I automate the boring so I have time to break the interesting.
I run Linux boxes, ship native Apple apps, and build privacy-first tools β almost always because I needed the thing myself and didn't feel like renting it back from someone else's cloud. Lately I'm pointing all that automation at a bigger target: agentic engineering β getting AI agents to do the real work, not just autocomplete it.
π Switzerland Β· βοΈ DevOps, Automation & Platform Engineering Β· π€ Heading into agentic engineering
πΌ Open to work.
If you only click three things:
- π VaultSync β Obsidian notes on your iPhone, synced peer-to-peer over Syncthing. No note cloud, no account, no tracking. On the App Store.
- π LOOGI β a privacy-first search engine I actually run in production at loogi.ch.
- π codexbar-plasmoid β your AI coding limits (Claude, Codex & 56 more) right in your KDE Plasma panel, so you never hit the wall mid-flow. Listed in CodexBar's official README.
- π VaultSync β self-hosted Obsidian sync for iPhone & iPad. Swift 6 + SwiftUI, with Syncthing embedded via Go/gomobile and an optional push relay. Localized in EN/DE/ES/δΈζ. On the App Store.
- π codexbar-plasmoid β KDE Plasma 6 widget that keeps real-time AI provider usage in your panel: session/weekly quotas, pace, credits, local cost, and provider status for Claude, Codex, and 56 more providers. A faithful Linux port of the macOS menu bar app CodexBar β and listed in its official README.
- π LOOGI β privacy-first metasearch on SearXNG, with a hardcoded theme, a curated engine list, and config baked into the image at build time. 16 ADRs explain every non-trivial call. Live at loogi.ch.
- π΅οΈ Twitter/X Spy Link Remover β kills
t.cotracking redirects so your clicks go straight to the real URL. Pure vanilla JS, no backend, no requests. On Greasy Fork.
- π homelab β my entire self-hosted stack as code: 17 services on one bare-metal box ("airbase", Debian), all Docker Compose. Defense-in-depth networking where the bind address itself is a security layer, VPN-gated egress, automatic updates, and a Telegram ping for every event that matters. Published as a reference, with secrets stripped out. Hosts loogi.ch in production.
- Automating everything I touch β auto-updating containers, config-as-code, signed-release pipelines, a Telegram ping for every event that matters. If I do it twice, I script it.
- Owning my data β self-hosted notes, photos, passwords, media, and search. The cloud is someone else's computer; mine lives in a Lian-Li case in Switzerland.
- Going agentic β building toward AI agents that do real work, and native tools that put the models right where I'm working.
- Digitalizing the analog β turning manual, cloud-locked workflows into self-owned, automated ones.
- π€ Building toward AI agents and agentic workflows β the direction I'm steering everything else.
- π Just open-sourced my homelab as infrastructure-as-code: 17 self-hosted services, one box, fully Docker Compose.
- π¦ Shipping VaultSync updates and keeping LOOGI's engine list sharp.
- βΈοΈ Learning Kubernetes β the homelab's likely next step. (preparing for CKA)
- π Shipped VaultSync to the App Store β solo, end to end: code, CI, signing, notarization, release.
- π§ Merged a fix into Nextcloud Server (PR #59317) β fixed something that was annoying.
- π Got codexbar-plasmoid into CodexBar's official README as a community integration (PR #2085).
- π Published the Spy Link Remover on Greasy Fork.
π loogi.ch β the search engine I run Β· π vaultsync.eu β my app's home
ποΈ Fun facts
- My homelab predates the AI hype by years β I was self-hosting long before it was cool.
- I self-host my own Plex, Nextcloud, Immich, Vaultwarden, Git server, and search engine. If there's a SaaS for it, I've probably tried to self-host it instead.
- I block
t.coat the DNS level β and wrote a userscript for the redirects that slip through. - Every non-trivial decision in my repos has an ADR. Future-me deserves to know why.
- My idea of a good evening is a clean
docker compose upand a green CI badge.