Systems Engineer · celyrian.com

Hey, I'm Celyrian.

I run my own corner of the internet.

Mail, DNS, git, identity, media, this site: all self-hosted on my own hardware.Self-taught through ten-plus years of breaking Linux and rebuilding it better.Work and hobby are the same thing here, just with different uptime targets.
scroll

01whoami

The short version

I'm a self-taught systems engineer. Most of what I know I learned the hard way: breaking things in my homelab, figuring out how to put them back together, then doing it again but properly.

My comfort zone is the boundary between operations and security: containerized deployments, hardened edges, identity and certificates, storage that never loses a byte. A lot of my newer skills came from taking full-stack services on Kubernetes end to end. Doing that forces you to actually learn every layer instead of just the one you like.

If you put your mind to it, you can accomplish anything. Your future is whatever you make it.
  • DevOps Push to a branch and let GitOps ship it.
  • SecOps Least privilege everywhere, without locking myself out.
  • SysOps Keep it up, and when it falls over, make the fix boring.

02experience --sorted

Where the hours went

Full bars are the things I'd be comfortable running in production at 3 a.m. The new markers are what I picked up this year.

UNIX / Linux 11Y+
Game Servers 10Y+
Network Security 7Y+
Cybersecurity 6Y+
Docker / Compose 5Y+
Certificate Management 5Y+
Enterprise Infrastructure 3Y+
ZFS 3Y+
Kubernetes (k3s · AKS) new <1Y
Observability (OTel) new <1Y

04learning --active

On the bench right now

What I'm getting my hands dirty with right now. Some of it is barely past the docs stage.

  • LDAP Directory-backed identity
  • Kubernetes Operators CNPG · RabbitMQ · MinIO · KEDA
  • Service Mesh Linkerd mTLS, traffic policy
  • Progressive Delivery Canary + blue/green rollouts

05homelab --status

The rack that runs it all

Three machines, forty-odd containers. Everything reaches the internet through a self-hosted zero-trust tunnel, so the home IP never gets exposed.

Compute Server

Containers · GPU workloads
OSDebian 13 Trixie
CPUAMD Ryzen 9 3950X
GPUNVIDIA RTX 4060
RAM128 GB DDR4
Boot1 TB Samsung 970 EVO Plus
Hot data1 TB Samsung 970 EVO Plus
BackupSeagate Exos X18 · 18 TB

NAS Server

ZFS storage · backups
OSTrueNAS 24.04 Dragonfish
CPUIntel Celeron N5095
RAM16 GB DDR4
Boot1 TB Samsung 970 EVO
Pool8 x 12 TB IronWolf · RAIDZ3

Workstation · nexus

Daily driver · the rice
OSCachyOS (rolling)
CPUAMD Ryzen 7 5700X
GPUNVIDIA RTX 3090
RAM32 GB DDR4
WMHyprland (Wayland)
Shellfish · kitty
Services · self-hosted 24

= behind Pangolin single sign-on.

06desktop --history

Desktop features

The same workstation, restyled a few times a year. It's where this site's amber-on-black look came from in the first place. Click any shot to open it full size.

  1. 2025 Q1 Slate CachyOS · Hyprland · alacritty · btop

    Cool-blue waves on breeze-dark. Where the habit started.

  2. 2025 Q3 HyprBlack CachyOS · Hyprland · alacritty · btop

    Stripped all the way back to pure monochrome.

  3. 2026 Q1 Fern CachyOS · Hyprland · kitty · fish

    Forest green with JetBrains Mono and ferns for days.

  4. 2026 Q3 Showa Groove CachyOS · Hyprland · kitty · fish

    Amber on black, retro-anime. The look this whole site borrows from.

07./say-hi

Let's talk

Homelab war stories, a security question, or something you'd like built. I'm easy to reach.