Working Stack
Inventory
The tech stack, layer by layer.
Working Stack
My stack layer by layer. Now is what I build and operate with today. Operated is what I have run, migrated or decommissioned across 24 years of IT operations — not in daily use, but I have carried a pager for it.
Workstation & editor
Now
- ·MacBook Pro 14" M3 Pro
- ·Dell U2723QE — 27" 4K external
- ·Logitech MX Master 3S
- ·Keychron K2 (Brown switches)
- ·Cursor (primary, Sonnet / Opus)
- ·Claude Code
- ·Codex CLI
- ·tmux + zsh + Starship
- ·Warp terminal
Languages
Now
- ·TypeScript
- ·Python
- ·Bash / PowerShell
- ·SQL
- ·DAX
Web & application
Now
- ·Next.js (App Router)
- ·React
- ·Tailwind v4
- ·shadcn/ui
- ·NestJS
- ·FastAPI
Compute & virtualization
Now
- ·Docker + Docker Compose
- ·Docker on cloud VPS / cloud-hosted container stacks
- ·Docker Hub (published images)
- ·Kubernetes
Operated
- ·VMware vSphere / ESXi + vCenter
- ·VMware Horizon (VDI)
- ·Hyper-V
- ·Proxmox
- ·Citrix XenServer
- ·Windows Server (2003 → 2022) + Server Core
- ·Failover clustering
- ·P2V migrations
- ·RHEL / CentOS / Ubuntu (RHCE)
Cloud & hosting
Now
- ·AWS
- ·Azure
- ·GCP
- ·Vercel
- ·Hostinger VPS
- ·API hosting — FastAPI / NestJS behind Nginx or Caddy
Operated
- ·Rackspace
- ·DigitalOcean
- ·Linode
- ·GoDaddy · Bluehost
- ·cPanel / WHM · Plesk
- ·Dedicated & colocated servers
Data
Now
- ·Postgres
- ·MySQL / MariaDB
- ·MS SQL Server
- ·Supabase
- ·Redis
Storage & backup
Now
- ·Veeam Backup & Replication
- ·rsync
Operated
- ·SAN — Fibre Channel + iSCSI
- ·NAS — Synology / QNAP
- ·Dell EMC arrays
- ·NFS / SMB shares, quotas + permissions
- ·RAID arrays
- ·Deduplication · storage tiering
- ·Acronis · Commvault · Bacula
- ·Azure Site Recovery
- ·Restore testing + DR drills
Networking & CDN
Now
- ·Cloudflare
- ·CloudFront
- ·Nginx
- ·Caddy
- ·Route 53
- ·Vercel Edge
Operated
- ·Cisco IOS
- ·Cisco Catalyst switching
- ·Routing & switching
- ·VLAN segmentation
- ·Load balancers — F5 / HAProxy
- ·Leased lines & ISP redundancy
- ·DNS + DHCP
- ·Wireshark packet analysis
- ·Structured cabling & fibre
Perimeter & security
Now
- ·Fortinet · SonicWall · Palo Alto · pfSense
- ·Site-to-site VPN
Operated
- ·Cisco ASA
- ·Check Point
- ·Sophos · WatchGuard · Untangle
- ·Web application firewall
- ·SIEM — Splunk / Wazuh / Sentinel
- ·Nessus / OpenVAS vulnerability scanning
- ·Snort IPS
- ·Endpoint protection — Symantec / Sophos / CrowdStrike
- ·DLP
- ·Squid proxy + content filtering
Identity
Now
- ·Active Directory / ADFS
- ·Azure AD / Entra — SSO + Conditional Access
- ·MFA
Operated
- ·Active Directory (multi-site forests)
- ·Group Policy
- ·BitLocker
Email & messaging
Now
- ·Microsoft 365 / Exchange Online
- ·SPF / DKIM / DMARC
- ·Postfix + SpamAssassin
- ·EOP / Defender for Office 365
- ·Mailgun
Operated
- ·Exchange Server on-prem + hybrid migration
- ·SharePoint
Voice platforms
Now
- ·FreeSWITCH
- ·Asterisk
- ·FreePBX
- ·OpenSIPS
- ·Twilio
Operated
- ·Elastix / Vicidial
- ·Avaya
- ·Cisco CallManager
- ·3CX
- ·Softphones & IP handsets
Telephony & carrier
Now
- ·SIP trunks
Operated
- ·E1 / PRI lines
- ·Analog FXO / FXS gateways
- ·Dialogic cards
- ·Sangoma / Digium cards
- ·Carrier & termination vendor management
- ·Toll-free & DID management
- ·G.729 & codec tuning
- ·WebRTC
Contact centre
Now
- ·Dialer campaign operations
- ·DNC / opt-out suppression
Operated
- ·IVR & call routing
- ·Predictive & progressive dialing
- ·Call recording
Self-hosted AI
Now
- ·Ollama — Llama / Qwen / Mistral
- ·vLLM
- ·LM Studio
- ·LiteLLM (model gateway / proxy)
- ·whisper.cpp (ASR)
- ·Tesseract OCR (eng + hin)
Model access
Now
- ·Claude Sonnet / Opus
- ·GPT-4 / o-series
- ·OpenRouter
- ·Groq
- ·Together
- ·Hugging Face
- ·Perplexity
Agents & orchestration
Now
- ·MCP servers
- ·LangChain
- ·LlamaIndex
- ·CrewAI
- ·AutoGen
- ·n8n
- ·Flowise
- ·Dify
Vector & retrieval
Now
- ·pgvector
- ·Qdrant
- ·Weaviate
- ·Chroma
- ·Pinecone
Speech & media
Now
- ·Whisper API
- ·Deepgram
- ·ElevenLabs
- ·Stable Diffusion / ComfyUI
DevOps & CI/CD
Now
- ·Terraform
- ·Ansible
- ·GitHub Actions
- ·CI/CD
- ·Bash scripting
Observability
Now
- ·Prometheus / Grafana
Operated
- ·Nagios · Zabbix · Icinga
- ·PRTG · Cacti
- ·SolarWinds
- ·Datadog · New Relic
- ·Sentry
- ·ELK / Loki
- ·Uptime Kuma
- ·PagerDuty
ITSM & service desk
Operated
- ·Freshservice
- ·Zendesk
- ·osTicket
- ·ManageEngine
- ·Spiceworks
BI & ERP
Now
- ·Power BI
- ·Dynamics NAV / Business Central
- ·Dynamics CRM
- ·Odoo
- ·Zoho One
Outbound & GTM
Now
- ·Apollo
- ·Clay
- ·Smartlead
- ·Instantly
- ·HubSpot
Data centre facilities
Operated
- ·Server room build-out
- ·UPS + power redundancy
- ·Precision cooling
- ·Biometric access control
Governance
Now
- ·ISO 27001 controls
Operated
- ·ISO 27001 implementation + surveillance audits
- ·CMMI Level 3 appraisal
- ·Asset & licence management
- ·Vendor & AMC management
Productivity
Now
- ·Notion
- ·Linear
- ·Cal.com
- ·1Password
- ·Raycast