[{"content":"A reference stack where one gateway does everything - L7 path routing, L4 raw TCP proxying for Postgres, per-route basic auth, and native Prometheus metrics into Grafana.\nThe React + NestJS + Postgres app exists only to generate real traffic worth routing and watching.\nStack # Deployed to Kubernetes with Kustomize on k3d.\nGet it # One command builds the images, creates the k3d cluster, applies the manifests and waits for readiness:\n./scripts/k3d-up.sh # http://localhost:30080/ ./scripts/k3d-down.sh # tears everything back down anas1412/envoy-fullstack-k8s Envoy as the single ingress: L7 path routing, L4 Postgres proxying, per-route basic auth, native Prometheus metrics -\u0026gt; Grafana. React + NestJS + Postgres on k3d via Kustomize. TypeScript 0 0 ","date":"15 August 2026","externalUrl":null,"permalink":"/projects/envoy-fullstack-k8s/","section":"Projects","summary":"Envoy as the single ingress: L7 routing, L4 Postgres proxying, per-route auth and Prometheus metrics through one gateway.","title":"Envoy Full-Stack Reference","type":"projects"},{"content":"Give your tenants API keys that forward to your real LLM providers, without running any state of your own.\nHow it works # You create Channel CRDs holding the real provider keys You create a Group CRD per tenant, listing the channels they may use Tenants create ProxyKey CRDs in their own namespaces, referencing their Group Why # Every LLM gateway I looked at wanted Postgres and Redis to store what Kubernetes already stores. CRDs and Secrets are the database.\nGet it # kubectl create namespace llmproxy-system kubectl apply -f deploy/crds.yaml kubectl apply -f deploy/operator.yaml anas1412/llmproxy-k8s Kubernetes-native LLM proxy — virtual API keys for your tenants. No database, no Redis, just CRDs and Secrets. TypeScript 0 0 ","date":"17 July 2026","externalUrl":null,"permalink":"/projects/llmproxy-k8s/","section":"Projects","summary":"A Kubernetes-native LLM proxy that issues per-tenant API keys using CRDs and Secrets - no database, no Redis.","title":"llmproxy-k8s","type":"projects"},{"content":"Four views over one set of data. Ideas exist as physical objects on an infinite canvas, drift through a custom physics engine, snap into kanban columns, align on a time grid, or surface through search.\nOpen the live version Why # Built for non-linear thinkers. Most tools pick one metaphor and force everything into it; the metaphor should be a view, not a cage.\nStack # Local-only. No authentication, no cloud, everything in the browser\u0026rsquo;s IndexedDB. The AI assistant runs on OpenRouter, bring your own key.\nGet it # git clone https://github.com/anas1412/cyberiaspace cd cyberiaspace bun install bun run dev Serves on http://localhost:5173. Or use the hosted build - it\u0026rsquo;s local-only either way, nothing leaves the browser.\nanas1412/cyberiaspace A local visual thinking workspace where the same ideas flow through Spatial, Kanban, Calendar, and Directory views. TypeScript 2 0 ","date":"23 July 2026","externalUrl":null,"permalink":"/projects/cyberiaspace/","section":"Projects","summary":"A local-only thinking workspace where the same ideas flow through spatial, kanban, calendar and directory views.","title":"Cyberia Space","type":"projects"},{"content":"Tickets, git worktrees and pull requests for AI coding sessions, running locally.\nOpen the live version Why # An agent session is a unit of work. Treating it like one - with a ticket, a branch and a PR - makes it reviewable instead of disposable.\nNot affiliated with opencode; built by a user, not the team.\nGet it # curl -fsSL https://raw.githubusercontent.com/anas1412/opencode-pinboard/main/pinboard.sh | bash There\u0026rsquo;s a compiled installer binary on the releases page too.\n","date":"6 July 2026","externalUrl":null,"permalink":"/projects/opencode-pinboard/","section":"Projects","summary":"A local ticket workspace for opencode - turns AI coding sessions into tickets, worktrees and PRs.","title":"Pinboard","type":"projects"},{"content":"I\u0026rsquo;m Anas, a site reliability and DevOps engineer based in Tunisia. I run Kubernetes in production and help teams make their infrastructure secure, cheaper and reliable.\n","date":"15 August 2026","externalUrl":null,"permalink":"/","section":"Anas B.","summary":"","title":"Anas B.","type":"page"},{"content":"","date":"15 August 2026","externalUrl":null,"permalink":"/tags/envoy/","section":"Tags","summary":"","title":"Envoy","type":"tags"},{"content":"","date":"15 August 2026","externalUrl":null,"permalink":"/tags/kubernetes/","section":"Tags","summary":"","title":"Kubernetes","type":"tags"},{"content":"","date":"15 August 2026","externalUrl":null,"permalink":"/tags/observability/","section":"Tags","summary":"","title":"Observability","type":"tags"},{"content":"Open-source work, mostly Kubernetes infrastructure. Each page links to its source.