Skip to main content
All skills

Infrastructure & DevOps

I run the infrastructure the sites I build sit on, which means I am also the person called when something stops responding. That is a different relationship with a deploy pipeline than signing off on one.

How I use it

  1. Deploys as pipelines

    GitHub Actions building images and shipping them to the host, so releasing is a merge. Wee Rock Art went through staging and into production on the same path, which is the only way staging means anything.

  2. Containerised applications behind a proxy

    Each app with its own runtime and dependencies, routed by a reverse proxy that also handles certificates. Adding a service becomes configuration rather than another server to maintain.

  3. Certificate automation

    Issuance and renewal handled at the proxy layer, with expiry verified rather than assumed. TLS should not be a recurring calendar event.

  4. Configuration in version control

    Infrastructure declared in the repo with a verification script checking live reality against the declaration, so drift is something you find deliberately instead of during an outage.

What I use

  • Docker
  • Caddy
  • GitHub Actions
  • Let's Encrypt
  • Linux

Related skills

Want the detail behind any of this?

I can walk through any of it in as much depth as you want.

Get in touch