Kent, UK

76 project entries

Matching projects move into a live results grid directly below this search. Choose a topic or type a technology, service or outcome.

Deployment notes are included where the project is reproducible.

Software case studies use representative, sanitised commands or setup steps. Hardware repair, licensed enterprise products and professional-client work use operational workflows instead of publishing credentials, proprietary installers or unsafe copy-and-paste instructions.

Browse projects by topic

Use these topic links alongside the project search to find related case studies and supporting evidence.

Community & supportCommunity support

1337 Systems repair and support

No-labour-cost diagnostics, repairs, upgrades and practical help for families and small organisations.

1337 Systems
See community support

Virtualisation & storage

Virtualisation & storageVirtualisation

Proxmox VE 9 operations

VMs, LXCs, migrations, backups, storage faults and platform upgrades.

Proxmox
See what I did

Networking & secure access

Networking & secure accessSecure access

Pangolin and Tailscale bridge

Private routed access plus controlled service publishing through Newt.

Pangolin identification markTailscaleWireGuard
See what I did

Monitoring & security

Monitoring & observabilityObservability

Zabbix and Wazuh

Infrastructure monitoring, endpoint security, alerting and incident investigation.

ZabbixWazuh
See what I did
Collaboration & communicationsVoice

3CX behind pfSense

STUN, full-cone testing, rotating reply addresses and firewall rule ordering.

3CX identification markpfSense
See what I did

Containers & self-hosting

Collaboration & communicationsSelf-hosting

Nextcloud and Matrix

Private collaboration, Synapse federation and shared TURN infrastructure.

NextcloudMatrixElement
See what I did

Media, cameras & home services

Media, cameras & homeCCTV

Agent DVR and Shinobi

Private camera access, reverse-proxy constraints and direct VPN access.

Agent DVR identification markShinobi identification mark
See what I did
Containers & self-hostingContainers

Docker and Portainer

Multi-host container lifecycle, Hawser management, storage faults, AshleyMine and ARM64 lab deployment.

DockerPortainer
See what I did

Automation, development & AI

Operating systems & deploymentLinux

CachyOS, Linux and Android

Desktop graphics/audio debugging, cross-distro Linux work and rooted mobile experimentation.

Linux
See what I did
Networking & secure accessRouting

Proton VPN exit routing

Tailscale exit-node routing with watchdog and failure recovery.

Proton VPNTailscaleWireGuard
See what I did

Identity, administration & endpoints

Identity & administrationPolicy

Family Linux controls

Per-user DNS and application policy without breaking the administrator account.

AdGuard HomeTailscale
See what I did
Automation, development & AIAutomation

Ansible server baselines

Realistic configuration-management work for repeatable Linux administration.

Ansible
See what I did
Media, cameras & homeMedia

Jellyfin media server

Self-hosted media streaming — a free, open-source alternative to Plex with no telemetry or premium-locked features.

JellyfinDocker
See what I did
Monitoring & observabilityMonitoring

Zabbix monitoring

Enterprise-grade infrastructure monitoring with agents, alerting, SNMP and database-backed trend analysis.

Zabbix
See what I did
Monitoring & observabilityMonitoring

Cacti monitoring

Custodian data-centre graphing for temperatures, power draw, servers and cooling systems.

Cacti identification mark
See what I did
Media, cameras & homeMedia

Immich photo management

Self-hosted Google Photos replacement with AI search, facial recognition and automatic mobile backup.

ImmichDocker
See what I did
Media, cameras & homeAutomation

Home Assistant

Local-first home automation — controlling smart devices without cloud dependency or vendor lock-in.

Home Assistant
See what I did
Networking & secure accessNetworking

ProtonProxy egress testing

Comparing direct VPN traffic with routed exit-node designs under restrictive application-control policy.

Proton VPNTailscaleWireGuard
See what I did
Networking & secure accessSecurity

AdGuard Home DNS

Network-wide ad blocking, tracker filtering and per-client DNS policy for the whole household.

AdGuard Home
See what I did
Automation, development & AIDevelopment

Gitea self-hosted Git

Private version control for infrastructure code, Ansible playbooks and documentation.

Gitea
See what I did
SecurityEnterprise

Rapid7 vulnerability management

Enterprise vulnerability scanning and security monitoring, deployed commercially at ITHQ.

Rapid7
See what I did
SecurityEnterprise

SentinelOne endpoint protection

AI-powered endpoint detection and response, deployed across client systems at ITHQ.

