Thomas Schwery
Field notes since 2010
I’m Thomas, a software engineer in Switzerland. When a project takes me a few weekends to figure out, like a WireGuard hub, a Talos cluster or a laser-cut panorama, I write it up here.
Skyline from Bellalui, traced by Panowood
A small web SSH bastion: log in with Keycloak, pick a host, and get a terminal in the browser with a fresh SSH certificate valid for about two minutes. Every session is recorded into a tamper-evident audit ledger.
I am a software engineer, not a designer. Asking an AI to turn my three websites into a design system gave me tokens, CSS, Vue components, a Hugo module and even a wall-panel theme that every new project can just use.
How the zones for inf3.ch, inf3.xyz and schwery.me are declared with DNSControl, kept in Git and deployed to Route53 on merge.
Nine years after the first cluster, the home lab runs on Talos Linux, everything above the nodes is deployed by ArgoCD, and storage comes from TrueNAS.
All my sites dial out to a small public server acting as a WireGuard hub, with frp for public ingress. This is how its Ansible repository is organised.