Production Infrastructure(2023)
Two VPSes, ~10 live services, one tested control plane - everything on this site runs on it
The infrastructure behind every live project on this site: two VPSes running ~10 services (this portfolio, the DAW teaching platform, the edu portal, the research sites) behind one nginx + certbot stack per host. A manifest-driven, Pester-tested PowerShell control plane - with an nginx-owner guard and -WhatIf everywhere - handles status, lifecycle, and deploys. Backups are not hope: the restore path is drilled, every file SHA-256-verified after a full round-trip. Student hosting lives on a separate, sacrificial VPS by design: per-student Linux accounts, vhosts, and TLS certificates are provisioned from a web admin UI, and the blast radius never reaches the grading data. The control plane repo is private by design; this case study is its documentation.
