Systems.
Security.
Odd machines.

Commerce systems,
search & platform engineering.

Since 2009, working on the machinery behind an established European design-lighting shop: product data, native search and enrichment, ERP and internal tooling, payments, security, technical SEO, automation, compliance and the operational systems that keep a long-running e-commerce platform moving.

Hardening the edge.
Without confusing signals with trust.

A living field guide to operating nginx as an internet-facing security edge: protocol lanes, ALPN shunting, H1 containment, HTTP/2 and HTTP/3, CIDR-backed crawler and service policy, Lua policy orchestration, resource-cost controls, proxy trust boundaries, request lifecycle and observable fail-closed behavior.

Small HTTPS stack.
Strong opinions.

The successor to nsb2 and TinX: a deliberately small, modern HTTPS stack built from nginx, BoringSSL and strong opinions. The original projects were already experimenting with TLS 1.3 before the standard was finished, X25519, post-quantum KEMs, SipHash-backed file caching and Argon2-based basic auth. Some of those choices looked unusually opinionated at the time and considerably less so in hindsight. nxTLS keeps that philosophy, but rebuilds it around pinned upstream components, a minimal patch delta and a reproducible Debian build.

The philosophy survives. The fork debt does not.

Diagnosis as a
navigable system.

A living diagnostic and knowledge explorer for the Audi A2: system topology, evidence, failure paths, components, 3D context and a growing model of how the car actually behaves when the wiring decides to become creative.