What I run
INFRASTRUCTURE & AUTOMATION CONESTOGA COLLEGEI run a live six-machine fleet - two Linux boxes, a Windows host, two remote VPSes and a media server at home, all on one encrypted mesh. Containers, reverse proxy, datastores with restores I have actually tested. I automate the work that used to be manual and file the findings somewhere a person will act on them. Then I write it down, because infrastructure nobody else can operate is just a hobby.
Noah Medd
I build infrastructure and then automate looking after it. Six machines, containers, TLS and a firewall that only opens what a service actually needs - with scheduled audits and vulnerability scans that end up somewhere a person will act on them.
Machines operated
6
two Linux boxes (Mint, Arch), one Windows host, two VPSes, a home media server
Production services
4
microblogging, bookmarks with full-text search, notes, admin dashboard
Monitoring engine
Self-healing
found under its own pipeline, root-caused, patched, then re-verified the same way
Datastores administered
5
PostgreSQL, SQLite, MySQL, SQL Server, MongoDB - backups with tested restores
Network & infrastructurerunning since Jan 2026
- MeshSix machines, one encrypted tunnelTwo Linux workstations (Mint and Arch), a Windows host, two remote VPSes and a home media server - all reachable over Tailscale, with SSH relay between them.Personal env
- IsolateFirewall policy, network segmentationEvery service locked to only its required ports; each workload on its own Compose network instead of a flat host surface.Personal env
- PublishCaddy reverse proxy, TLSHostname-based routing, so internal services resolve by name without publishing individual ports.Personal env
- RunFour production servicesDjango/FastAPI microblogging, Karakeep bookmarks with Meilisearch indexing, Memos notes, an admin dashboard - with a maintained service inventory.Personal env
Automation & security opsunattended, on schedule
- HourlyAudit pipelineScans the project tree for file and service anomalies, verifies service health, and routes findings into a ticketing queue for remediation.Self-directed
- DailyDependency vulnerability scanningnpm and Python packages across the whole tree - results filed into the remediation queue rather than a log nobody reads.Self-directed
- HardenSHA-256 write verificationIntegrity checks on file operations, plus prompt-injection hardening across every service gateway to keep untrusted input out of privileged paths.Self-directed
- AdminRoutine administration automatedFilesystem tasks, account provisioning, log parsing with regex, scheduled process execution - in Python and Bash.Self-directed
Storage & continuityrecoverable, not hopeful
- DataDatastores behind live servicesMeilisearch for full-text search, SQLite for application state, PostgreSQL for relational workloads - schema setup and query tuning.
- RestoreBackup practice that gets testedMaintained so any service recovers from a known-good state rather than being rebuilt after a failure.
- MoveLive migration across a platform boundaryA memory database over 76MB moved from WSL to Windows, with integrity validated after the move.
- TrackConfiguration under version controlChanges reviewable, revertible and attributable - managed infrastructure, not a one-off setup.
Skillsused on something live
- SystemsLinux (Arch/EndeavourOS, WSL2), Windows 10/11, Windows ServerActive Directory, SELinux, LVM - install, configure, troubleshoot and maintain across the full lifecycle.
- NetworkTCP/IP, DNS, DHCP, subnetting, routingTailscale mesh VPN, UFW, Caddy reverse proxy, SSH relays, TLS, structured cabling, malware mitigation.
- ContainersDocker, Docker Compose, PodmanVM templates, live migration, virtual switches, iSCSI SAN, NAS, high availability.
- DataPostgreSQL, SQLite, MySQL, MS SQL Server, MongoDBMeilisearch full-text indexing, relational design, SQL, logical and physical backup and restore.
- CodePython (Django, FastAPI), Bash, JavaScript, Swift, regex, SQLAutomation and process scheduling; version control with Git.
- ServiceITIL lifecycle, incident and problem managementRoot cause analysis, change management and RFCs, SLAs/OLAs, CMDB, KPIs, Jira, Microsoft 365.
Backgroundeducation · self-directed · work
- Sep 2025 - Aug 2027Conestoga CollegeComputer Systems Technician - Information Technology Infrastructure and Services. Expected graduation August 2027.Kitchener, ON
- Jan 2026 - presentMulti-node self-hosted infrastructureThree project areas: network and infrastructure deployment; automation and security operations; storage and service continuity.Personal env
- Jun 2022 - Aug 2023General Construction Labourer - Z ModularInstalled doors, windows and vanities to spec, verifying fit against drawings before handoff. Inspected completed modules against quality criteria and caught defects before final assembly. Sustained output under fixed deadlines by sequencing work and staging materials ahead.Kitchener, ON
- Apr 2020 - Jul 2021Cashier / Merchandiser - DollaramaProcessed transactions accurately at pace under COVID-19 capacity restrictions, reconciling cash without slowing the line. Kept aisles faced and merchandised to item-flow protocol; rotated backroom overstock so floor availability held without overflow.Kitchener, ON
What I actually do
- Design, deploy and operate the environment - build through hardening, monitoring and upgrade.
- Automate the checking: scheduled audit passes, dependency scanning, and a queue where findings actually get worked.
- Keep services recoverable: datastores administered, backups tested by restoring them, configuration in version control.
- Work analytically - structured diagnostics, root cause before patch, and a written record afterward.
What I'm looking for
- A Winter 2027 four-month co-op - systems administration, infrastructure, or service desk.
- Graduating August 2027: Computer Systems Technician, IT Infrastructure and Services.
- Environments where infrastructure is something you operate, document and hand over - not something you set up once and hope about.
Say hellono form, just a link