salman@infra:~$ whoami

Salman Shafi

Unix/Linux Systems & Network Engineer

Focus on DIY infrastructure, from-scratch deployments, and building highly secure, self-hosted environments.

Bogura, Bangladesh

Self-Hosting & Infrastructure

Years Exp

20+

Projects

24/7

Support

INITIALISE_CONTACT

salman@infra:~$ cat /etc/sysinfo/profile.conf

# Core Identity Configuration

[profile]

name

= "Salman Shafi"

role

= "Unix/Linux Systems & Network Engineer"

location

= "Bogura, Bangladesh"

# Operational Focus Areas

[operations]

primary

= "Infrastructure & Self-Hosting"

speciality

= "Building highly secure, maintainable Linux systems from scratch."

# Professional Philosophy

[core_values]

community

= "Active contributor. Sharing knowledge increases knowledge."

salman@infra:~$ systemctl list-units --type=skill

●os-core.service

active (running)

Operating Systems

Fedora/RHEL/AlmaLinuxDebianUbuntuAlpineFreeBSD

●container-virt.service

active (running)

Virtualisation

KVMQEMUHyper-VPodman (Quadlets & Compose)Docker

●dns-dnssec.service

active (running)

DNS & DNSSEC

BINDKnotPowerDNSTechnitiumdnsmasqUnboundMulti-signer (RFC 8901)

●web-proxy.service

active (running)

Web Servers

CaddyNGINXApacheLiteSpeedTraefik

●mail-stack.service

active (running)

Mail Stack

StalwartPostfixDovecotMailcowMail-in-a-BoxGoogle WorkspaceM365Zoho

●network-mesh.service

active (running)

Networking

IPv4/IPv6RoutngBGPVLANCGNATWireGuardWi-FiTailscaleZeroTierCloudflare Networking (Zero Trust)

●firewall-router.service

active (running)

Firewalls & Routers

firewalldUFWpfOpenWrtKeeneticOSRouterOS (MikroTik)

●storage-sec.service

active (running)

Storage & Security

ZFSBtrfsXFSLVMLUKSSELinuxACME/certbot

●monitor-db.service

active (running)

Monitoring & DBs

GrafanaPrometheusUptime KumaMariaDBPostgreSQLRedissystemdauditd

●cloud-cdn.service

active (running)

Cloud & CDN

Cloudflare (WAFTunnels)AWSHetznerFastlyCloudFrontG-CoreDigitalOceanMetroVPS

●self-hosted.service

active (running)

Self-Hosted Apps

NextcloudVaultwardenImmichAdGuard HomeGhost CMSPBX

●deploy-pkg.service

active (running)

Deployment & Panels

GitRPM/DEB PackagingCOPRaaPanelHestiaCPcPanelWebuzo

●roadmap.target

active (learning)

DevOps & SRE

Deepening expertise in Virtualisation (KVM/QEMU), automation, and monitoring (Prometheus/Grafana).

Exploration

Exploring CCTV/Surveillance systems, Backbone networking (MPLS), and advanced IaC (LXC, Kubernetes).

Certifications & Community

Actively targeting RHCSA, RHCE, CCNA, and MTCNA. Core philosophy: "Sharing knowledge increases knowledge."

salman@infra:~$ journalctl -u projects --since "2024-01-01"

●infra-prod.service

active (running)

Production Infrastructure & Self-Hosting

Operating a highly secure, distributed self-hosted environment across multi-node AlmaLinux 10 VPS instances. Enforcing strict SELinux policies, Fail2Ban, and firewalld rules. Deploying services (Caddy, Vaultwarden, Immich, Nextcloud) entirely via rootless Podman and systemd Quadlets. Managing a central WireGuard hub for secure private network routing.

●mail-dns.service

active (running)

Mail & Advanced DNS Architecture

Operating a production Stalwart mail server configured with Mailchannels relay. Designing a recursive Technitium DNS resolver acting as a hidden master for global Anycast and secondary nameservers (SatisfyHost, ns-global.zone).

●embedded-rpm.service

active (running)

Embedded Systems, ARM & Open Source

Flashing and compiling custom ImmortalWrt firmware with proprietary MediaTek drivers for networking hardware (IMOU HX21). Exploring optical networking via V-SOL ONU Telnet interfaces and managing ARM SoC environments (Raspberry Pi 4B). Maintainer of the elitesalman/caddy COPR repository for custom xcaddy RPM builds.

salman@infra:~$ /usr/local/bin/send-message --to=hello@salmanshafi.net

# Contact Endpoints

email_uri

= "hello@salmanshafi.net"

phone_pvt

= "+8801603161647"

location

= "Bogura, Bangladesh"

timezone

= "GMT+6"

# Status Check

●System active. Awaiting input.