Skip to content
View DannyRuizB's full-sized avatar
🟢
Online
🟢
Online

Block or report DannyRuizB

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
DannyRuizB/README.md

Danny Ruiz Boluda

Systems & network administrator — ASIR · IT systems at Zataca Systems, Elche, Spain.

Based in Torrevieja, Spain — open to relocation.

// about

  • ASIRAdministración de Sistemas Informáticos en Red (higher vocational degree in systems & network administration).
  • Hands-on with Linux, Docker, Proxmox, networking, security and monitoring.
  • Going deeper into DevOps: CI/CD with GitHub Actions, Kubernetes (k3s), Terraform + Ansible on AWS, Prometheus/Grafana observability — all applied to my own projects below.
  • I like building small, self-hosted tools that make infrastructure easier to see and operate.
  • Open to: sysadmin, DevOps, networking, cloud, infrastructure.

// stack

Linux Debian Proxmox Docker Nginx

Kubernetes Terraform Ansible GitHub Actions Prometheus Grafana

PostgreSQL Bash Git Node.js Python

// projects

Self-hosted monitoring dashboard (ICMP/TCP/SSH probes, live CPU/RAM/disk, threshold alerts, history charts) that doubles as my end-to-end DevOps playground — the same app, taken through the whole lifecycle:

  • CI/CD — GitHub Actions: lint + tests + Docker build with a real smoke test (run the image, poll the API), auto-publish to Docker Hub on version tags, Dependabot.
  • Kubernetes — production-style manifests for k3s (deploy/k8s/): PVC, probes, Traefik ingress.
  • Cloud (IaC) — one-command AWS deployment (deploy/aws/): Terraform provisions the EC2 instance, Ansible hardens it with my own debian-hardening-ansible roles and runs the container. ./deploy.sh up, ./deploy.sh destroy down.
  • Observability — the app exposes Prometheus metrics (/metrics), and the repo ships a kube-prometheus-stack setup: ServiceMonitor, alert rules and a provisioned Grafana dashboard.

Stack: Node.js · Express · SQLite · Docker · GitHub Actions · Kubernetes (k3s) · Terraform · Ansible · AWS · Prometheus · Grafana

End-to-end deployment of a Wiki.js service on Docker Compose (PostgreSQL + Wiki.js + Nginx) over a hardened Debian VM. Two isolated networks, named volumes, healthchecks, automated backups with retention, monitoring and a tested restore procedure. My ASIR final project — the one that ties everything together.

Stack: Docker Compose · PostgreSQL · Nginx · Debian · Bash · cron

Idempotent Bash script that turns a fresh Debian server into a CIS-mapped secure baseline: sudo user + SSH key, key-only SSH (with a lockout guard), UFW, Fail2Ban, automatic updates, kernel sysctl, mount options, login banners, sudo & password policy, core-dump limits, cron restrictions and AIDE file-integrity monitoring — each step skippable, with a real --dry-run and an end-to-end test that hardens a throwaway container and verifies every promise from the outside.

Stack: Bash · Debian · SSH · UFW · Fail2Ban · AIDE · GitHub Actions

The same CIS-mapped baseline, rebuilt as a suite of idempotent Ansible roles — declarative and role-per-control — with ansible-lint (production profile) + syntax checks in CI, kept symmetric with the Bash version by a shared end-to-end test. Consumed as a pinned dependency by didactic-dashboard's AWS deployment — written once, reused across projects.

Stack: Ansible · Debian · GitHub Actions

Visual LAN scanner on top of nmap: point it at a CIDR, see who's there, browse the topology and diff scans over time. Schedule recurring sweeps with baseline-divergence alerts and webhook/ntfy notifications, and track each host's history, latency and uptime. Runs in Docker with host networking; multi-arch image on GHCR, live read-only demo.

Stack: Node.js · Express · nmap · SQLite · Docker (host net) · GHCR

Visual analyzer for iptables / ip6tables / nftables / ufw rulesets — paste a dump, see the structure. Packet tracing across the full NAT/filter pipeline and a security linter for common ruleset smells. 100% client-side, no backend.

Stack: JavaScript · client-side · GitHub Pages

Visual analyzer for docker-compose.yml — paste a compose file, see the architecture (services, networks, volumes, ports). Security linter, Dockerfile inspection and multi-file extends/include merging. Client-side, no backend.

Stack: JavaScript · client-side · GitHub Pages

// contact


// es

Hola, soy Danny — administrador de sistemas y redes (titulado ASIR), actualmente en el equipo de sistemas de Zataca Systems (Elche). Vivo en Torrevieja, abierto a moverme. Me gusta montar herramientas self-hosted que hacen la infraestructura más fácil de ver y operar, y ahora estoy profundizando en DevOps: CI/CD, Kubernetes, Terraform, Ansible y Prometheus/Grafana sobre mis propios proyectos. Si quieres hablar sobre oportunidades de sysadmin, DevOps, redes o cloud, escríbeme por email o LinkedIn.

Pinned Loading

  1. didactic-dashboard didactic-dashboard Public

    Self-hosted monitoring dashboard — add a host by IP/hostname and watch CPU/RAM/disk in real time over ICMP/TCP/SSH, with threshold alerts and history charts. Node.js + SQLite, Docker-ready.

    JavaScript 1

  2. dockerscope dockerscope Public

    Visual analyzer for docker-compose.yml — paste, upload or drop a compose file and see the architecture (services, depends_on, networks, ports). Client-side, no backend.

    JavaScript 1

  3. lanscope lanscope Public

    Visual LAN scanner — point it at a CIDR, see who's there. Web UI on top of nmap, results stored locally in SQLite.

    JavaScript 1

  4. wikijs-zataca wikijs-zataca Public

    Self-hosted Wiki.js stack on Docker Compose (PostgreSQL + Wiki.js + Nginx). FCT final project at Zataca.

    Shell 1

  5. firewallscope firewallscope Public

    Client-side visual analyzer for iptables, ip6tables, nftables and ufw rulesets — paste the output, see the structure.

    JavaScript

  6. debian-hardening debian-hardening Public

    Idempotent Bash baseline hardening for fresh Debian servers — sudo user, key-only SSH, UFW, Fail2Ban, auto-updates. Won't lock you out.

    Shell