Skip to content
View christianlehnert's full-sized avatar
🐧
🐧
1 follower · 5 following
  • Entris Banking AG
  • Bern
  • 11:32 (UTC +02:00)
  • Joined Oct 5, 2026

Block or report christianlehnert

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
christianlehnert/README.md

Christian Lehnert  ·  Infra · Automation · DevOps  ·  Self-hosting since 2012  ·  🇨🇭

Ops side of things. For backend, security and the rest, see my main account → @chfle

whoami

$ cat /etc/motd
  role     : infra / automation / devops
  os       : Debian, everywhere
  rule #1  : if you do it twice, script it
  rule #2  : if it's not in git, it doesn't exist
  rule #3  : own the hardware, own the keys

Everything under c0xl.ch runs on my own metal: racked, networked, provisioned and monitored by me. This account is where the plumbing lives — configs, playbooks, pipelines, scripts.

Infra — live

c0xl.ch chat.c0xl.ch sync.c0xl.ch pdf.c0xl.ch

              internet
                 │
        ┌────────┴────────┐
        │  edge / ZBFW    │  Cisco Catalyst · MikroTik RouterOS
        └────────┬────────┘
                 │  VLAN-segmented
     ┌───────────┼─────────────┐
     │           │             │
  WireGuard    Caddy       wstunnel
  (sync.)    (reverse proxy, TLS)
                 │
     ┌───────────┴───────────────────┐
     │  Proxmox cluster — Dell VRTX  │
     │  3× M630 blades               │
     │  VMs + LXC + Docker           │
     └───────────────────────────────┘

Stack — the ops version

Domain Tools
Virtualization Proxmox VE · KVM · LXC
Containers Docker · Docker Compose
Automation Bash · Python · Ansible · cron / systemd timers
CI/CD GitHub Actions · Git-driven deploys
Networking Cisco Catalyst · MikroTik RouterOS · VLAN / ZBFW design · WireGuard · wstunnel
Edge Caddy · automatic TLS · reverse proxy
Data PostgreSQL · MariaDB · Redis — backed up, tested restores
Observability Uptime Kuma · logs · alerting
OS Debian · i3 · tmux · Vim

Principles

  • Infrastructure as code — no snowflake servers, rebuild from repo
  • Least privilege — segmented networks, minimal exposed surface, keys not passwords
  • Boring is good — Debian stable, well-understood tools, fewer moving parts
  • Backups don't exist until restored — so restores get tested

Contact

Popular repositories Loading

  1. christianlehnert christianlehnert Public

  2. pipeline-templates pipeline-templates Public

    Shell

  3. hello-java-pipeline hello-java-pipeline Public

    Java

  4. hello-dotnet-pipeline hello-dotnet-pipeline Public

    C#