Automated Debian Server Hardening
Bash script suite that performs full CIS-Benchmark hardening on a fresh Debian 12 install: disabling unused services, enforcing password policies, configuring UFW, and setting up unattended upgrades.
Real-world scenarios I've tackled — from hardening Linux servers to building automated Office workflows.
Bash script suite that performs full CIS-Benchmark hardening on a fresh Debian 12 install: disabling unused services, enforcing password policies, configuring UFW, and setting up unattended upgrades.
Configured a production-ready Nginx reverse proxy with Let's Encrypt TLS termination, HTTP/2, Gzip compression, and rate limiting for three upstream Node.js applications on a single VPS.
Built a virtualised AD domain controller lab using VirtualBox with Windows Server 2022 + Ubuntu clients. Configured Group Policy Objects, folder redirection, and logon scripts for a simulated 50-user organisation.
A terminal dashboard script that polls CPU usage, memory, disk I/O, and network stats
every 5 seconds. Sends email alerts via sendmail when thresholds are breached.
Interactive Excel dashboard for an HR department using PivotTables, slicers, conditional formatting, and dynamic charts to visualise headcount, attrition, and performance data across 5 departments.
Deployed a SSH bastion host on Ubuntu with key-based authentication only, fail2ban intrusion prevention, and audit logging. Managed key rotation for 10 developers using a simple bash wrapper.
I'm open to internships, freelance IT work, and real-world collaborations.
Let's Talk →