Skip to content

~/skills

Tools I've actually shipped with

Grouped by what they do. The note under each is where it was used — if there is no note, treat it as working familiarity rather than production depth.

46 tools, 8 categories

  • Cloud

    AWS

    AWS EC2

    Deployments, Auto Scaling Groups

    AWS ECS Fargate

    Production cluster, task definitions

    AWS ECR

    Image registry in CI

    AWS S3 & CloudFront

    Static hosting, CDN

    AWS ALB

    Path-based routing across services

    AWS IAM

    Task execution roles, OIDC trust policies

    AWS Client VPN

    Private network access to internal resources

    VPC & Networking

    Public/private subnets, NAT, route tables

    Linux

    CentOS, Ubuntu — server administration

    Other providers

    Hetzner Cloud

    Provisioning and managing cloud servers

    Hetzner Object Storage

    S3-compatible buckets

    RunPod

    GPU infrastructure for model deployment

  • Infrastructure as Code

    Terraform

    Production infrastructure provisioning

    Ansible

    Playbooks, roles, multi-server inventories

    Helm

    Chart-based Kubernetes releases

    Bash

    Automation, backup and monitoring scripts

    YAML / JSON

    Manifests, task definitions, workflows

  • Databases

    Supabase

    Postgres, auth, storage

    Row Level Security (RLS)

    Postgres policy-based access control

    PostgreSQL

    Schema design and queries

    AWS RDS

    Automated backups, SG troubleshooting

    MongoDB

    Document modelling for Node applications

  • Containers & Orchestration

    Docker

    Image builds, multi-stage, registries

    Docker Compose

    Multi-service local environments

    Kubernetes

    Cluster operations, workloads, networking

    k3s

    Self-managed cluster on a Hetzner cloud server

    ArgoCD

    GitOps continuous delivery

  • CI/CD

    GitHub Actions

    OIDC auth, matrix builds, deploy workflows

    Jenkins

    Pipelines integrating GitHub and Docker

    GitOps

    Declarative delivery via ArgoCD

    Git

    Branching strategies, PR-based workflows

  • Security & Secrets

    HashiCorp Vault

    Kubernetes auth method

    External Secrets Operator

    Syncing secrets into clusters

    AWS Secrets Manager

    Injected into ECS task definitions

    OIDC Authentication

    Removed static AWS keys from CI

    Snyk

    Dependency and SAST scanning as a pipeline gate

    Trivy

    Container image vulnerability scanning

    AWS WAF

    Edge filtering in front of CloudFront

  • Observability

    Prometheus

    kube-prometheus-stack

    Grafana

    Dashboards and alerting

    Loki & Promtail

    Cluster-wide log aggregation

    CloudWatch

    AWS-native metrics and logs

  • Development

    JavaScript / TypeScript

    Node.js & Express

    REST API design

    React

    Including this site

    Nginx

    Reverse proxy, TLS termination

← Back to experience