OPERATIONAL ALEXANDRIA, VA

Gideon Oteng

Network engineer building operational systems that don't fall over.

Tier-1 ISP backbone work at Cogent Communications. Multi-vendor enterprise networks at CDW. Self-hosted infrastructure for the curiosity tax — Proxmox cluster, wildcard TLS, Cloudflare Tunnel, the works. Currently studying for the next layer up.

View work → Get in touch

// Selected work

Things I've built

All projects →

PROJECT ACTIVE

SecureBytes Homelab

Self-managed Proxmox cluster running production-style network and security infrastructure — eight services behind nginx with wildcard TLS, public exposure via Cloudflare Tunnel.

ProxmoxpfSenseUniFinginxLet's Encrypt

PROJECT IN PROGRESS

Network Automation Toolkit

Migrating homelab service provisioning from imperative shell scripts to Ansible playbooks — covering LXC bootstrap, nginx vhost templating, Pi-hole DNS records, and TLS cert distribution.

AnsiblePythonBashCloudflare APIJinja2

// Field notes

Recent writing

All posts →

WRITING Apr 26, 2026

Wildcard TLS for a self-hosted homelab — Cloudflare DNS-01, end to end

How I gave eight internal services real Let's Encrypt certificates with one wildcard, no port forwards, and automated renewal. Walks through the Cloudflare token, acme.sh setup, nginx wiring, and the gotchas that bit me.

homelabtlscloudflarenginx

// /now

What I'm working on

Day job

Operations Analyst at CDW — supporting hundreds of enterprise networks across SD-WAN, firewall, and cloud-connected environments.

Building

Self-hosted homelab on Proxmox — eight services behind nginx with wildcard TLS, public exposure via Cloudflare Tunnel, IDS/SIEM via Security Onion.

Studying

Network automation with Python and Ansible. Migrating homelab configurations toward infrastructure-as-code.