Skip to content
View Tnembull's full-sized avatar
πŸ€’
cape...
πŸ€’
cape...

Block or report Tnembull

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
tnembull/README.md
Linux Terminal Header


πŸ–₯️ $ fastfetch --config sysinfo

Animated Linux Fastfetch Terminal

Tnembull@node-01:~$ systemctl status tnembull.service
● tnembull.service - DevOps Engineer | Cloud Infrastructure | Automation & Backend Development
     Loaded: loaded (/etc/systemd/system/tnembull.service; enabled; vendor preset: enabled)
     Active: active (running) since Tue 2026-07-28 00:00:00 UTC; 999d uptime
   Main PID: 2026 (app-cluster)
      Tasks: 42 (limit: 4915)
     Memory: 512.0M
        CPU: 0.05s
     CGroup: /system.slice/tnembull.service
             β”œβ”€2026 /usr/local/bin/backend-api-gateway
             β”œβ”€2027 /usr/local/bin/devops-ci-runner
             └─2028 /usr/local/bin/sre-observability-agent


πŸ“‚ $ tree -L 2 /home/Tnembull/skills/

/home/Tnembull/skills/
β”œβ”€β”€ 01_infrastructure_as_code/
β”‚   β”œβ”€β”€ terraform/ (HCL, Cloudflare Edge, DNS, Strict TLS 1.3)
β”‚   └── ansible/ (Idempotent Playbooks, Linux VPS Hardening)
β”œβ”€β”€ 02_observability_&_reliability/
β”‚   β”œβ”€β”€ prometheus/ (PromQL, Metric Scraping, TSDB Storage)
β”‚   β”œβ”€β”€ alertmanager/ (Telegram Alerts, Severity Routing, Deduplication)
β”‚   β”œβ”€β”€ grafana/ (Dashboards-as-Code, Production Red Method)
β”‚   └── disaster_recovery/ (AES-256 GPG, Zero-Lock Snapshots, DR Drills)
β”œβ”€β”€ 03_devsecops_&_containers/
β”‚   β”œβ”€β”€ docker/ (Multi-stage Minimal Alpine Builds, Non-Root)
β”‚   β”œβ”€β”€ security_scanning/ (Aqua Trivy, Gitleaks, Hadolint, NPM Audit)
β”‚   └── github_actions/ (Automated CI/CD Quality Gates & Linters)
└── 04_backend_&_systems/
    β”œβ”€β”€ python/ (Forensic CLI Scanners, Automation, Asyncio)
    β”œβ”€β”€ node_typescript/ (Express, Helmet Hardening, APIs)
    β”œβ”€β”€ golang/ (Microservices, Bridging APIs, CLI Utilities)
    └── linux_admin/ (Systemd, UFW, Network Tables, Reverse Proxy)


πŸ› οΈ $ ls -la /usr/local/bin/tools/

Tools & Technologies


πŸš€ $ cat /proc/sys/devops/featured_projects.json

[
  {
    "repo": "Tnembull/go-core-backend",
    "domain": "Core Backend Architecture",
    "stack": ["Go (Golang)", "Clean Architecture", "TOTP 2FA", "Granular RBAC", "Prometheus", "Postman/Apidog"],
    "summary": "Production microservice core with zero-trust auth, TOTP 2FA, token rotation, and 35 automated E2E tests"
  },
  {
    "repo": "Tnembull/ansible-vps-hardening",
    "domain": "Configuration Management",
    "stack": ["Ansible", "UFW", "SSH Hardening", "Fail2ban", "GitHub Actions"],
    "summary": "Automated declarative Linux VPS security baseline and package provisioning"
  },
  {
    "repo": "Tnembull/terraform-cloudflare-iac",
    "domain": "Infrastructure as Code",
    "stack": ["Terraform", "Cloudflare", "Edge DNS", "Strict SSL/TLS 1.3"],
    "summary": "Declarative edge routing, dynamic subdomains, and zero-drift security policies"
  },
  {
    "repo": "Tnembull/sre-observability-stack",
    "domain": "Telemetry & Observability",
    "stack": ["Prometheus", "Alertmanager", "Grafana", "Telegram Bot"],
    "summary": "Production metric pipelines, PromQL alerting rules, and Dashboards-as-Code"
  },
  {
    "repo": "Tnembull/automated-dr-backup",
    "domain": "Disaster Recovery & Reliability",
    "stack": ["Bash", "GPG AES-256", "SQLite", "Cloud Storage Sync"],
    "summary": "Zero-downtime database snapshots, immutable checksums, and automated DR drills"
  },
  {
    "repo": "Tnembull/devsecops-pipeline",
    "domain": "Shift-Left DevSecOps",
    "stack": ["Gitleaks", "Aqua Trivy", "Hadolint", "Docker Multi-stage"],
    "summary": "Continuous secret scanning, static Dockerfile linting, and container CVE auditing"
  },
  {
    "repo": "Tnembull/npm-supply-chain-scanner",
    "domain": "Cloud & Host Security Forensics",
    "stack": ["Python", "Linux Persistence", "PM2 Auditing", "SARIF"],
    "summary": "Defensive forensic CLI triage tool detecting malicious scripts and backdoor persistence"
  }
]


πŸ“Š $ htop --metric=github-stats

Profile Summary Stats

Streak Stats



🐍 $ ./snake-grid.sh

github contribution grid snake animation


πŸ“‘ $ netstat -tapn | grep LISTEN


Footer Terminal

Pinned Loading

  1. ansible-vps-hardening ansible-vps-hardening Public

    Automated Infrastructure Configuration Management & Production VPS Hardening with Ansible

  2. automated-dr-backup automated-dr-backup Public

    Automated Database Snapshot, AES-256 GPG Encryption, Cloud Storage Sync & Continuous Disaster Recovery Drills

    Shell

  3. devsecops-pipeline devsecops-pipeline Public

    Automated Shift-Left DevSecOps CI/CD Pipeline (Gitleaks Secret Scan, NPM SCA, Aqua Trivy CVE Audit & Hadolint)

    Dockerfile

  4. sre-observability-stack sre-observability-stack Public

    Production Telemetry & Observability Stack (Prometheus, Alertmanager, Grafana Dashboards-as-Code & Telegram Alerting)

  5. terraform-cloudflare-iac terraform-cloudflare-iac Public

    Automated Cloudflare Edge DNS, Proxied Routing & SSL/TLS Security Baseline with Terraform

    HCL

  6. npm-supply-chain-scanner npm-supply-chain-scanner Public

    Defensive security scanner & forensic triage CLI for detecting Node.js supply-chain attacks, malicious scripts, and Linux persistence.

    Python