Jonathan
Funk

Self-hosted business infrastructure running on a Hetzner VPS. Cal.com for booking, Twenty CRM for contact management, n8n for workflow automation, Formbricks for consent form collection, PostgreSQL and Redis as the data layer — all containerized with Docker Compose behind Caddy reverse proxy with automated TLS. Everything talks to everything else.

End-to-end automation built on n8n: booking confirmation emails, 24hr pre-appointment consent form delivery, and consent form data written back to CRM on an hourly schedule. Dedup logic uses GraphQL to check existing notes before writing — idempotent runs, no duplicate records regardless of how many times the sync fires.

Portfolio and booking site served as static HTML from the VPS. Mobile-responsive, age-gated with DOB verification, Cal.com booking iframe embedded and themed. Masonry photo gallery with lightbox. No framework, no build step — just Caddy serving files.

Full AD domain built entirely via PowerShell — no GUI. Organizational units, security groups, user provisioning, SMB shares, and layered NTFS permissions applied and tested against real access scenarios.

Self-hosted on a QEMU/KVM Debian VM. Configured remote agent monitoring, alerting, and script automation across Windows and Linux endpoints. Resolved QEMU NAT/WiFi bridging constraints and socat proxying to get the stack reachable externally.

Issued and automated renewal of wildcard TLS certs using Let's Encrypt ACME DNS-01 challenge via certbot-dns-duckdns. Managed TXT record propagation, certificate deployment, and renewal hooks.

Configured WireGuard with a UFW killswitch for secure remote access. Managed peer keys, allowed IPs, and firewall rules on Linux hosts. Guest network segmentation applied to isolate point-of-sale traffic in real small-business environments.

Deployed and administered for internal request tracking. Configured SLA rules, ticket queues, staff assignments, and email piping. Used in practice, not just installed and forgotten.

Not a VM — my main machine. Libreboot hardware, Sway WM, fully configured from scratch. Python and Bash scripting for automation, API integrations, and workflow tooling.