Cybersecurity, infrastructure and AI engineering writeups.https://resume.leonfuller.com/enhttps://resume.leonfuller.com/en/blog/from-port-forwarding-to-cloudflare-tunnels/https://resume.leonfuller.com/en/blog/from-port-forwarding-to-cloudflare-tunnels/Two years of self-hosting on a Raspberry Pi, told as two architectures: the classic port-forwarding + reverse-proxy setup with a homegrown dynamic-DNS script, and the Cloudflare Tunnel + Zero Trust design that replaced it - with zero open ports.Fri, 10 Jul 2026 00:00:00 GMThttps://resume.leonfuller.com/en/blog/immich-migration-and-nextcloud-storage-lessons/https://resume.leonfuller.com/en/blog/immich-migration-and-nextcloud-storage-lessons/Moving a photo library across CPU architectures without converting the database, why version pinning saved the migration, and the VirtualBox incident that taught me where bulk data does - and doesn't - belong.Fri, 10 Jul 2026 00:00:00 GMThttps://resume.leonfuller.com/en/blog/operating-wazuh-ai-soc/https://resume.leonfuller.com/en/blog/operating-wazuh-ai-soc/The operations half of the Wazuh AI assistant: capacity without a load balancer, human-approved actions with zero standing credentials, an audit trail the SIEM itself watches, and the playbook for the worst question a multi-tenant platform can face.Fri, 10 Jul 2026 00:00:00 GMThttps://resume.leonfuller.com/en/blog/self-hosted-spotify-with-navidrome/https://resume.leonfuller.com/en/blog/self-hosted-spotify-with-navidrome/Mirroring a 2,900-track Spotify library onto a Raspberry Pi with Navidrome and spotdl: metadata banking, resumable backfills, playlist reconstruction from ID3 tags, and everything Spotify's rate limiter taught me.Fri, 10 Jul 2026 00:00:00 GMThttps://resume.leonfuller.com/en/blog/wazuh-ai-assistant-poc/https://resume.leonfuller.com/en/blog/wazuh-ai-assistant-poc/How I designed and self-hosted an AI security assistant for Wazuh whose answers are verifiable by construction, with a real identity chain and pluggable inference from Amazon Bedrock to fully local models.Thu, 09 Jul 2026 00:00:00 GMThttps://resume.leonfuller.com/en/blog/nextcloud-raspberry-pi-docker-setup/https://resume.leonfuller.com/en/blog/nextcloud-raspberry-pi-docker-setup/The full build of my first real self-hosted service: Nextcloud on a Raspberry Pi with Docker Compose, PostgreSQL, Redis, Traefik with Let's Encrypt, imaginary previews, and working client push via notify_push.Wed, 24 Jul 2024 00:00:00 GMThttps://resume.leonfuller.com/en/blog/creating-homeserver/https://resume.leonfuller.com/en/blog/creating-homeserver/Discover the benefits of setting up a home server, from enhancing privacy to saving money on cloud services.Sat, 20 Jul 2024 00:00:00 GMT