Systems & identity
Linux and Windows servers, virtualization with Proxmox, Active Directory and Entra ID, Exchange on-prem and online. At work and on two sites of my own.
System engineer from Zurich, known online as Skyfay. I run my own infrastructure, from firewalls and virtual machines to containers and backups, host free services on it and build open source tools like SkySend and DBackup. Off the keyboard: video games and my motorcycle.
Most of my work happens where software meets the machines it runs on. I like owning the whole path.
Linux and Windows servers, virtualization with Proxmox, Active Directory and Entra ID, Exchange on-prem and online. At work and on two sites of my own.
Firewalls, network access control and the security side of operations, from detection to endpoint protection. Every service I run sits behind a firewall and opens only what it needs.
Open source tools that come out of running things myself: encrypted sharing with SkySend, database backups with DBackup.
My services live in two places: my own setup in Zurich and servers at Hetzner in Germany. Each site has its own firewall, backups and monitoring cover both.
My own setup, in my hands from the firewall to the containers.
Servers in a Hetzner data center for everything that needs a second home.
Both sites are snapshotted daily, encrypted and rotated after 30 days.
Both sites are watched 24/7. When something breaks I know first, and updates go out on Discord.
$ docker ps --format table NAME STATUS traefik Up (healthy) skysend Up (healthy) vaultwarden Up (healthy) $ backup --nightly ✓ snapshot encrypted ✓ stored off-site ✓ rotated, keeping 30 days
The static websites like skyfay.ch, skysend.app and dbackup.app run on Cloudflare Workers, a few services use it too. SkySend is served straight from Zurich, so large files take the shortest path.
Most of it from the day job as a system engineer, the rest from running my own two sites and building DBackup, which taught me more databases and storage protocols than I ever planned to learn.
Two open source tools born from operating my own servers, and the services they keep alive.
End-to-end encrypted file and note sharing
Zero-knowledge sharing you can run on your own server. One Docker container, the key lives in the link after the #.
Database backups for people who run servers
Scheduled backups for MySQL, PostgreSQL, MongoDB, Redis and more, encrypted, compressed and with retention rules.
02:00:01 postgres-prod dump ✓ 02:00:15 aes-256-gcm encrypt ✓ 02:00:19 s3 + local upload ✓github.com/skyfay/dbackup
Free services I host for everyone
My production playground. No subscription, no premium tier, run in Switzerland and Germany.
Tech, tutorials, news and worklogs
Where I write about what I build, what breaks at 2 a.m. and how I fixed it.

Computers got me early. I built my first PCs at around 12 and never really stopped. Today I am a system engineer by day. Online I go by Skyfay, and what started as tools for myself grew into services other people rely on.
Write me an email or find me on Discord. I read everything, even if the answer takes a day.