// selected projects
One playbook stands up a full fleet: it talks to the Proxmox API to create guests, then layers packages, runners and artifacts through ordered roles — fully repeatable, zero manual setup.
Every push to GitHub triggers an Action that builds an Nginx image from a Dockerfile, ships it to Docker Hub, and the server pulls & runs the fresh container over SSH — the full loop that keeps nimadevops.de live.
Bonded NICs feed a VLAN-aware bridge that splits traffic across a client subnet and an isolated backend. Kea hands out leases, signals KEA DDNS on every hostname change, and BIND9 gets updated automatically — DNS that maintains itself.
The gateway mints a short-lived access token per session: it reads the user's cached Microsoft login from MSAL, derives their email, packs a JWT bound to host + client IP + expiry, and signs it with HS256 — so only authorised, time-limited RDP connections reach the target host.
A Windows VM runs the Azure DevOps agent and registers into an agent pool, so pipelines execute on my own hardware. Each run drives Docker directly — login, pull, run image — giving full control over the build environment at zero cloud-runner cost.