// Project Archive

Systems I've built.

A collection of infrastructure, backend, cloud and low-level systems built from first principles. Each project exists to solve a specific engineering problem — not simply to demonstrate a technology.

Cloud DevOps Backend Systems Low-Level

// Primary Systems

[ 05 featured ]

01 / SYSTEM

Sentinel

AI-Driven SRE Context Engine & Daemon

Go Linux Gemini API Prometheus Grafana Docker GitHub Actions

What it is

A native Go daemon designed to collect live Linux system context and transform it into structured evidence for AI-assisted SRE diagnostics.

The problem

LLMs can reason about infrastructure, but they cannot reason accurately about a system they cannot observe. Sentinel puts telemetry, processes, logs and runtime state before inference.

Architecture

01 · Host Telemetry Continuous scraping of Linux kernel metrics via Prometheus and structured system logs from journald as an immutable evidence layer.

Engineering decisions

UNIX socket communication. Keeps the CLI lightweight while the daemon maintains the live system context.

Evidence-first inference. Context is sanitized, structured and bounded before being sent to the model.

02 / SYSTEM

CloudForge

Automated Cloud Infrastructure & IaC

AWS Terraform Ansible Docker Linux GitHub Actions

What it is

A production-style AWS environment built around infrastructure-as-code, automated host configuration and reproducible containerized deployments.

The problem

Cloud environments become fragile when networking, operating-system configuration and application deployment are mixed together. CloudForge separates those responsibilities into explicit layers.

Architecture

01 · Terraform Provisioning Declarative VPC, subnets, Security Groups, EC2 instances, and least-privilege IAM roles with remote S3 state locking.

Engineering decisions

Strict layer separation. Terraform provisions infrastructure while Ansible owns host configuration and runtime deployment.

Network isolation. Internal services remain private while Nginx acts as the controlled application ingress.

03 / SYSTEM

IRC Server

Low-Level Networking & Systems Programming

C++98 Sockets API POSIX I/O Multiplexing RFC 1459 / 2812 Docker

What it is

A high-performance Internet Relay Chat server built completely from first principles in C++98, handling non-blocking socket I/O, channel topologies, authentication and strict RFC conformance.

The problem

Modern application frameworks obscure raw TCP semantics, event dispatching, and partial socket packet boundaries. This system manages thousands of concurrent events deterministically with zero high-level abstractions.

Architecture

01 · Non-blocking TCP Sockets Master socket binding and non-blocking fd flags (O_NONBLOCK) ensuring zero thread starvation across incoming connection requests.

Engineering decisions

Single-threaded I/O multiplexing. Avoids locking overhead and race conditions entirely by managing state through synchronous non-blocking polling loops.

Manual stream framing. Ring buffers and raw byte slicing protect against TCP packet fragmentation and partial client command execution.

04 / SYSTEM

Inception

Hardened Container Infrastructure & Virtualization

Docker Docker Compose Nginx MariaDB WordPress / PHP-FPM Linux Namespaces

What it is

A multi-service containerized architecture deployed on Alpine Linux, orchestrated with Docker Compose and built without pre-made third-party images.

The problem

Off-the-shelf container images hide internal configurations, bloat attack surfaces, and violate least-privilege principles. Inception builds every service layer from raw base images with isolated daemon lifecycles.

Architecture

01 · Custom Container Builds Minimalist Alpine-based Dockerfiles with deterministic dependencies, avoiding automated entrypoint scripts and third-party image bloat.

Engineering decisions

Strict network isolation. The database and application runtime are bound exclusively to private bridge networks, accessible only through Nginx TLS termination.

Deterministic restart policies & volumes. Decoupled data volumes and PID 1 init signal handling maintain zero-downtime container resilience across host restarts.

05 / SYSTEM

danoguer.dev

Serverless AWS Infrastructure & Edge Delivery

AWS CloudFront Private S3 Origin Terraform GitHub Actions OIDC Federation Lambda@Edge

What it is

The infrastructure platform powering this portfolio: a zero-server cloud native architecture featuring immutable deployments, private origin cloaking, and cryptographic edge hardening.

The problem

Traditional web hosting relies on long-lived virtual machines, vulnerable exposed storage, and static IAM credentials stored in CI/CD pipelines. This system achieves complete serverless immunity with zero static secrets.

Architecture

01 · OIDC Keyless Deployments GitHub Actions authenticates directly with AWS IAM via short-lived OpenID Connect JWT tokens, eliminating static long-lived credentials.

Engineering decisions

Origin Access Control (OAC). S3 bucket is strictly private with public access blocked; content is only accessible when signed by CloudFront edge distributions.

Edge-injected security policies. Lambda@Edge intercepts every request to inject strict HSTS, CSP, and X-Content-Type headers directly before client delivery.

// Engineering Archive

[ 04 foundational projects ]

Cub3D

Graphics / C

A 3D raycasting engine implemented from scratch in C, featuring real-time rendering, collision detection, texture mapping and perspective projection.

C Raycasting Algorithms Math MinilibX

Repository →

Minishell

Unix / Systems Programming

A Unix shell implemented in C with process execution, built-ins, environment handling, redirections, pipelines and signal management.

C POSIX Processes Signals Parsing

Repository →

Philosophers

Concurrency

A concurrent implementation of the Dining Philosophers problem using POSIX threads and mutex synchronization, focusing on race conditions and deadlock prevention.

C pthreads Mutexes Concurrency

Repository →

CPP Modules

C++ / Object-Oriented Design

A progression of C++ modules covering object-oriented programming, memory management, operator overloading, polymorphism, templates and STL containers.

C++98 C++11 OOP Templates STL

Repository →