nxtools

A lightweight PowerShell toolkit to audit and harden Windows 10/11 privacy settings. No bloat. Just scripts that work.

Set up SSH via Cloudflare Tunnel with cloudflared — zero-trust DevOps and CI/CD access without exposing port 22

Automated backup and monitoring tool for pfSense firewalls. Supports config, RRD, DHCP, certificates, ZFS snapshots, and more via SSH/HTTPS.

Headless Cloudflare WARP enrollment for GitHub Actions runners. Full network access via your Zero Trust org.

eBPF runtime security for CI/CD and Linux hosts: egress control, process/file/network monitoring, and audit-mode policy generation. Ships as a CLI and a GitHub Action.

Self-hosted dashboard for Egret runtime-security telemetry: CI/CD egress + event ingest, orgs and RBAC, TOTP, and SSO. Single static Go binary or container, bring your own database.

Free, open-source desktop app for yt-dlp. Download YouTube video/audio in up to 8K with a download queue, playlists, subtitles and history.

Multi-node Proxmox homelab built from bare metal up. Covers networking, firewalling, storage, containers, IaC, CI/CD, security monitoring, and self-hosted services. Built to try, test, break, and learn.

Telegram bot honoring the Israeli comedy duo Shon and Ron (Sharon Teicher and Eran Zarachovitch): character database, trivia quiz, and Hebrew content. Portfolio archive.

Client-side PDF table to Excel/CSV converter. Vanilla JS, runs entirely in the browser, RTL support, PWA, hosted on Cloudflare Pages.

Real-time monitoring and alerting for Proxmox VE clusters with Slack integration. Monitors VMs, resources, ZFS health, and security events cluster-wide.

pfSense geo-blocking for 250+ countries with 175k+ IPv4 and 68k+ IPv6 ranges. Daily Slack report shows who's hitting you, from where, and flags port scanners.

Interactive map of Israeli localities eligible for the periphery income-tax credit (yishuvim mutavim), tax years 2016-2026. Part of the NXTools Collection.

Upload, verify, list, and prune backups in Cloudflare R2 from GitHub Actions. Composite action + reusable workflow with MySQL/Postgres/Mongo/SQLite templates, SSH/Cloudflare-Tunnel transport, and Slack/Discord notifications.

Security-hardened self-hosted Ghost CMS on Docker Compose: nginx reverse proxy, optional Tinybird analytics and ActivityPub, zero-trust Cloudflare Tunnel deploys, Cloudflare R2 backups, and full CI security automation.