Heracles
My personal hosting platform on a Raspberry Pi 5: an HTTPS proxy with automatic certificates, unified accounts through Google or Discord, and every service deployed in its own container.
Projects
What actually runs. Games will show up here as soon as they're playable.
A million libcs
Automatically generating a large number of musl libc variants for software diversity: compiler flags, memory layout randomization, then source-to-source obfuscation. 87% of the files obfuscated, 95% of the functional tests still passing.
ESS website
The website of an electrician in Toulon, France. Static, zero JavaScript on the home page, and deployed automatically: every release builds an ARM64 image that the server only has to pull.
Brain MCP
An MCP server that gives an AI assistant access to my notes, from the web or a phone. Every write becomes a git commit; access goes through OAuth, walled off from player accounts.
Pantry MCP
An MCP server for Grocy: an AI assistant keeps my food stock, recipes, meal plan and shopping list up to date.
Heracles Backup
Backups for my hosting platform: a machine at another site pulls the databases, volumes and secrets of the Raspberry Pi over SSH into an encrypted restic repository. The Pi never gets access to the backups.