Thomas Schwery
Field notes since 2010
I’m Thomas, a software engineer in Switzerland. When a project takes me a few weekends to figure out, like a WireGuard hub, a Talos cluster or a laser-cut panorama, I write it up here.
Skyline from Bellalui, traced by Panowood
A small web SSH bastion: log in with Keycloak, pick a host, and get a terminal in the browser with a fresh SSH certificate valid for about two minutes. Every session is recorded into a tamper-evident audit ledger.
How the zones for inf3.ch, inf3.xyz and schwery.me are declared with DNSControl, kept in Git and deployed to Route53 on merge.
Nine years after the first cluster, the home lab runs on Talos Linux, everything above the nodes is deployed by ArgoCD, and storage comes from TrueNAS.
All my sites dial out to a small public server acting as a WireGuard hub, with frp for public ingress. This is how its Ansible repository is organised.
Scanning the bow grip we customised at the club with only a camera, rebuilding it with photogrammetry, and 3D printing improved versions.