Selected work

Projects beyond the papers

A practical portfolio of independent engineering work and self-hosted systems, kept distinct from the academic research described on the Research page.

Project descriptions are based on the supplied Docker Compose inventory. They describe deployed systems and their visible architecture without implying that every component was written from scratch.

Independent software projects

These projects are identifiable from the supplied deployment definitions. The descriptions focus on architecture and demonstrated integration rather than making claims about unprovided source code.

Custom web application

Harmonstream

A self-hosted video-streaming application deployed as separate frontend and backend containers. The backend has access to a read-only video library and shared stream storage; the deployment requests NVIDIA video and compute capabilities.

Frontend / backendDockerNVIDIATraefik
Backup and systems

Windrose backup service

A locally built backup daemon deployed through Compose, representing a dedicated service in the personal infrastructure rather than a generic third-party container.

LinuxDocker ComposeBackup automation
Computer vision / interaction

Gesture synthesis experiments

Two locally built container images, gesture-synth and gesture2, are deployed as separate services. The inventory confirms the projects exist but does not expose enough implementation detail to describe their algorithms accurately.

Custom containersExperimental software
Local AI environment

Private AI workstation

Ollama and Open WebUI provide local model serving and a browser interface, with SearXNG for metasearch and supporting services. This is a self-hosted environment for experimentation, not a claim of a publicly available AI product.

OllamaOpen WebUISearXNGGPU
Infrastructure as code

Compose-managed service platform

A multi-service deployment organized into Docker Compose stacks, with shared networks, Traefik host-based routing and automated TLS certificates. Portainer is used to manage the stack collection.

Docker ComposePortainerTraefikTLS

Personal infrastructure and self-hosting

The supplied Docker Compose inventory shows a substantial Linux-based home server environment. The services below are grouped by purpose rather than listing every container as a separate project.

Container platform & edge routing

Docker Compose and Portainer-managed stacks, shared Docker networks, Traefik reverse proxy, TLS certificate automation and host-based routing for services.

Docker ComposePortainerTraefikTLS

Monitoring, logs & security

Prometheus, Grafana, Loki, Promtail, cAdvisor and Netdata for metrics and observability; CrowdSec and GeoIP-aware log processing for defensive monitoring.

PrometheusGrafanaLokiCrowdSec

Local AI & development

Ollama and Open WebUI for local language-model serving, with SearXNG for metasearch and Jupyter for notebook-based experiments. A separate ComfyUI stack supports image-generation workflows.

OllamaOpen WebUISearXNGJupyterComfyUI

Media and media automation

Emby and Plex media servers, Audiobookshelf, Invidious, plus a custom Harmonstream video-streaming application with separate frontend and backend containers and NVIDIA video capabilities.

Media servicesNVIDIA runtimeCustom app

Collaboration & knowledge tools

Self-hosted collaboration, document and knowledge services including Nextcloud, Collabora, Matrix Synapse, Mattermost, BookStack, Wiki.js, ShareLaTeX, WriteFreely and other workspace applications.

Self-hostingDatabasesReverse proxy

Storage, backup & system services

Backup-related services, photo management with Immich, storage and network utilities, UPS/NUT monitoring, SMART disk monitoring, Folding@home, and dedicated game-server hosting.

Linux administrationStorageNetworking

Secure network paths

VPN-routed Transmission using Gluetun and WireGuard, alongside Tor bridge/client services and isolated Docker networks for selected applications.

WireGuardGluetunNetwork isolation

Small utilities & experiments

Compose-managed services for code-server, diagramming, whiteboarding, Markdown viewing, file sharing, web diagnostics, automation and assorted personal experiments.

AutomationWeb servicesCompose

Security note: the supplied Compose text contains credential-like values and internal paths. Those details have intentionally not been copied into this public-facing portfolio. Review and rotate any credentials that were real and have been shared outside their intended environment.