Independent security and digital privacy specialist with 35 years of hands-on IT experience, primarily self-taught. I focus on hardening Linux systems, building privacy-preserving network stacks, and evaluating the real-world security posture of Linux distributions.
Every configuration in this GitHub has been deployed and validated in a live production environment. This is not theory — it runs on my machines.
My approach aligns with GIAC GDSA principles — defensible security architecture, network segmentation, reverse proxies, protocol hardening, and Zero Trust.
I write about security, privacy, and Linux infrastructure on my bilingual blog → safeitexperts.com
🔒 System hardening — sysctl, kernel parameters, auditd, file permissions
🌐 Network privacy — DNS-over-TLS, DoH, ECH, proxy anonymization, VPN
🦑 Proxy & caching — Squid 6.x, ACL management, ad blocking, TLS policy
🔍 DNS security — Unbound, DNSSEC, local DoH (Caddy)
🧪 OS security auditing — testing Linux ISOs for security and privacy compliance
📊 Monitoring — Prometheus, Grafana, Loki, Alertmanager
Primary platform: openSUSE Tumbleweed (rolling — daily driver and test bench)
Also tested: Debian · Fedora · Arch · Ubuntu · Qubes OS · Tails · and others
All configurations are tested in production on real hardware before being published. Review before deploying — your environment may differ.