Senior platform engineer with 12+ years designing, deploying, and operating production systems on Docker, Kubernetes, Knative, and serverless stacks. Founder of BRF Tech, a DevOps consultancy that has shipped infrastructure for 15–35 startups and growth-stage companies across iGaming, fintech, retail (Koton), mobility, and logistics. Deep DevSecOps experience covering WAF, secret management, container scanning, Kubernetes RBAC + Network Policies, mTLS, OIDC/SAML, and audit logging. Proven track record cutting cloud costs by up to 50%, designing multi-tenant Kubernetes platforms, and building serverless data pipelines processing 50M+ records per night. Currently building runr.sh, an open-source serverless platform on Knative unifying CaaS, FaaS, and AI workloads (agents, multi-agent pipelines, model serving).
Open-source serverless + AI platform on Knative — unifies CaaS, FaaS, XaaS, and AI workloads (single agents, multi-agent pipelines, model serving) under one developer surface.
Solo consultant — migrated a 7-8 year production digital health SaaS platform to V2 multitenant architecture with zero downtime. 200+ active customers, hundreds of millions of records; LLM agents + RAG + Metabase + datafarm + DevOps modernization end-to-end.
The self-hosted file manager that embeds anywhere — single Go binary, 5 storage drivers (local/S3/SFTP/WebDAV/FTP), real-time collab, RBAC, native multi-tenancy and a built-in MCP server for AI agents. MIT.
Solo DevSecOps & platform consultancy — 25 service areas with tiered USD pricing. Shipped infrastructure for 15-35 startups across iGaming, fintech, retail (Koton), mobility, logistics.
Personal production infrastructure — K8s 1.24 + Knative + Traefik + Longhorn + Sentry + Kata Containers; 40+ services (Outline, AppFlowy, Stalwart, Nextcloud, Element, plugNmeet, Zot, DopsDashboard, internal LLM gateway).
Nightly fuel reconciliation — 50M+ records in 1-3 minutes. Scheduled job on AWS Lambda + Laravel Vapor pulls Petrol Ofisi data and produces per-courier earnings reports by license plate. Replaced an hour-long manual Excel + macro process.
Model Context Protocol server for Outline knowledge base. Natural-language interface to Outline workspace for Claude Code, Cursor, and other MCP-compatible agents.
Python CLI sidetone controller for Razer BlackShark V3 Pro — reverse-engineered USB control transfers to enable headset sidetone without Razer Synapse. Typer + hidapi/pyusb + pystray.
Upstream Linux kernel contributions — ThinkBook ACPI fix + Lenovo fingerprint sensor driver.
Persian (Jalali) calendar utility — PHP package.
Laravel Notification Options Package — per-user channel and preference settings.
Docker container for Laravel test runs — parallel runner for CI/CD pipelines.
Drone certification / license project (PHP).
Multiplayer tycoon/restaurant game in Unreal Engine 5 (hobby) — C++ core + Blueprint UI + Svelte/CEF UI layer. Server-side character customization, NPC overhead order bubbles (CEF, dirty-flag + visibility-culling for 50+ customers), runtime dynamic window/floor cutouts via GeometryScript Boolean operations.
Just open-sourced filex. filex.sh is live with a playable demo at demo.filex.sh. Now on the launch tour (r/selfhosted, Show HN) and getting back to the runr.sh multi-tenant module.
Load balancers, proxies and application servers close idle connections on different clocks. Get the order wrong and random 502s appear after quiet periods. The rule, the default-va...
UFW reports that every incoming connection is denied, yet a port published by Docker can still be open to the internet. The path a packet really takes, closing ports with the bind...
Check-then-insert is flawless for one request and quietly produces duplicates under parallel ones. Why application locks fall short, why a unique constraint is the only fix that ho...
A backup that production can delete is a backup an intruder can delete. The two object lock modes, append only identities, where the key lives, and how this compares to snapshots.
Redis arrives as a cache and ends up holding sessions and the job queue. Choosing maxmemory-policy, the cost of RDB versus AOF, what async replication loses, and lists versus strea...
"Disk full" maps to at least three different conditions: blocks, inodes and space reserved for root. Same symptom, different remedy. How to measure before you delete.