pax_

~/

• systems/

  • linux only
  • declarative config · nixos
  • zfs · snapshots · tested restores
  • proxmox · lxc · kvm
  • reverse proxy · tls automation
• languages/

  • python
  • rust
  • lua · luau
  • php
  • shell
• built/

  • terminal user interfaces
  • retrieval · embeddings
  • llm agents · scoped permissions
  • native desktop clients
  • cli tooling
• security/

  • threat modelling
  • secrets management
  • key-only auth · hardening
  • network segmentation
• stance/

  • foss first
  • least privilege
  • data minimisation
  • digital self-ownership
• hire/

  • backup audit · restores tested
  • monitoring · alerts that fire
  • nixos migration · gated deploys
  • exposure review · what's open
  • fixed scope · no on-call
  • hire@pax.moe