diff --git a/README.md b/README.md
index 87bfeb7..106c875 100644
--- a/README.md
+++ b/README.md
@@ -22,13 +22,13 @@
 
 I'm a curious, self-taught technologist who runs a real, multi-host homelab as a production-grade playground. Most homelabs are a media server with some extra apps bolted on. This one is a platform: The same categories of systems a company's platform/security team owns, run at homelab scale, for real, 24/7, by one person. What started as a hobby project has grown into a full-on journey into DevOps, automation, infrastructure, and security;
 
-- <strong style="font-size:1.15em;">Proxmox</strong> — a hypervisor cluster running a fleet of hardened VMs/LXCs provisioned via Terraform
-- <strong style="font-size:1.15em;">Terraform + Packer</strong> — for bootstrapping new hosts for the fleet, from hardened, minimal images and continuously re-hardened by Ansible
-- <strong style="font-size:1.15em;">HashiCorp Vault</strong> — issuing PKI certs and managing every application secret
-- <strong style="font-size:1.15em;">Caddy + Authentik</strong> — a two-zone reverse-proxy design fronted by SSO, behind pfSense and firewalld for real network segmentation
-- <strong style="font-size:1.15em;">Kestra</strong> — human-gated fleet orchestration across the fleet, scheduled flows backed by Ansible roles and playbooks
-- <strong style="font-size:1.15em;">Gitea</strong> — a self-hosted registry building and shipping every container image in-fleet
-- <strong style="font-size:1.15em;">Wazuh + Dashy</strong> — a self-built SOC watching all of it
+- <strong style="font-size:1.4em;">Proxmox</strong> — a hypervisor cluster running a fleet of hardened VMs/LXCs provisioned via Terraform
+- <strong style="font-size:1.4em;">Terraform + Packer</strong> — for bootstrapping new hosts for the fleet, from hardened, minimal images and continuously re-hardened by Ansible
+- <strong style="font-size:1.4em;">HashiCorp Vault</strong> — issuing PKI certs and managing every application secret
+- <strong style="font-size:1.4em;">Caddy + Authentik</strong> — a two-zone reverse-proxy design fronted by SSO, behind pfSense and firewalld for real network segmentation
+- <strong style="font-size:1.4em;">Kestra</strong> — human-gated fleet orchestration across the fleet, scheduled flows backed by Ansible roles and playbooks
+- <strong style="font-size:1.4em;">Gitea</strong> — a self-hosted registry building and shipping every container image in-fleet
+- <strong style="font-size:1.4em;">Wazuh + Dashy</strong> — a self-built SOC watching all of it
 
 ## The decision that shows the most