mave@doof:~$
Welcome to doof.quest — uptime > ego. logs > guesses.
Last login: Sun Oct 11 09:14 from tty1

whoami

Maverick

Entry-level sysadmin running a self-hosted lab: networking, DNS, monitoring and security

I run a Proxmox homelab behind CGNAT, which I segmented, secured and monitor myself, and I've broken and fixed most of it along the way. Now looking for an entry-level IT role, remote or on-site, with a long-term focus on systems and security.

cd projects cat resume.pdf
doof homelab, simplified The ISP uses CGNAT, so nothing connects in. A Cloudflare tunnel carries SSH to the doof Proxmox host, and Tailscale routes into the lab with Pi-hole as DNS, both over outbound-only connections. The host runs Nginx Proxy Manager for TLS, self-hosted apps on ZFS, Pi-hole and Prometheus monitoring. Home devices sit on separate VLANs with ACLs. [internet] Cloudflare Tailscale CGNAT · zero inbound ports ssh wg · dns [doof:proxmox] NPM · TLS Pi-hole DNS apps · ZFS Prometheus https [lan · vlans + acls] admin guest IoT
full diagram →

cat /etc/stack

os/
Linux · macOS · Windows
virt/
Proxmox · ZFS · LVM
net/
VLANs · NPM · Pi-hole
monitor/
Prometheus · Grafana
scripts/
Bash · Python · Node.js · Java

~/projects

ls -la ~/projects →
Two lab Mac minis running the macOS installer
drwxr-xr-x · #infra · 2026-09-16

mac-lab/

Set up and documented a 30-Mac teaching lab during my internship: naming, static IPs, MDM enrollment, updates and a local update cache.

macOS · Mosyle MDM · bash
cat README →
Network Health Monitor dashboard showing ping, port scan and AI diagnostic results
-rwxr-xr-x · #tools · 2026-04-13

net-health-monitor/

Self-hosted ping, port scan and DNS tool with LLM summaries. Private targets blocked by resolved IP, scan data redacted before the LLM, 102 tests.

Python / FastAPI · React · Docker
cat README →
drwxr-xr-x · #infra · 2026-04-08

doof-homelab/

Design, storage layout, VLANs, monitoring.

Proxmox · ZFS · Prometheus
cat README →
DOOF Vault create-vault screen in the terminal with a password strength checklist
drwx------ · #security · 2025-11-07

password-manager/

DOOF Vault: a terminal password manager rebuilt around a threat model. Argon2id, HKDF and AES-256-GCM, decrypt on demand, 271 tests and checksummed releases.

Java · SQLite · Argon2id / AES-GCM
cat README →

~/notes

tail -n 20 →

~/about

I'm Maverick, a graduating BS Information Technology student at the University of San Carlos in Cebu, Philippines.

Linux is what got me started. Then I wanted to run my own services and secure my own network, mostly because I wanted to know where my data was going. That turned into doof, a Proxmox server at home with its own VLANs, monitoring and a Cloudflare tunnel, since my ISP doesn't give me a public IP. A lot of what I know came from breaking it and figuring out why.

I'm looking for an entry-level IT role, remote or on-site. Long term I want to work in systems and security.

When I'm not at a keyboard, I'm usually playing sports, doing yoga or out hiking.

~/certs

  • Google IT Support Professional Certificate — in progress
lab up — · 9 notes ·