palencsar.pro
de en
// LINUX PLATFORMS & RESILIENT INFRASTRUCTURE

Linux platforms. Built to be operated.

Senior Linux Systems Engineer & Infrastructure Specialist

I run Linux platforms, build my own software, and write about what works—and what does not.

// SYSTEM SPECIFICATION
DOMAIN
Bare-Metal / Proxmox VE (HA) / Ceph Storage
NETWORKING
PowerDNS / ACME DNS-01 / Anycast BGP / WireGuard
OPERATIONS
NixOS Flakes / Prometheus / Grafana / Loki
View Experience Get in Touch
profile.yml
YAML
01 profile:
02   role: "Senior Linux Systems Engineer"
03   location: "Malchow, Germany"
04   core_stack:
05     - "Proxmox VE · Ceph"
06     - "NixOS · Nix Flakes · PowerDNS"
07     - "Prometheus · Loki"
08   principles:
09     - "Low-maintenance architecture over tool sprawl"
10     - "Security-by-design and uncompromising hardening"
// 01 PROJECT & FOCUS

Linux, infrastructure, and software I build.

I design, build, and operate high-availability Linux platforms, from virtualization and storage to network services and monitoring.

I have worked professionally with Linux and server infrastructure for over 20 years. For seven years, I ran an IT services company with a team of up to ten. I later worked as an infrastructure consultant, technical editor, and infrastructure auditor.

Today I operate a hosting environment with two NixOS systems: a Proxmox LXC in my homelab and a Hetzner edge server. I describe hosts, services, and shared OpenResty, PHP, and TLS modules declaratively in Nix flakes. I check changes with nixos-rebuild dry-activate before deployment.

The platforms use Proxmox VE and Ceph. PowerDNS handles DNS, and ACME DNS-01 automates TLS certificate issuance. Monitoring runs on a separate stack with Prometheus, Grafana, Loki, and Blackbox; I use T-Pot to analyze real attacks.

I also develop Linux software: BearWave with C++ and Qt 6, ChatVault with Rust and Tauri, and Omarchy Files . I publish technical documentation and reference articles on ADMIN:DOCS .

“Architecture decisions have to hold up in day-to-day operations.”

Sebastian Palencsar // palencsar.pro

01 Infrastructure & Operations

Virtualization, storage, network services, and declarative NixOS configuration.

#Proxmox VE #Ceph #PowerDNS #NixOS #Nix Flakes #Ubuntu #Bare-Metal
02 Linux Desktop & Tooling

Native Linux desktop software for Arch Linux, Wayland, and Hyprland.

#Arch Linux #Qt 6 / C++ #Rust / Tauri #Go #Python #AUR Maintainer #Hyprland
03 Knowledge & Documentation

Operations documentation, technical references, and architecture audits on ADMIN:DOCS.

#ADMIN:DOCS #Technical Writing #Architecture Audits #Prometheus #Grafana #Loki
// 02 CODE & REPOSITORIES

GitHub & Open Source

My Linux projects, AUR packages, and tools live here. The code and changes are public.

// GITHUB PROFIL @SPALENCSAR
AUTOR
Sebastian Palencsar
FOKUS
Arch Linux Desktop & Tools, Qt 6, Rust/Tauri & IaC
REPOS
14 Public Repositories ↗
AUR
3 Packages ↗
GitHub Profil öffnen ↗
// OPEN SOURCE AKTIVITÄT 2026 · GITHUB CONTRIBUTIONS
387 contributions in 2026 · as of Oct 30, 2026
Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec
GITHUB CONTRIBUTION CALENDAR ↗
Less More

Featured Repositories & Tools

View all repositories
// omarchy-files DESKTOP TOOL
FOKUS
Schlanker File Manager und Bar-Launcher für Omarchy und Hyprland auf Arch Linux.
STACK
Go · Shell
ARCH / HYPRLAND
GitHub ↗
// chatvault DESKTOP APP
FOKUS
Lokales Dashboard für KI-Coding-Chats auf Linux. Durchsuchen, Exportieren und Fortführen (Claude, Codex).
STACK
TypeScript · Tauri
LINUX / AI TOOLS
GitHub ↗
// bearwave AUR PACKAGE
FOKUS
Desktop Internet-Radio-App für Linux mit Qt 6 und QML. Schnelles Sender-Browsing, Favoriten und Resume.
STACK
C++ · Qt 6 & QML
AUR: BEARWAVE-GIT
AUR ↗ Web ↗ GitHub ↗
// 03 BLOG

Blog

Notes from my work with Linux, infrastructure, and software I build.

View all articles ↗
// 03.10.2026 // Linux & Systeme

When the CPU Loses Its Memory: Linux on Apple M4

From silent serial consoles and assembly debugging to processors wiping their own registers at idle: Why the Linux bring-up on Apple's M4 is bare-metal detective work – and what sysadmins can learn from it.

