sbdmfp.devIndependent systems

Selected work

Projects.
Systems with edges.

A small index of the work behind the public surface: infrastructure, protocols, and tools built to remain legible.

Curated locally; no live service is required to render this page.

03 / INDEXED
01active

Infrastructure

Rocky 10 VPS

Guarded provisioning, rootless services, reversible hardening, and explicit evidence boundaries for a small public edge.

  • Rocky Linux
  • Podman
  • Traefik
02active

Public service

Encrypted DNS edge

A narrow DoH and tailnet DoT surface backed by filtered resolution, DNSSEC, rate limits, and no query history.

  • DoH
  • DoT
  • Blocky
Open surface
03maintained

Software delivery

Personal forge

Private-by-default Git hosting with HTTPS through the edge and native SSH on a separate origin hostname.

  • Forgejo
  • Git
  • SSH
Open surface

A note on scope

Public is a design constraint.

Private repositories, credentials, internal hostnames, and operational dashboards do not belong in this index. The page describes the shape of the work without widening the edge.