I automate the boring so I have time to break the interesting.
I run Linux boxes, ship native Apple apps, and build privacy-first tools — almost always because I needed the thing myself and didn't feel like renting it back from someone else's cloud. Lately I'm pointing all that automation at a bigger target: agentic engineering — getting AI agents to do the real work, not just autocomplete it.
📍 Switzerland · ⚙️ DevOps, Automation & Platform Engineering · 🤖 Heading into agentic engineering
💼 Open to work.
If you only click three things:
- 📝 VaultSync — Obsidian notes on your iPhone, synced peer-to-peer over Syncthing. No note cloud, no account, no tracking. On the App Store.
- 🔎 LOOGI — a privacy-first search engine I actually run in production at loogi.ch.
- 📊 codexbar-plasmoid — your AI coding limits (Claude, Codex & 56 more) right in your KDE Plasma panel, so you never hit the wall mid-flow. Listed in CodexBar's official README.
- 📝 VaultSync — self-hosted Obsidian sync for iPhone & iPad. Swift 6 + SwiftUI, with Syncthing embedded via Go/gomobile and an optional push relay. Localized in EN/DE/ES/中文. On the App Store.
- 📊 codexbar-plasmoid — KDE Plasma 6 widget that keeps real-time AI provider usage in your panel: session/weekly quotas, pace, credits, local cost, and provider status for Claude, Codex, and 56 more providers. A faithful Linux port of the macOS menu bar app CodexBar — and listed in its official README.
- 🔎 LOOGI — privacy-first metasearch on SearXNG, with a hardcoded theme, a curated engine list, and config baked into the image at build time. 16 ADRs explain every non-trivial call. Live at loogi.ch.
- 🕵️ Twitter/X Spy Link Remover — kills
t.cotracking redirects so your clicks go straight to the real URL. Pure vanilla JS, no backend, no requests. On Greasy Fork.
- 🏠 homelab — my entire self-hosted stack as code: 17 services on one bare-metal box ("airbase", Debian), all Docker Compose. Defense-in-depth networking where the bind address itself is a security layer, VPN-gated egress, automatic updates, and a Telegram ping for every event that matters. Published as a reference, with secrets stripped out. Hosts loogi.ch in production.
- Automating everything I touch — auto-updating containers, config-as-code, signed-release pipelines, a Telegram ping for every event that matters. If I do it twice, I script it.
- Owning my data — self-hosted notes, photos, passwords, media, and search. The cloud is someone else's computer; mine lives in a Lian-Li case in Switzerland.
- Going agentic — building toward AI agents that do real work, and native tools that put the models right where I'm working.
- Digitalizing the analog — turning manual, cloud-locked workflows into self-owned, automated ones.
- 🤖 Building toward AI agents and agentic workflows — the direction I'm steering everything else.
- 🏠 Just open-sourced my homelab as infrastructure-as-code: 17 self-hosted services, one box, fully Docker Compose.
- 📦 Shipping VaultSync updates and keeping LOOGI's engine list sharp.
- ☸️ Learning Kubernetes — the homelab's likely next step. (preparing for CKA)
- 🚀 Shipped VaultSync to the App Store — solo, end to end: code, CI, signing, notarization, release.
- 🔧 Merged a fix into Nextcloud Server (PR #59317) — fixed something that was annoying.
- 🔌 Got codexbar-plasmoid into CodexBar's official README as a community integration (PR #2085).
- 📜 Published the Spy Link Remover on Greasy Fork.
🔎 loogi.ch — the search engine I run · 📝 vaultsync.eu — my app's home
🎛️ Fun facts
- My homelab predates the AI hype by years — I was self-hosting long before it was cool.
- I self-host my own Plex, Nextcloud, Immich, Vaultwarden, Git server, and search engine. If there's a SaaS for it, I've probably tried to self-host it instead.
- I block
t.coat the DNS level — and wrote a userscript for the redirects that slip through. - Every non-trivial decision in my repos has an ADR. Future-me deserves to know why.
- My idea of a good evening is a clean
docker compose upand a green CI badge.