A five-stage GitOps pipeline diagram showing a Terraform deployment workflow. The stages, marked with green checkmarks, include OIDC Authentication, Terraform Plan (Fmt/Validate/Plan), AWS S3 Remote State Locking, Terraform Apply (deploying 13 DNS records and an Oracle VCN/Instance), and Branch Protection. The pipeline concludes with an 'Infrastructure Updated' globe icon.

Part 2: Infrastructure as Code with Terraform, OIDC, and a GitOps Pipeline

How I brought my hybrid cloud homelab under Terraform management — 13 Cloudflare DNS records, an Oracle Cloud instance, remote state in AWS S3, and a GitHub Actions pipeline with secretless OIDC authentication. No more clicking around in dashboards.

GitHub Actions workflow showing all five pipeline stages with green checkmarks — Gitleaks, CodeQL, Build Hugo, Lighthouse Audit, and Deploy to GitHub Pages.

Part 1: Building a Security-Gated CI/CD Pipeline with GitHub Actions

Learn how to build a professional, multi-stage DevSecOps pipeline for your portfolio site using GitHub Actions. This guide covers parallel security gates with Gitleaks and CodeQL, containerized Hugo builds, Lighthouse performance audits, and secretless OIDC deployments — no stored tokens.

An architectural diagram of a homelab automation loop. An icon for 'HOMELAB' points to 'BACKUPS,' which points to 'UPDATES,' which points to 'ALERTS,' which points back to 'HOMELAB.' In the center, Google Drive and Discord icons show their integration in the process.

Part 4: Automating a Homelab with Backups, Updates, and Alerts

A step-by-step guide to making your homelab self-maintaining. Learn to automate backups to Google Drive with rclone, manage container updates with Watchtower, and send proactive alerts to Discord using Prometheus and Alertmanager.

Architecture diagram showing an LLM-powered log triage pipeline with rules-based classification and DeepSeek-R1 summarization, delivering alerts to Discord.

Building an LLM-Powered Log Triage Pipeline with Python and DeepSeek-R1

How I built a Python automation that reads Docker container logs, classifies severity, and sends critical events to a self-hosted DeepSeek-R1 model for natural-language summarization — with alerts delivered to Discord every 15 minutes.

IT Support Specialist

Islington College | Kathmandu, Nepal