~/skills
Tools I've actually shipped with
Grouped by what they do. The note under each is where it was used. If there is no note, treat it as working familiarity rather than production depth.
55 tools, 8 categories
Cloud
AWS
AWS EC2
Deployments, Auto Scaling Groups
AWS ECS Fargate
Production cluster, task definitions
AWS ECR
Image registry in CI
AWS S3 & CloudFront
Static hosting, CDN
AWS ALB
Path-based routing across services
AWS IAM
Task execution roles, OIDC trust policies
AWS Client VPN
Private network access to internal resources
VPC & Networking
Public/private subnets, NAT, route tables
Linux
CentOS, Ubuntu server administration
Other providers
Hetzner Cloud
Provisioning and managing cloud servers
Hetzner Object Storage
S3-compatible buckets
RunPod
GPU infrastructure for model deployment
Infrastructure as Code
Terraform
Production infrastructure provisioning
Ansible
Playbooks, roles, multi-server inventories
Helm
Chart-based Kubernetes releases
Bash
Automation, backup and monitoring scripts
YAML / JSON
Manifests, task definitions, workflows
Databases
Supabase
Postgres, auth, storage
Row Level Security (RLS)
Postgres policy-based access control
PostgreSQL
Schema design and queries
AWS RDS
Automated backups, SG troubleshooting
MongoDB
Document modelling for Node applications
Containers & Orchestration
Docker
Image builds, multi-stage, registries
Docker Compose
Multi-service local environments
Kubernetes
Cluster operations, workloads, networking
kubeadm
Bootstrapping and upgrading clusters
k3s
Self-managed cluster on a Hetzner cloud server
ArgoCD
GitOps continuous delivery
CI/CD
GitHub Actions
OIDC auth, matrix builds, deploy workflows
Jenkins
Pipelines integrating GitHub and Docker
Bitbucket
Repository hosting and Bitbucket Pipelines
GitOps
Declarative delivery via ArgoCD
Git
Branching strategies, PR-based workflows
DevSecOps
Snyk
Dependency and SAST scanning as a blocking pipeline gate
Trivy
Container image vulnerability scanning before push
HashiCorp Vault
Kubernetes auth method
External Secrets Operator
Syncing secrets into clusters
AWS Secrets Manager
Injected into ECS task definitions
OIDC Authentication
Removed static AWS keys from CI
AWS WAF
Edge filtering in front of CloudFront
Least-privilege IAM
Scoped roles and policies per service
Compliance
Delve
Compliance automation
SOC 2
Infrastructure controls and evidence collection
GDPR
Data residency, retention and access control
AWS KMS
Encryption at rest for storage and databases
CloudTrail & audit logging
Traceability of who changed what
Container Insights
AWS compliance and monitoring checks
Observability
Prometheus
kube-prometheus-stack
Grafana
Dashboards and alerting
Loki & Promtail
Cluster-wide log aggregation
CloudWatch
AWS-native metrics and logs
Development
JavaScript / TypeScript
Node.js & Express
REST API design
React
Including this site
Nginx
Reverse proxy, TLS termination