Hands-on projects to build your skills and infrastructure
What You'll Need
Each project lists prerequisites and hardware requirements
Estimated Time
Projects range from 1 hour to multi-day builds
Build a two-layer secret scanning pipeline with Gitleaks: a pre-commit hook that blocks credentials before they land in history, and a CI gate that catches anything the hook missed.
Deploy Greenbone Community Edition with Docker Compose, script targets, schedules and tasks with python-gvm, and export weekly vulnerability reports.
Build a self-hosted status page that probes HTTP, TCP, DNS, and TLS endpoints with condition-based checks, persists history in SQLite, and alerts to Discord.
Build a scheduled, client-side encrypted, deduplicated offsite backup pipeline for a Docker homelab using restic, the Backrest web UI, and Backblaze B2.
Expose self-hosted homelab services to the internet with zero inbound firewall rules, using cloudflared tunnels and Cloudflare Access policies for...
Deploy an open-source pipeline that pulls DMARC aggregate reports from a mailbox, indexes them in Elasticsearch, and visualizes spoofing attempts in Grafana.
Deploy Fleet in Docker to fleet-manage osquery agents across Linux, macOS, and Windows, run live SQL queries against live endpoints, and alert on drift...
Deploy Zabbix 7.0 in Docker to monitor hosts, containers, and network gear, then wire trigger-based alerts straight into Discord.
Replace Tailscale's cloud coordination server with a self-hosted Headscale instance, then lock the tailnet down with ACL policies, tagged nodes, and a...