Portfolio
Things I have built, and the work behind them. Most of it runs in a homelab I treat as a real environment, because that is where breaking something is free.
Featured Work
E-Ink Fragrance Stylist
A LAN-only recommendation engine that chooses a daily fragrance context and renders it to a physical e-ink display. The work is split across two hosts. A FastAPI backend with a scheduler, a Streamlit admin UI and SQLite persistence decides what to show. A Raspberry Pi Zero 2 WH drives a Waveshare 2.13-inch panel, polling for a payload and redrawing only when the content actually changed.
No cloud and no external API. Stable device identity comes from a DHCP reservation on OPNsense, and the display client is managed by systemd so it survives a reboot without attention.
Homelab MCP Server
A public-safe reference server for infrastructure discovery, documentation and audit workflows, designed read-only first. It exposes topology, container inventory and reverse proxy state to an AI assistant without granting write access to anything. The interesting part is the safety model rather than the plumbing.
github.com/amirstechport/homelab-mcp-server
Homelab IaC
Infrastructure as code for the whole lab. Ansible playbooks handle fleet provisioning and day-2 maintenance across a dozen hosts, alongside Docker Compose stacks for Traefik, observability, Ghost, Cloudflare Tunnel and Caddy. Secrets stay out of the repo behind .env.example patterns so it can be public.
github.com/amirstechport/homelab-iac
Network Operations and Field Automation
Meraki Automation Suite
Python tooling that replaced repetitive dashboard work during deployments: bulk device renaming, AP tagging, MAC address collection for documentation, and a photo batch renamer that reads text from AP install photos and applies an approved naming scheme. Driven from a Stream Deck, so on site a script is one button press.
Catalyst 9300 Stack, Field Notes
First hands-on build with a Catalyst 9300 and the NM-8X module, stacked and uplinked into a live environment. What actually separates Catalyst from Meraki once you are the one racking it.
HSIA and Gateway Operations
The layer hotel guest internet really runs on: subscriber sessions, bandwidth policy, captive portal redirection and property management system integration. Completed the Nomadix University track in 2026 across Gateway Core, LAN Core, Captive Portal and Cloud Telephony Core, which changed how I sequence an escalation.
Learning Labs
Foundations worked through slowly rather than quickly. These are labs, not production work, and they are listed as such on purpose.
- Kubernetes The Hard Way: certificates, RBAC, etcd encryption and networking wired by hand.
- Docker and Compose: container basics through to multi-service stacks.
- Routing and switching: OSPF single and multi-area, router-on-a-stick, and DHCP.
- Homelab topology: how the lab has been wired over time.
- Networking projects: DNS, VLANs and home network services.