\n","date":"15 August 2026","externalUrl":null,"permalink":"/projects/","section":"Projects","summary":"","title":"Projects","type":"projects"},{"content":"","date":"15 August 2026","externalUrl":null,"permalink":"/tags/","section":"Tags","summary":"","title":"Tags","type":"tags"},{"content":"","date":"23 July 2026","externalUrl":null,"permalink":"/tags/ai/","section":"Tags","summary":"","title":"Ai","type":"tags"},{"content":"","date":"23 July 2026","externalUrl":null,"permalink":"/tags/product/","section":"Tags","summary":"","title":"Product","type":"tags"},{"content":"","date":"23 July 2026","externalUrl":null,"permalink":"/tags/typescript/","section":"Tags","summary":"","title":"Typescript","type":"tags"},{"content":"","date":"17 July 2026","externalUrl":null,"permalink":"/tags/llm/","section":"Tags","summary":"","title":"Llm","type":"tags"},{"content":"","date":"6 July 2026","externalUrl":null,"permalink":"/tags/bun/","section":"Tags","summary":"","title":"Bun","type":"tags"},{"content":"","date":"6 July 2026","externalUrl":null,"permalink":"/tags/react/","section":"Tags","summary":"","title":"React","type":"tags"},{"content":"","date":"6 July 2026","externalUrl":null,"permalink":"/tags/tooling/","section":"Tags","summary":"","title":"Tooling","type":"tags"},{"content":"","externalUrl":null,"permalink":"/2026-09-21/","section":"Anas B.","summary":"","title":"","type":"page"},{"content":"I\u0026rsquo;m a site reliability and DevOps engineer based in Hammamet, Tunisia, working remotely. I run Kubernetes in production every day: GitOps, gateways, monitoring and incident recovery.\nWork with me # Kubernetes/Docker audit in one week. I review your setup for security, cloud costs and reliability. You get a written report and I fix the top issues. Fixed price.\nI take fixed-scope missions as a registered auto-entrepreneur, so I can invoice. Write to anas.bassoumi@gmail.com or message me on LinkedIn.\nExperience # IT Consultant (Site Reliability Engineering) Aug 2026 - Now Scientific Consulting Run 2 Kubernetes clusters on OVH (15 production nodes, about 50 customer tenants) with GitOps (Flux). Recovered a production ingress outage onto a new OVH Octavia load balancer, restoring all 134 hostnames with zero Ingress changes. Built alerting end to end: Alertmanager to Mattermost, 52 alert rules, uptime probes on 48 tenant sites. Migrated log shipping from end-of-life Promtail to Grafana Alloy and fixed Loki persistence, closing a silent log-drop window on every restart. Restructured the Envoy Gateway into a base-plus-overlay layout, unblocking the Gateway API rollout across both clusters. Founder and Engineer Feb 2024 - Aug 2026 Cyberia AI Studio, self-employed Delivered automation and web apps with AI integration for up to 8 clients at the same time. Automated accounting workflows for accounting firms for about a year, including the FIDO fee management dashboard. Built and launched Cyberia Space, an open-source AI workspace with 50+ users. DevOps Engineer Jan 2023 - Jan 2024 Kamioun Containerized the Magento infrastructure with Docker. Built GitLab CI pipelines for automated deployments; deployments about 25% more efficient. Added monitoring and code quality tooling (Grafana, SonarQube). Cloud/DevOps Engineer (intern) Jun 2022 - Aug 2022 Beirdo Digital Studio Built a GitOps CI/CD pipeline with Kaniko and ArgoCD. Deployed Backstage; the product team shipped code 20% faster. Added Loki for push-based log monitoring. Earlier: software developer intern at YES INTERNET (2021) and automation engineer intern at Upgrade Factory (2020).\nSkills # Containers and orchestration: Kubernetes, Docker, Flux and ArgoCD (GitOps), Envoy Gateway, Kaniko Infrastructure as code: Terraform, Ansible CI/CD: GitLab CI, SonarQube, Backstage Observability: Prometheus, Alertmanager, Grafana, Loki, Alloy Cloud and systems: OVH, AWS, Google Cloud, Linux, Bash, networking Education # Engineering Degree (Diplôme National d\u0026rsquo;Ingénieur), Computer Engineering, ESPRIT, 2024 Applied Bachelor\u0026rsquo;s Degree in Embedded Systems, ISI (Higher Institute of Computer Science), 2020 ","externalUrl":null,"permalink":"/about/","section":"Anas B.","summary":"","title":"About","type":"page"},{"content":"","externalUrl":null,"permalink":"/authors/","section":"Authors","summary":"","title":"Authors","type":"authors"},{"content":"","externalUrl":null,"permalink":"/categories/","section":"Categories","summary":"","title":"Categories","type":"categories"},{"content":"Notes on personal development, life, business, psychology, and software engineering.\nDifferent subjects, same questions: how to think clearly under pressure, how to build a process you\u0026rsquo;ll actually follow, and how to tell real progress from noise.\n","externalUrl":null,"permalink":"/posts/","section":"Posts","summary":"","title":"Posts","type":"posts"},{"content":"","externalUrl":null,"permalink":"/series/","section":"Series","summary":"","title":"Series","type":"series"}]