About
Software engineer at Bunkerity, BunkerWeb maintainer, and author of BunkerWeb MCP.
My work sits between software engineering and operations. I care about configuration surfaces, releases, documentation, and the evidence that proves a change reached the running system.
I maintain BunkerWeb, an open-source web application firewall (WAF) built on NGINX. BunkerWeb MCP exposes its existing API through constrained tools for compatible AI clients.
Outside those projects, I operate a private container platform that gives the same habits a harder test: explicit authority, narrow privileges, and evidence from configuration through recovery.
Working set
PythonLuaTypeScriptNGINXDockerKubernetesLinux
01
What stays constant
- Scope
- Trace the real path before changing it.
- Safety
- Keep privilege boundaries explicit and changes reversible.
- Evidence
- Separate what is confirmed from what still needs runtime proof.