SentinelOne identification mark
See what I did
Virtualisation & storageEnterprise

VMware Workstation

Desktop virtualisation for testing, isolated environments and lab experiments.

VMware identification mark
See what I did
Identity & administrationEnterprise

Active Directory

Windows Server domain services, group policy and centralised authentication.

Microsoft technology mark
See what I did
Identity & administrationEnterprise

Microsoft 365

Cloud identity, email, productivity and collaboration administration.

Microsoft technology mark
See what I did
SecurityEnterprise

Fortinet and FortiGate

Enterprise next-generation firewalls, DPI and application-layer VPN policy.

Fortinet identification mark
See what I did
Networking & secure accessNetworking

Cisco networking

Enterprise routing, switching and structured cabling from live data-centre work.

Cisco
See what I did
SecuritySecurity

Wazuh SIEM

Open-source security monitoring, endpoint detection and compliance.

Wazuh
See what I did
Media, cameras & homeMedia

Navidrome music server

Self-hosted music streaming with Subsonic-compatible mobile apps.

Navidrome
See what I did
Monitoring & observabilityMonitoring

Uptime Kuma

Self-hosted uptime monitoring with status pages and notifications.

Uptime Kuma
See what I did

Infrastructure projects

Collaboration & communicationsSync

Syncthing file sync

Decentralised, encrypted peer-to-peer file synchronisation.

Syncthing
See what I did
Containers & self-hostingPrivacy

SearXNG private search

Self-hosted metasearch engine — private, untracked web search.

SearXNG identification mark
See what I did
Containers & self-hostingContainers

Portainer management

Web-based Docker container management across multiple hosts.

Portainer
See what I did
Automation, development & AIAI

Open WebUI

Self-hosted AI chat interface running language models locally.

Open WebUI identification mark
See what I did
Identity & administrationIsolation

Kasm workspaces

Containerised browser isolation and streaming desktops.

Kasm
See what I did
Containers & self-hostingGaming

Crafty Minecraft

Self-hosted Minecraft servers for family and friends.

Crafty identification markDocker
See what I did
Containers & self-hostingWeb

WordPress self-hosting

PHP/MySQL web application stack administration.

WordPress identification markPHP
See what I did
Networking & secure accessNetworking

pfSense firewall

VLANs, NAT, DNS, Snort, pfBlockerNG, ntopng and VPN at the network edge.

pfSenseSnort
See what I did
Networking & secure accessNetworking

Tailscale mesh VPN

WireGuard-based mesh VPN connecting every device securely.

TailscaleWireGuard
See what I did
Containers & self-hostingContainers

Dockhand Docker management

Containers, Compose stacks and remote Docker hosts through Dockhand and Hawser.

Dockhand identification markHawser identification markDocker
See what I did
Networking & secure accessVPN

WireGuard VPN

Encrypted remote access, routed networks and travel-router connectivity.

WireGuard
See what I did
Networking & secure accessVPN

OpenVPN remote access

Certificate-based remote access and compatibility testing across network appliances.

OpenVPN
See what I did
Networking & secure accessNetworking

GL.iNet travel-router lab

Portable routing, guest Wi-Fi and VPN access back to selected home services.

GL.iNet identification markWireGuard
See what I did
SecuritySecurity

CrowdSec protection

Log-driven detection and bouncers for blocking repeated abusive behaviour.

CrowdSec identification mark
See what I did
Collaboration & communicationsCollaboration

Matrix and Element

Self-hosted messaging, federation, identity and real-time communications.

MatrixElement
See what I did
Collaboration & communicationsCommunications

coturn relay services

STUN and TURN for reliable voice and video across NAT and restrictive networks.

coturn identification markMatrix
See what I did
Collaboration & communicationsCollaboration

ONLYOFFICE document editing

Browser-based documents, spreadsheets and presentations integrated with private storage.

ONLYOFFICE
See what I did
Collaboration & communicationsCollaboration

Collabora Online evaluation

LibreOffice-based browser editing compared with ONLYOFFICE for Nextcloud.

Collabora identification markNextcloudDocker
See what I did
Media, cameras & homeGaming

RomM game library

A private, metadata-rich catalogue for a legally owned retro-game collection.

RomM identification mark
See what I did
Media, cameras & homeDownloads

Transmission service

A contained download client with explicit storage, permissions and routing.

Transmission
See what I did
Containers & self-hostingWeb

Nginx Proxy Manager

HTTPS reverse proxying, certificate management and controlled service publishing.

