Projects

Projects

Selected projects I’ve built, deployed, and maintain on my own Ubuntu server — spanning full-stack web apps, an iOS app, deployment pipelines, and infrastructure work.

AI-Assisted IDS Dashboard Prototype

A live dashboard for AI-assisted intrusion detection on IoT networks, built as a working prototype for my MSc dissertation research — real-time device monitoring, a live threat feed, and detection-accuracy/response-time metrics. The ML detection pipeline behind it is still in development.

  • Live device-status monitor and real-time threat feed UI
  • Detection-accuracy and response-latency surfaced as live stats
  • Front-end for an ML-based IoT intrusion-detection pipeline (in development)
  • Ties directly into my MSc dissertation work
ReactIoT SecurityDashboardingDissertation Research
Live Demo

VoipPhone — Custom SIP Client In Progress

A full-stack replacement for using a stock SIP app on my self-hosted Asterisk PBX: a native iOS client with system-level call handling, backed by my own push-notification service — because a self-hosted SIP server can't use a stock app's push credentials.

  • Native Swift/SwiftUI iOS app: login, keypad, call history, contacts, and in-call controls
  • CallKit for native call UI and PushKit for background call delivery
  • TypeScript/Express + PostgreSQL backend issuing VOIP push notifications, deployed with Docker Compose
  • TLS-signaled, SRTP-encrypted calls end-to-end, matching the underlying Asterisk server
SwiftSwiftUICallKitPushKitTypeScriptPostgreSQLDocker
Personal device build — not distributed via the App Store

Live Projects

Student Management System Live

A web-based student management system for managing student records, authentication, dashboard features, and database-backed operations.

  • Login and authentication workflow
  • Database-backed CRUD operations
  • Hosted on OVH VPS with Namecheap DNS subdomain
  • Nginx reverse proxy configuration
PHPNode.jsMySQLNginxUbuntu Server
Live Demo Source

QR Attendance System In Progress

A QR-based attendance management system hosted on my OVH Ubuntu server.

  • QR-based attendance workflow
  • Backend and frontend project structure
  • Database storage and server deployment
Node.jsPHPMySQLNginxUbuntu Server
Live demo & source coming soon

Smart Learning System In Progress

A full-stack learning platform project with backend, frontend, database, setup scripts, and documentation.

  • Backend and frontend separation
  • Database integration
  • Deployment-ready folder structure
BackendFrontendDatabaseUbuntu Server
Live demo & source coming soon

DevOps & Infrastructure

Infrastructure Monitoring Stack Running

A Prometheus + Grafana monitoring stack watching my OVH VPS in real time — CPU, memory, disk, and network metrics on live dashboards, deployed entirely with Docker Compose.

  • Node Exporter scraping host-level system metrics
  • Prometheus as the time-series metrics store
  • Grafana dashboards provisioned as code (datasources + dashboards via config files, no manual clicking)
  • Bound only to my private WireGuard VPN interface — never reachable from the public internet
Docker ComposePrometheusGrafanaNode ExporterUbuntu Server
Private deployment — screenshots available on request

Secure VOIP Server (Asterisk) Running

A self-hosted Asterisk PBX with encryption enforced end-to-end — TLS-encrypted SIP signaling and SRTP-encrypted call audio, reachable only over my private WireGuard VPN. Verified with a real registered SIP client and a live encrypted test call.

  • PJSIP with a TLS-only transport — no plaintext SIP exposed at all
  • SRTP mandatory on every call (AES_CM_128_HMAC_SHA1_80)
  • Bound to the VPN interface plus a firewall rule scoped to the VPN subnet
  • fail2ban watching Asterisk's auth log for brute-force attempts
AsteriskPJSIPTLSSRTPWireGuardfail2ban
Read the write-up

What’s next

  • Server hardening with Ansible — SSH/UFW/fail2ban baseline and unattended security upgrades, idempotent and version-controlled instead of manual one-off changes.
  • CI/CD deployment pipeline — GitHub Actions building and deploying on every push to main, with rollback on a failed health check.
  • Containerized reverse-proxy platform — one Compose stack routing every subdomain, with auto-renewing HTTPS.
  • Mini intrusion-detection dashboard — parsing fail2ban logs into a live blocked-IP view, feeding into the AI-IDS dashboard above.
  • Automated backup & DR pipeline — versioned restic backups to S3 with a tested, documented restore runbook.

Coursework

MIT Missing Semester Completed

Worked through the syllabus and exercises from MIT's "Missing Semester of Your CS Education" — the practical, tool-focused skills that tie a CS education together.

  • Shell fundamentals and the command-line environment
  • Development environment and tooling setup
  • Debugging, profiling, and version control with Git
  • Packaging, shipping code, and code quality practices
ShellGitDebuggingDev ToolsPackagingCode Quality
Course Site