$ whoami
Thiago "Samurai" Rangel — founder @N3xusD3v · São Paulo, BR
$ cat focus.txt
Self-hosted platforms · DevOps & observability · Secure AI · AppSec & pentesting · LGPD
$ cat principles.txt
Security-first · Evidence-driven · Human-in-the-loop · Production is a gate, not a vibeThings you can open right now, running on infrastructure I built and operate.
| What it is | Built with | |
|---|---|---|
| CyberJust · repo | Cybersecurity media & education about real Brazilian cybercrime cases, with an AI-voiced podcast pipeline | Next.js · TypeScript · Vitest · Playwright · Python (Whisper) |
| status.n3xus.dev | Public status page for the N3XUS lab — services, databases, network and power | Prometheus · Alertmanager · Cloudflare Workers |
| Ops Log AI | AI-assisted aviation operations: flight logs, fuel receipts and maintenance images → human-reviewed records | TypeScript · Firebase · LLM extraction |
| n3xus.dev | Company site in 4 languages, including RTL Hebrew and Arabic | Astro · Tailwind · Cloudflare Pages |
A small production lab, run like a real one:
- Compute — Proxmox VE on a Dell R730 + a self-built X99 node — ~40 monitored VMs, containers and apps
- Deploy — Coolify (self-hosted PaaS), Docker, deploy keys per app, nightly vzdump + off-site backups to Cloudflare R2
- Edge & access — Cloudflare Tunnel, Access (Zero Trust) and Workers in front of everything; nothing exposed directly
- Observability — Prometheus, Alertmanager and exporters for hosts, VMs, MikroTik routers and UPS; alerts to Telegram 24/7 (open-sourced)
- Power — UPS monitored via NUT + diesel generator, so "online" survives a blackout
| Project | What you can verify in the repo |
|---|---|
| n3xus-lab-observability | The lab's monitoring stack, sanitized · 71 Prometheus alert rules tuned on real incidents · read-only Proxmox & MikroTik · NUT/vzdump/Docker collectors · gitleaks-checked · Docker Compose quickstart |
| CyberJust | Unit + E2E tests · SECURITY.md · 185+ issues & PRs with conventional commits · rate-limiter XFF-bypass fix · hardened headers |
| n3xus-video-factory | Self-hosted agentic video pipeline · n8n control plane · Docker Compose validated in CI · human review gates |
| Data Sentinel | Streamlit dashboard over a sensitive Google Sheet · read-only Drive service account · Plotly · Docker |
| GreenPulse | Datacenter energy & SRE dashboard · CI · SECURITY.md / CONTRIBUTING.md · explicit demo-data boundaries |
Client or product confidentiality — architecture walkthroughs available on request.
- 🛡️ CPTS Report AI — self-hosted pentest workspace: authorized scope, evidence, CVSS, compliance mapping, human-reviewed AI reporting
- 🔎 Public-sector security assessment (2026) — authorized recon & vulnerability assessment with sanitized, hash-verified evidence and a remediation roadmap
✈️ n3xs-db — electronic pilot logbook with digital signature (ANAC Res. 458/2017), multi-tenant, LGPD by design
| Repository | What it is | Stack | Last push |
|---|---|---|---|
| CyberJust | Cybersecurity media and education experience exploring Brazilian cybercrime cases, specialists and digital protection. | Python | 2d ago |
| n3xus-lab-observability | Prometheus + Alertmanager monitoring for a self-hosted Proxmox lab: UPS (NUT), IPMI, vzdump backups, Docker, MikroTik (MKTXP), ICMP uplink probes and Proxmox→Telegram notifications. | Python | 4d ago |
| MarolaOT-Scripts | Reproducible automation, diagnostics and safe maintenance for MarolaOT / OTClient / vBot 4.8 — backup, rollback, PowerShell CI. | PowerShell | 4d ago |
| VoltEra-Nexus-The-Energy-Consciousness-Protocol | Interactive digital-art experience connecting clean energy, decentralized infrastructure and speculative technology. | TypeScript | 4d ago |
| Kernel-Mind | Research and product concept for neuroscience-informed ambient soundscapes designed to support developer focus. | — | 4d ago |
Technology map
| Layer | Tools |
|---|---|
| Infra & platform | Proxmox VE, Linux, Docker, Coolify, Cloudflare (Tunnel, Access, Workers, R2), MikroTik |
| Observability | Prometheus, Alertmanager, MKTXP, NUT, Telegram alerting |
| Frontend | TypeScript, React, Next.js, Astro, Vite, Tailwind CSS |
| Backend & APIs | Node.js, Python, FastAPI, Supabase, PostgreSQL, Redis, webhooks |
| AI | LLM integrations & agents, structured extraction, Whisper, local embeddings, voice pipelines |
| Security | Threat modeling, OWASP ASVS/Top 10, CVSS, recon, evidence integrity, LGPD |
| Delivery | Git, Vitest, Playwright, Dockerized local CI, technical documentation |
Helicopter flight instructor and DJ. Aviation taught me checklists, risk awareness and calm decisions under pressure; music taught me timing and how to read a live system. Both shape how I run production.
Need something built, secured or kept online? → contato@n3xus.dev