About // Who I am
Computer Engineering student based in Spain, focused on networking and cloud infrastructure. I'm currently studying for the CCNA, with the RHCSA next and the AWS Solutions Architect Associate after that, building toward a career in DevOps and SRE. C1 English level. This site is where I document what I build and learn along the way.
Education
Bachelor's Degree in Computer Engineering
Experience
Infrastructure build for a small consultancy (ED50)
- Designed and deployed the company's self-hosted infrastructure on Proxmox VE: photo management (Immich), document management (Paperless-ngx), and invoicing (FacturaScripts), each in its own unprivileged LXC.
- Put every service behind Caddy with a wildcard Let's Encrypt certificate (ACME DNS-01), with zero ports open to the Internet and remote access only over Tailscale.
- Implemented a 3-2-1 backup strategy verified end to end, with a client-side encrypted offsite copy on Hetzner, and found that the NAS had been silently skipping its nightly backups for years.
- Migrated ~145 GB of photo archive (2004 to present) with verification.
- Built TicketBot, a Telegram bot (n8n + vision model + Paperless API) that turns a photo of a receipt into an archived, classified fiscal document in about 15 seconds.
- Wrote Vigía, a Java / Spring Boot service that monitors the 11 services in production and sends Telegram alerts only on state changes.
- Real client data on the network, so security and GDPR compliance shaped every design decision.
Skills
Networking
- Fundamentals
- TCP/IP, subnetting, VLANs, and DNS. Segmented network design in the ED50 v1 plan; CCNA in progress
- Analysis
- Wireshark and usbmon for USB traffic capture in the wireless audio protocol analysis
- Simulation
- Cisco Packet Tracer for topology design and troubleshooting
Virtualization & Containers
- Proxmox VE
- Hypervisor for the ED50 stack: unprivileged LXCs with nesting, vzdump, LVM-Thin
- Docker
- Docker Engine and Docker Compose with pinned versions for Immich, Paperless-ngx, FacturaScripts, and n8n
Access & Security
- Reverse proxy & TLS
- Caddy with a wildcard Let's Encrypt certificate via ACME DNS-01, one subdomain per service
- Remote access
- Tailscale (WireGuard mesh, MagicDNS, subnet router) with zero ports open to the Internet
- Compliance
- GDPR-driven design decisions for a network holding real client data
Backup & Monitoring
- Backups
- 3-2-1 strategy verified end to end: vzdump, Synology Hyper Backup, client-side encrypted offsite copy on Hetzner with rclone
- Monitoring
- Vigía: HTTP and ping checks against 11 production services, Telegram alerts on state changes
Automation & CI/CD
- Workflows
- n8n for TicketBot: Telegram, vision model, and Paperless API
- CI/CD
- GitHub Actions building and deploying this site to GitHub Pages
- Services
- systemd units and cron jobs for scheduled and long-running tasks
Code & OS
- Java
- Java 21, Spring Boot, and Maven for Vigía; ongoing Java Masterclass
- Python
- Previous projects and scripting
- Linux
- Debian 13 on servers and my main machine; Arch Linux before that