Industrial Automation · Secure Gateways · Linux Systems Engineering · Cybersecurity

Based in Germany — developing on and for Linux.

Systems engineer and developer building robust, secure, and practical infrastructure for industrial environments and high-security systems.

Current focus areas:

• Network security appliances with TLS inspection and inline IPS (Suricata)
• Network discovery and scanning tooling
• Simulation & testing tools for industrial protocols (Modbus)
• Comprehensive Linux systems engineering knowledge bases

Strong focus on real-world deployability, security, clean architecture, and honest, evidence-based project maturity labeling.

• os-nxtgenappliance — Alpha / Pre-Production OPNsense security plugin: outbound TLS inspection with inline Suricata IPS, inbound reverse-proxy/WAF, enforced DoT DNS, identity-aware scoped policy
• Phimantic-IPS-Security-Appliance — standalone Suricata/TLS inspection appliance (C11 proxy, FlowBus verdict enforcement, fail-closed security model)
• squid-ng — laboratory and research proxy fork (Squid-based two-proxy TLS inspection with external IDS/IPS verdict path)
• advanced_network_scanner — cross-platform Rust LAN scanner with CLI-first architecture and optional WebSocket server

• advanced_modbus_server_dummy_endpoint — Modbus TCP simulation and testing server with browser-based dashboard

• linux-engineering-playbook — Linux systems engineering documentation: GPU/CUDA, Proxmox VE, Python environments, services and administration

Preserved pre-production snapshots. Frozen, read-only, kept for reference — not production-ready.

• fluux_control_runtime — archived pre-production hardware-control runtime snapshot
• fluux_control_gateway — archived pre-production WebSocket-to-MQTT gateway snapshot
• path-b-external-suricata-ips_v8.0-beta1-r11-preproduction-testing — archived pre-production Suricata/ICAP architecture and validation snapshot

For questions about a specific project, please use the issue tracker of the respective repository.