hi there — I'm @thesabear + +![Profile Banner](https://img.shields.io/badge/Homelab-Explorer-blue?style=for-the-badge&logo=linux) +![Docker](https://img.shields.io/badge/Docker-Containers-blue?style=for-the-badge&logo=docker) +![Python](https://img.shields.io/badge/Python-Learning-yellow?style=for-the-badge&logo=python) +![Bash](https://img.shields.io/badge/Bash-Scripting-lightgrey?style=for-the-badge&logo=gnu-bash) + +I'm a curious, self-taught technologist who runs a real, multi-host homelab as a production-grade playground: a Proxmox hypervisor cluster hosting a fleet of VMs/LXCs, a two-zone Caddy reverse-proxy design fronted by Authentik SSO, self-hosted Gitea with Ansible-driven scheduled maintenance, and Terraform+Packer provisioning for bootstrapping new hosts from hardened, minimal images. What started as a hobby project has grown into a full-on journey into DevOps, automation, infrastructure, and security. + +My long-term goal is to build a career in IT — specifically in environments where learning never stops and innovation is part of the culture. + +--- + +## 👀 What I'm Exploring +I use my homelab as a real-world playground to deepen my understanding of core IT concepts. Some of the areas I'm actively exploring include: + +- Infrastructure-as-Code: provisioning and hardening hosts from scratch with Terraform + Packer + Ansible +- Reverse-proxy architecture and identity: a dual-zone Caddy setup (internal service-to-service vs. user-facing) fronted by Authentik forward-auth +- Workflow automation: Ansible for scheduled fleet maintenance, Kestra and n8n for everything else +- Monitoring, observability, and resilient service design + +Each project teaches me something new, and everything I learn pushes me further toward becoming a well-rounded IT/DevOps engineer. + +--- + +## 🌱 What I'm Learning Right Now +I'm currently focused on: + +- Refining the Ansible roles and playbooks that keep the fleet patched and consistent +- Tightening the Caddy/Authentik reverse-proxy and SSO design as new services get added +- Running my own self-hosted Gitea instead of relying on external platforms +- Improving scripting skills — Python and Bash are next on my list + +I enjoy understanding not just how something works, but how to automate it, secure it, and integrate it cleanly into a larger system. + +--- + +## ⚡ Fun Fact +I'm entirely self-taught. Every tool, trick, concept, and workflow in my repos is something I learned by doing — from reading docs to breaking my lab at 2 a.m. and fixing it again. + +--- + # thesabear's Homelab Most homelabs are a media server with some extra apps bolted on. This one is a platform: the same categories of systems a company's platform/security team owns — secrets management, zero-trust network segmentation, self-hosted CI/CD, human-gated fleet orchestration, a self-built SOC — run at homelab scale, for real, 24/7, by one person. @@ -131,49 +175,6 @@ Three independent recovery layers cover three different kinds of loss — a lost --- -## About me - -# 👋 Hi there — I'm @thesabear - -![Profile Banner](https://img.shields.io/badge/Homelab-Explorer-blue?style=for-the-badge&logo=linux) -![Docker](https://img.shields.io/badge/Docker-Containers-blue?style=for-the-badge&logo=docker) -![Python](https://img.shields.io/badge/Python-Learning-yellow?style=for-the-badge&logo=python) -![Bash](https://img.shields.io/badge/Bash-Scripting-lightgrey?style=for-the-badge&logo=gnu-bash) - -I'm a curious, self-taught technologist who runs a real, multi-host homelab as a production-grade playground: a Proxmox hypervisor cluster hosting a fleet of VMs/LXCs, a two-zone Caddy reverse-proxy design fronted by Authentik SSO, self-hosted Gitea with Ansible-driven scheduled maintenance, and Terraform+Packer provisioning for bootstrapping new hosts from hardened, minimal images. What started as a hobby project has grown into a full-on journey into DevOps, automation, infrastructure, and security. - -My long-term goal is to build a career in IT — specifically in environments where learning never stops and innovation is part of the culture. - ---- - -## 👀 What I'm Exploring -I use my homelab as a real-world playground to deepen my understanding of core IT concepts. Some of the areas I'm actively exploring include: - -- Infrastructure-as-Code: provisioning and hardening hosts from scratch with Terraform + Packer + Ansible -- Reverse-proxy architecture and identity: a dual-zone Caddy setup (internal service-to-service vs. user-facing) fronted by Authentik forward-auth -- Workflow automation: Ansible for scheduled fleet maintenance, Kestra and n8n for everything else -- Monitoring, observability, and resilient service design - -Each project teaches me something new, and everything I learn pushes me further toward becoming a well-rounded IT/DevOps engineer. - ---- - -## 🌱 What I'm Learning Right Now -I'm currently focused on: - -- Refining the Ansible roles and playbooks that keep the fleet patched and consistent -- Tightening the Caddy/Authentik reverse-proxy and SSO design as new services get added -- Running my own self-hosted Gitea instead of relying on external platforms -- Improving scripting skills — Python and Bash are next on my list - -I enjoy understanding not just how something works, but how to automate it, secure it, and integrate it cleanly into a larger system. - ---- - -## ⚡ Fun Fact -I'm entirely self-taught. Every tool, trick, concept, and workflow in my repos is something I learned by doing — from reading docs to breaking my lab at 2 a.m. and fixing it again. - ---- [![LinkedIn](https://img.shields.io/badge/LinkedIn-blue?style=for-the-badge&logo=linkedin&logoColor=white)](https://www.linkedin.com/in/michael-surgey) + [![Website](https://img.shields.io/badge/Website-blueviolet?style=for-the-badge&logo=google-chrome&logoColor=white)](https://nomadianation.thesabear.net/)