Infrastructure
Designing and modernizing real-world infrastructure: virtualization, storage, backup and recovery, monitoring, access management, lifecycle management and migrations.
I fight for the users!
Good systems should make difficult work easier.
01 About
Jaroslav Hůna
I build systems that are understandable, maintainable and replaceable.
In my experience, standard solutions are better than clever ones, and open standards and open-source software fit naturally with that approach.
Transparency matters too. People should understand what a system does and why. Reliable operations and security depend on informed users, not just technical controls.
I document decisions, keep changes versioned and maintain enough traceability to understand what changed, why it changed and how to roll it back.
02 What I do
Infrastructure, automation and software.
I started in hands-on systems administration and gradually moved toward designing IT environments end to end.
Automation
Turning manual and one-off operations into repeatable workflows with Ansible/AWX, Python, PowerShell and Bash.
Software
Small internal systems and tools in Go and Python/Django when adapting an existing product would be harder than building the missing piece.
Security is part of the design.
Access control, segmentation, patching, auditability, backup and documentation should work in everyday operations, not just look good on paper.
I use CIS, ISO 27001, NIST, NIS2 and TISAX as practical references where appropriate.
03 Selected work
A few examples.
Application delivery tooling
GoA small internal launcher and updater for managed Windows applications, with versioned releases, validation and local execution.
Access audit platform
Python / Django / PostgreSQLA Django application that pulls file-share identities and permissions from different systems and keeps a queryable history of effective access.
Legacy infrastructure modernization
Infrastructure / ArchitectureOngoing architecture and migration work around legacy servers, storage, backup, automation, naming and operational standards.
Secure self-hosted collaboration
Infrastructure / SecurityAn internet-facing collaboration platform built around reverse proxying, network segmentation, directory integration, group-based access, monitoring, backup and documented operations.
My professional work is described only at a high level because it belongs to internal environments.
04 Projects
Things I build and run for myself.
JT
A Wagtail / Django project that is still taking shape.
Gramps
My self-hosted genealogy service.
FreshRSS
My RSS reader, self-hosted.
Hunaheim
A Valheim server I run and maintain.
These services run on AlmaLinux using Podman Quadlets for system-managed containers.