Nginx Proxy Manager identification mark
See what I did
Containers & self-hostingContainers

Watchtower updates

Label-scoped Docker image updates with notifications and rollback awareness.

Watchtower identification markDocker
See what I did
Networking & secure accessNetworking

EVE-NG network simulation

Virtual routing, switching and firewall labs for safe testing and troubleshooting.

EVE-NG identification mark
See what I did
Monitoring & observabilityMonitoring

ntopng traffic visibility

Host, flow, protocol and bandwidth visibility at the network edge.

ntopng identification mark
See what I did
SecuritySecurity

Snort IDS and IPS

Signature-based network detection, alert review and carefully tuned blocking.

Snort
See what I did
SecuritySecurity

pfBlockerNG filtering

DNS block lists, IP reputation feeds and managed firewall aliases.

pfBlockerNG identification markpfSense
See what I did

Communications

Collaboration & communicationsVoice

3CX business telephony

PBX administration, SIP, extensions, authentication, NAT and remote clients.

3CX identification mark
See what I did
Virtualisation & storageStorage

FreeNAS to TrueNAS

The storage foundation behind shares, backups, media and application data.

TrueNAS identification mark
See what I did
Operating systems & deploymentEnterprise

Windows Server

Active Directory, DNS, Group Policy and mixed-environment administration.

Microsoft technology mark
See what I did
Identity & administrationIdentity

LDAP and RADIUS

Centralised logon and network authentication without publishing an uncertain product name.

LDAP and RADIUS identification mark
See what I did
Identity & administrationIdentity

JumpCloud

Cloud identity, user authentication, Wi-Fi access, LDAP and RADIUS workflows from ITHQ.

JumpCloud identification markLDAP and RADIUS identification mark
See what I did
Automation, development & AIDevelopment

Application and automation development

Electron, Python, Rust, PHP, JavaScript, Java and CSS used around the lab.

PythonRustJavaScriptPHPJavaElectronHTML identification markCSS identification mark
See what I did
Evidence & hardwareEvidence

Infrastructure screenshots

Real Docker and Proxmox views across HomeLab, TrueNAS, AshleyMine, multiple Docker VMs, 28 LXC containers and 10 KVM virtual machines.

Screenshot evidence identification mark
Open gallery
Operating systems & deploymentDeployment

iVentoy network boot

PXE configuration, image delivery and controlled operating-system deployment in the lab.

iVentoy identification mark
See what I did
Evidence & hardwareHardware & repair

PC repair, refurbishment and custom builds

Fault diagnosis, secure reimaging, component replacement and reliable system validation.

Hardware repair identification markMicrosoft technology markLinux
See what I did
Media, cameras & homeRaspberry Pi

RetroPie arcade cabinet

A full-size arcade build combining Raspberry Pi, Linux, controller mapping, display and audio.

RetroPie arcade identification markLinux
See what I did
SCREENSHOT-CONFIRMED LAB SERVICES

Additional services captured in the lab

These services appeared in the supplied lab dashboard evidence. They are recorded here without overstating them as full case studies; each can be expanded later when configuration notes or dedicated screenshots are available.

Networking & secure accessLab evidence

ZeroTier

Self-hosted overlay-network controller shown through the ztncui Key Networks interface.

ZeroTier identification mark
View project
SecurityLab evidence

Nessus

Tenable Nessus Essentials used for authorised vulnerability-assessment practice.

Nessus identification mark
View project
Identity & administrationLab evidence

Apache Guacamole

Browser-based remote-access gateway captured in the service catalogue.

Apache Guacamole identification mark
View project
Containers & self-hostingLab evidence

Vaultwarden

Private password-management service shown in the lab dashboard.

Vaultwarden identification mark
View project
Media, cameras & homeLab evidence

Plex

Media-service evaluation alongside the main Jellyfin deployment.

Plex identification mark
View project
Media, cameras & homeLab evidence

TVHeadend

Home television and tuner-management service captured in the lab.

TVHeadend identification mark
View project
Media, cameras & homeLab evidence

MotionEye

Camera-monitoring service shown alongside the CCTV stack.

MotionEye identification mark
View project
Containers & self-hostingLab evidence

Yacht

Docker-management interface evaluated across multiple hosts.

Yacht identification mark
View project
Collaboration & communicationsLab evidence

Mastodon

Federated social-platform experiment visible in the service dashboard.

Mastodon identification mark
View project
Containers & self-hostingLab evidence

Heimdall dashboard

Central application launcher used to organise lab services.

Heimdall identification mark
View project