#Linux #Apple Silicon #Asahi Linux
~ 16 MIN LESEZEIT Artikel lesen ↗
// 28.09.2026 // Infrastruktur & Architektur

A Resume Without Being Held Hostage

LinkedIn is annoying, yet remains parked in the management VLAN for lack of alternatives. Vutuv offers an open-source approach featuring ActivityPub and open exports. But is a technically superior profile model enough against the market power of the B2B top dog?

#Vutuv #LinkedIn #ActivityPub
~ 9 MIN LESEZEIT Artikel lesen ↗
// 04 EXPERIENCE & MILESTONES

Experience

My background includes seven years running an IT services company, freelance projects, and operating my own Linux platforms.

// 09/2024 – Present Platform Operations & Development

Senior Linux Systems Engineer & Infrastructure Specialist

ADMIN:DOCS & own platforms

▹ I plan and operate Linux platforms and virtualization environments with Proxmox VE.

More details
  • ▹ NixOS flakes describe the hosts and services. Shared modules group OpenResty, PHP, TLS, and ACME.
  • ▹ PowerDNS handles DNS. ACME DNS-01 issues the TLS certificates.
  • ▹ A separate monitoring stack runs Prometheus, Grafana, Loki, and Blackbox. I use T-Pot to analyze real attacks.
// STACK: #Linux #Proxmox VE #NixOS / Nix Flakes #PowerDNS #ACME DNS-01 #OpenResty #Prometheus #Grafana #Loki #T-Pot
// 02/2021 – 07/2025 Freelance

Freelance Infrastructure Consultant

Various Clients (Remote)

▹ For security and IAM projects, I designed permission models, admin access, and recertification processes.

More details
  • ▹ I wrote business continuity and disaster recovery plans, along with IT security policies.
  • ▹ On a telco project, I led datacenter and virtualization planning and migrated physical servers.
  • ▹ I also supported RHEL platforms in production.
// STACK: #Enterprise Linux (RHEL) #IAM / Security #BCP / Disaster Recovery #Datacenter Planning #P2V Migration #GDPR Compliance
// 01/2011 – 05/2023 Freelance

Technical Editor & Infrastructure Auditor

Industry Publications & Clients

▹ I documented technical systems for trade publications and industrial clients.

More details
  • ▹ The subjects ranged from infrastructure engineering and the Linux kernel to open source and cloud infrastructure.
  • ▹ My work also included audits and documentation of existing server and network environments.
// STACK: #Technical Writing #Infrastructure Audits #Linux & Open Source #Cloud Infrastructure #Architecture Documentation
// 09/2003 – 12/2010 Self-employed

IT Founder & Managing Director

psixMedia

▹ I built psixMedia and ran it for seven years, handling both the commercial and technical side. The team grew to ten people.

More details
  • ▹ I rolled out and maintained telecommunications and broadband infrastructure for Deutsche Telekom and Vodafone.
  • ▹ I planned and integrated server, storage, and network solutions for regional businesses.
// STACK: #Systems House Leadership #Team Leadership #Telecommunications #Broadband Rollout #Systems Integration
// 05 CERTIFICATIONS & CREDENTIALS

Certifications & Credentials

Qualifications, certificates, and further training, with dates and the topics covered.

// IHK Rostock (Chamber of Commerce) Vocational Degree
January 2021

IT Specialist for System Integration

Show skills
// FOKUS: #Systems Integration #Linux Administration #Network Architecture
// Canonical & LinkedIn Learning Certified
June 2025

Ubuntu Linux Professional

Show skills
// FOKUS: #Ubuntu system administration #Storage management & LVM #Shell scripting & CLI
// Docker Inc. & LinkedIn Learning Certified
May 2025

Docker Foundations Professional

Show skills
// FOKUS: #Container management #Docker Compose #Best practices
// Cybrary Certified
December 2025

Penetration Testing Professional

Show skills
// FOKUS: #Penetration testing #Vulnerability assessment #Ethical hacking
// Arista Networks Certified
December 2025

Network Automation Professional

Show skills
// FOKUS: #Network automation #Arista CloudVision #Infrastructure as Code
// Continuous Learning 2025 (150+ hours) Continuous Learning
Targeted specialization 2025

Infrastructure-as-Code & Hardening

Show skills
// FOKUS: #Ansible & Vagrant (IaC) #Configuration-as-Code #Security Hardening
Certificates and credentials available on request Inquire ↓
// 06 CONTACT & INQUIRY

Write to me

Have a specific question about Linux, infrastructure, or one of my projects? Write to me.

// DIREKTE E-MAIL PRIMARY
hello@palencsar.pro

Transportverschlüsselung via TLS · EU-Datacenter (Amsterdam)

// OPENPGP SCHLÜSSEL Key .asc ↓
// FINGERPRINT (ED25519)
337E 2CCC E231 74EF 96B7 B8A5 AA1D 2F01 7080 0855
// NETWORK & PROFILES @spalencsar
GitHub github.com/spalencsar ↗ LinkedIn in/spalencsar ↗
// NACHRICHT SENDEN END-TO-END TLS
CSRF VALIDATION & HONEYPOT SHIELD RATE-LIMIT: 5 REQ / 15 MIN