I'm Nicola — ICT technician in Italy, and the sysadmin of a homelab that never asked to get this big.
Everything I build ends up on the same box: a 10-year-old Intel i5-6500T running Ubuntu 24.04 with dozens of Docker services, each one behind a reverse proxy with SSO, monitored by Prometheus/Grafana and audited by a SIEM. If a workflow annoys me twice it becomes a service. If a service breaks at 3 AM, a Telegram bot tells me before I notice.
- 🔧 Day job: Windows 11 / Microsoft 365 / Active Directory / SharePoint — endpoint, identity and support work
- 🌙 Night job: Linux, Docker, reverse proxies, AI agents and trading bots running on my own metal
- 🔴 Evenings: Minecraft 1.8.9 PvP on TikTok Live
- 🎹 Piano by ear (Nuvole Bianche, River Flows in You) · 🏐 volleyball 3×/week · 🎵 trap enjoyer
| Project | What it actually does |
|---|---|
| 🧠 MERLINO | Personal "Jarvis": drives headless AI coding agents across my infrastructure. Every tool call goes through a pre-execution hook that can hard-deny it — a permission callback alone isn't a real chokepoint. |
| 🛡️ Server hardening | Full-server security audit turned into 34 shipped fixes: secret rotation, SIEM deployment, host firewall and intrusion-banning rules, least-privilege cleanup across every unattended process. |
| 📈 Golden-Cross bot | BTC/USDT trend-following bot on Binance, systemd-managed. Live trading sits behind two independent gates, so no single config slip can start spending real money. |
| 🎲 Polymarket 5m bot | Copy-trader and scalper on BTC/ETH/SOL/XRP 5-minute markets, with an adverse-continuation exit rule and a slimmed visual-data pipeline feeding the decision model. |
| 🧰 techtool.site | 50 developer tools in one static, dependency-free site — hashing, encoding, converters, generators — served with a strict CSP and HSTS. |
| 🕸️ FileGraph | Live 3D WebGL map of an entire server filesystem: 139,000 nodes rendered in 38 draw calls, via server-side layout, a binary wire protocol (2.9 MB instead of 46 MB of JSON) and GPU instancing. |
| 📊 DevSync Hub | Homelab dashboard wired to real service state — no mock data, no decorative uptime numbers. |
| 🛒 amazon-ram-monitor | DDR5 price tracker polling EU storefronts hundreds of times a week, with detection and back-off for every shape of soft-block Amazon throws at it. |
| 🏆 supercell-stats | Clash Royale / Brawl Stars stats site — live at supercellstats.com — routed through a fixed-IP proxy because Supercell pins API keys to an IP. |
| 🤖 Telegram bots | Four of them: infra alerts, media requests, the daily server report, and a shared control bot. |
Most of these live in private repos — they hold live credentials for my own infrastructure. Everything below is public and browsable.
- ThePasswordCrack — Chrome extension that auto-solves The Password Game: a constraint solver, a runtime memory spy and a network interceptor, 29 of 35 rules beaten.
TypeScript·Manifest V3 - ClaudeCodeManager — A desktop compositor for Claude Code sessions on Windows. Tiling and floating panes, each with its own terminal and
claudeprocess, drag-to-rearrange, fuzzy project picker, session resume.TypeScript·Electron - SUPERCELL-STATS — The stats site above, in full: player lookup, battle history and deck analysis for Clash Royale and Brawl Stars. Live at supercellstats.com.
TypeScript·Next.js
Nearly all of it runs on my own hardware, behind my own reverse proxy, watched by my own dashboards — including the GitHub stats cards further down this page.
Intel i5-6500T · Ubuntu 24.04 · Docker · Caddy + Authelia in front of everything · Wazuh watching it all
📦 Click to see the full stack
| Category | Services |
|---|---|
| 🔒 Auth & Security | Authelia (SSO + 2FA, deny-by-default) · Wazuh SIEM · Fail2ban · UFW |
| 🌐 Networking & DNS | Caddy (per-host ACME) · AdGuard Home · Cloudflare DDNS · Tailscale |
| 📊 Monitoring | Prometheus · Grafana (custom dashboards) · Uptime Kuma · Scrutiny (disk SMART) · cAdvisor · Dozzle |
| 🎬 Media | Jellyfin (Intel QuickSync transcoding) · Radarr / Sonarr / Prowlarr · Decluttarr · Immich · RomM · Kavita |
| 🎮 Gaming | Minecraft Paper server on Pterodactyl (AuthMe + FastLogin) · mc-router |
| 🤖 Automation | n8n · custom Telegram bots · nightly health-report cron · Watchtower |
| 🛠️ Tools | Portainer · Dockge · Code Server · IT-Tools · Zipline · Umami |
| 📚 Docs | MkDocs at docs.nixospace.it — service pages generated automatically from the running stacks |
Three things this box taught me the hard way:
- 🕵️ AdGuard Home's
ratelimitis per-server, not per-client — the default silently throttled my whole LAN and looked exactly like flaky Wi-Fi for weeks. - 🎨 Draw calls, not GPUs, kill a 139k-node WebGL scene: 24,566 → 38 through batching and instancing, with zero hardware changes.
- 🧾
set -ein a cron'd shell script fails silently — my documentation generator had been dead for two months before anything surfaced it. Now every scheduled job reports, success or failure.
Languages I actually ship in
Infrastructure & Ops
AI & Automation
Day job
| 📡 Where | TikTok Live — most evenings |
| 🎯 What | Minecraft 1.8.9 PvP on Lunar Client, Fortnite, horror runs (Visage) |
| 🌐 My server | Self-hosted Paper server on Pterodactyl, AuthMe + FastLogin |
| 🖥️ Rig | Ryzen 9 7900X · RX 9070 · RTX 3050 as a dedicated encoder · 270 Hz |
☝️ The top two cards are rendered by my own homelab, not by the public instance. Fitting, I think.
