Jerome O. Veldad
IT Specialist · Network & Endpoint Security · Systems & Infrastructure
IT Specialist · Network & Endpoint Security · Systems & Infrastructure
IT Specialist with over 9 years of global experience (Philippines, UAE, Italy) managing complex technical environments across healthcare, hospitality, manufacturing, and corporate sectors. Based in Milan, I currently maintain the IT infrastructure and daily operations for four organizations spanning 19 multi-city sites. In my spare time, I architect and manage advanced self-hosted server environments to keep my hands-on skills sharp.
Plan, deploy and secure wired and wireless networks with Cisco Meraki, Ruijie, Netgear, TP-Link, FortiGate and OPNsense.
Endpoint protection with Bitdefender, firewall policy, single sign-on with 2FA, and intrusion monitoring, backed by ISC2 CC.
Administer Google Workspace, Microsoft 365, and Active Directory with Group Policy, from onboarding to access control.
NAS storage, encrypted 3-2-1 backups and disaster recovery planning.
End-user and remote support with RustDesk, 3CX telephony, CCTV, IT asset management, vendor coordination and clear documentation.
Docker containers, Caddy reverse proxy, Pi-hole DNS, Uptime Kuma monitoring, virtualization, remote access with RustDesk and n8n workflow automation.
Watch services and hardware with Uptime Kuma, Prometheus and Grafana, with email alerts when something goes wrong.
Assemble, upgrade and repair PCs, from parts selection and cable management to cooling and power protection.
My homelab is a hobby I design, build and run in my spare time: a self-hosted private cloud for my photos, media and automations, guarded by single sign-on, active intrusion defense and automated 3-2-1 backups. Click a card to open it.
Branded as Veldad Cloud, my self-hosted services run under the veldad.cloud domain: Immich, Jellyfin and web access to the NAS, which is protected by Authelia SSO and Fail2Ban. Immich alone holds 63,000+ photos and 11,600+ videos (1.49 TiB).
tmpfs) to eliminate RAID drive wearBlue packets follow traffic, orange ones follow alerts and control signals. Hover a component to trace its connections; click it for details.
flowchart TD
Internet(("🌐 Public Internet"))
Email(("📱 SMTP Alert Pipeline"))
subgraph OracleCloud["☁️ External Network (Oracle Cloud VM)"]
UK["⏱️ Uptime Kuma Monitor"]
Rustdesk["🖥️ RustDesk Relay"]
end
subgraph HomeNetwork["🏠 Home Network"]
Router["📶 Home Router"]
subgraph NAS["🗄️ UGREEN DXP6800 Plus NAS (14TB RAID 6, 48GB RAM)"]
subgraph UbuntuVM["💻 Ubuntu VM Walled Garden"]
FW["🧱 Host Firewall"]
Caddy["🔗 Caddy Reverse Proxy"]
Authelia["🔑 Authelia SSO + LLDAP"]
F2B["🛡️ Fail2Ban"]
Pihole["🛑 Pi-hole DNS"]
end
subgraph Dockers["🐳 Bare-Metal Containers"]
Immich["📸 Immich + OpenVINO"]
Jellyfin["🎬 Jellyfin (tmpfs RAM Disk)"]
N8N["⚙️ n8n Automation"]
Mame["🕹️ MAME Arcade"]
Prom["📊 Prometheus + Grafana"]
Workstation["🖱️ WORKSTATION-VM"]
end
end
subgraph Backups["💾 3-2-1 Data Protection"]
JobCloud["⏱️ Nightly Encrypted Rclone"]
JobLocal["⏱️ Nightly Local Sync"]
ExtHDD["💾 5TB External HDD"]
end
end
GDrive["☁️ Google Drive Crypt Vault"]
Internet -->|HTTPS| Router
Router -->|Port forward 80 / 443| FW
FW --> Caddy
Caddy <-->|Forward auth| Authelia
Caddy -->|Reverse proxy| Dockers
Caddy -.->|Access logs| F2B
F2B -.->|Ban rules| FW
F2B -.->|Whois alert| Email
Prom -.->|Capacity / BTRFS alerts| Email
Router -.->|DNS| Pihole
N8N -->|Webhooks| Immich
Dockers -->|Library + Postgres DB| JobCloud
Dockers -->|Snapshot| JobLocal
JobCloud -->|Encrypted Sync| GDrive
JobLocal -->|Local Mirror| ExtHDD
Rustdesk -->|Remote desktop| Workstation
UK -.->|Push / Ping| NAS
Outside work I plan and hand-assemble custom gaming PCs, from parts selection and cable management to cooling and power protection. Click the card to open it.
