Automação completa via Terraform e Shell Script para provisionar a arquitetura com camada pública (Proxy Nginx + Front React) e camada privada (Backend Java Spring Boot + RabbitMQ), com saída para internet via NAT Gateway.

Azure banking platform: Terraform, AKS, Helm, GitHub Actions, PCI DSS-aligned. Not deployed.

OpenTofu/Terraform project that runs a Docker container on ECS Fargate behind an Application Load Balancer, with HTTPS via ACM and a custom domain in Route 53.

Credit burn predictor for startups and solo devs: feed it your Terraform, get live-priced monthly costs, how many months your cloud credits will last, and a cost-saving tip from a local open-source AI model. Runs in CI and comments on PRs. Hacktoberfest Week 2: Side Hustle.

Serverless lakehouse: dbt-core + DuckDB over Parquet on S3/GCS, event-driven on AWS Lambda or Cloud Run. Incremental Gold, data contracts, cost per run. Live demo with DuckDB-WASM.

Big Data data platform - Spark, data governance, AI agent, Streaming app, ETL&ELT

Three-tier self-healing Kubernetes cluster. Minikube + Floci, designed for EKS.

OpenTofu/Terraform project that creates a small MySQL RDS instance on AWS, reachable only from an admin IP and an EC2 security group.

Segmented Cisco and OPNsense home network on Proxmox, joined to AWS by a WireGuard VPN that home opens. Terraform, Ansible, pull based deploy.

This is a template to be used for creating static web apps, hosted on Azure

Production-style ECS Fargate stack on AWS with ALB, RDS, Secrets Manager and autoscaling, in Terraform

Open-source professional network like LinkedIn: talent pages, verified recruiters, jobs with a live hiring pipeline, consent-based contact unlock, messaging, a feed and an admin control plane. Self-hosted, Terraform for AWS.

Practice questions for Microsoft certification exams, written on demand by AI agents from today's Microsoft Learn docs.

Enterprise Azure Management Landing Zone in Terraform: Centralized Log Analytics workspace, Azure Monitor diagnostic settings, action groups, budget alerts, and platform observability.

Deterministic configuration coverage for software repositories — discover which env vars, feature flags, CLI options, config files, and deployment parameters your tests actually exercise. Codecov for configuration space.

PySpark job on AWS Glue 5.0: raw events to clean, deduplicated Parquet partitioned by event date. Terraform, tests, idempotent reruns.

Self-hosted, read-only financial analysis dashboard: portfolio, tax and retirement planning with AI-assisted research — plus the security and governance engineering behind it (encrypted vault, audit hash-chain, RBAC, ISO 27001/SOC 2 mapping).

GitOps, observability and DevSecOps platform for the InsureHub Group ecosystem (k3s, ArgoCD, Terraform, OpenTelemetry) plus ecosystem architecture docs.

CloudCognition: Serverless, event-driven cloud infrastructure copilot that ingests production error logs asynchronously via AWS Lambda & SQS, performs AI-powered root-cause analysis with LLMs, and triggers real-time SNS alerts. Fully provisioned with Terraform. 🤖☁️⚡

Terraform AWS platform with an S3 remote backend, GitHub OIDC (separate plan and apply roles), and plan/apply/destroy workflows in GitHub Actions. A Lambda page is deployed end to end.

AI Digital Twin

Describe an environment once (machines, networks, services), run it anywhere: Docker, local VMs, Proxmox, cloud.

Visual multi-zone VPC and subnet planner for AWS, Azure and Google Cloud - reserved-address rules, aligned packing, overlap check, design review and Terraform/CloudFormation/Azure CLI/gcloud export. Single HTML file. Live at jhooq.com/tools/vpc-subnet-planner

OpenTofu modules behind every OrkStage resource on AWS: VPC, ECR, ECS, RDS Postgres, ElastiCache Valkey, SQS, S3, ALB and Route 53. No secrets in state. Usable on their own. Apache-2.0.

Enterprise Azure Cloud Adoption Framework (CAF) Landing Zone in Terraform: Hub-and-Spoke mesh, Azure Firewall, Bastion, bidirectional VNet peering, and UDR inspection.

OpenTofu/Terraform project that hosts a static website on a private S3 bucket behind CloudFront (OAC), with an ACM certificate and a custom domain in Route 53.

Multi-tenant console for supplier bill exceptions. Workers check bills and raise exceptions, an LLM agent drafts a bounded fix, and nothing reaches accounting until a second person approves.

Learning system design and DevOps by building a ticket reservation platform with Python, PostgreSQL, Docker, Terraform, and Azure Kubernetes Service. Exploring reliable messaging, workload identity, and private networking.

Code listings for the book Site Reliability Engineering for AI by Jyothi Kodenkiri (AI and Cloud Technology series)

⚡ Interactive Distributed Architecture & Chaos Simulation Engine with Living System Specs, Queuing Theory, and Automated SRE Benchmarks.