Skip to content
View Paul1404's full-sized avatar
🎯
Focusing
🎯
Focusing

Block or report Paul1404

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don't include any personal information such as legal names or email addresses. Markdown supported. This note will be visible to only you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
Paul1404/README.md

Hi, I'm Paul

2005 • Bavaria, Germany • Always trying to run things enterprise

Systems Engineer | Linux & HCI Infrastructure

I'm a Systems Engineer specializing in virtualized infrastructure with a strong focus on enterprise environments.

I enjoy designing and automating complex systems, and I run a sophisticated homelab that mirrors enterprise-grade infrastructure a rewarding hands-on playground for learning resilience, troubleshooting, and real-world infrastructure challenges.


Homelab Infrastructure

Core Hardware

vSphere Cluster:

  • 4× Dell PowerEdge R340
  • 1× Dell PowerEdge R440
  • Compute + Storage: ~150 GHz Intel Xeon Gold, 700 GB RAM, 6 TB vSAN ESA all-flash storage
  • Standby: 3× Huawei Fusion Server 1288H
  • Management: Dell iDRAC9 & OpenManage Enterprise

Virtualization & OS

  • VMware vSphere with vSAN ESA (hyper-converged storage)
  • 10+ Red Hat Enterprise Linux 9.6/10 VMs
  • Red Hat Satellite 6 for lifecycle and configuration management
  • Cloud-init with vSphere for automated, repeatable VM deployments
  • Aria Operations for Logs for ESXi and vCenter logging
  • Aria Operations for VM rightsizing and predictive DRS

Networking & Security

  • PA-820 Next-Gen Firewall with default-deny policy
    • Network segmented into 4 VLANs with inter-zone traffic controlled via Palo Alto App-IDs
  • Arista Fabric:
    • DCS-7010T: 48× 1GbE access (servers, mgmt) + 4× 10G uplinks
    • DCS-7150S: 48× 10GbE with 2× 10G LAG per ESXi + 40G breakout to 4× 10G uplinks
  • MikroTik SwOS (CSS326 & CSS610) managed switches
  • PHPipam for IP address management

Containerization & Orchestration

  • 50+ containers across 20 Docker Compose stacks
  • Portainer EE for container management
  • Traefik as ingress controller and reverse proxy
  • HashiCorp Vault for private PKI (all HTTPS traffic signed)

Monitoring & Observability

  • Checkmk for infrastructure monitoring
  • Prometheus, Grafana, Jaeger for metrics, dashboards, and distributed tracing

Self-Hosted Services

  • Technitium DNS Server (primary & secondary)
  • Vaultwarden (self-hosted Bitwarden)
  • GitLab EE (containerized for code & CI/CD)

Contributions

Technitium DNS Server – Improved installation script and ICU package edge-case handling
TechnitiumSoftware/DnsServer#1248


Technologies & Tools


Certifications

Red Hat Certified System Administrator | EX200


Get in Touch

Email: paul.dresch@untereuerheim.com
Portfolio: https://pd-portfolio.net


Thanks for stopping by!

Pinned Loading

  1. gh-batch-archive gh-batch-archive Public

    Batch archive or unarchive multiple GitHub repositories with maximum clarity, safety, and speed.

    Shell 1

  2. mail_dns_diag.sh mail_dns_diag.sh Public

    mail_dns_diag.sh is a smart, modern, and deeply technical Bash script for diagnosing and auditing all essential DNS and mail security records for any domain.

    Shell

  3. nsx-sftp-backup nsx-sftp-backup Public

    A robust, enterprise-ready Bash script to automate the setup of a secure, chrooted SFTP user for VMware NSX backups on RHEL 9+ systems.

    Shell

  4. bfv-api bfv-api Public

    Automated exporter for Bayerischer Fußball-Verband (BFV) team matches, with CSV/XLSX output and GitHub Pages publishing.

    TypeScript

  5. GitBridge GitBridge Public

    GitBridge is a containerized tool for working with two Git repositories.

    Python

  6. goclip goclip Public

    Forked from Senpago/goclip

    Windows tool that simulates physical key presses to any focused window, with multi-language layout support.

    Go