Skip to content
View tim-shand's full-sized avatar

Block or report tim-shand

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
tim-shand/README.md

Hello! I'm Tim

👋 About Me

  • I enjoy designing, building and automating systems.
  • Over a decade of experience under my belt in support and engineering roles.
  • Fond of repurposed tech (Raspberry Pi, Mini-PCs etc).
  • Home lab enthusiast interested in Cloud, DevOps, GitOps, IaC, scripting, Proxmox, self-hosting.

📚 Currently Learning

  • Developing IaC and GitOps skills with Terraform, Ansible and automation pipelines.
  • Cloud architecture, network design and service integration.
  • Linux systems, management and administration.

🏗️ Currently Building

  • Refining my Azure platform landing zone.
  • Continuously building and tweaking my on-prem home lab.

🛠️ Projects

Azure Platform LZ

  • Custom Azure platform landing zone, inspired by enterprise-scale architecture and CAF guidelines.
  • Designed to be light-weight and cost efficient, utilizing free or low-cost SKUs where applicable.
  • Deployed in stacks (Management, Governance, Connectivity) with independent state files maintaining workload isolation.
  • Bootstrapped via PowerShell script to deploy initial resources into Azure and GitHub repository.
  • IaC automation using Terraform and GitHub Actions workflows.
  • Dedicated service principal with custom RBAC role, utilizing Federated Credentials (OIDC), enabling secure authentication during workflow execution.

Private Cloud Hypervisor Cluster (Home Lab)

  • Multi node hypervisor cluster running Proxmox VE automated with Terraform and Ansible.
  • Replication and high-availability configured for production workloads.
  • Software-defined networking with VNet and VLANs configured in code.
  • OPNsense providing network firewall, VLANs, DNS and routing functionality.
  • Personal home lab environment for self-hosting and training.

Pinned Loading

  1. azure-platform-lz-custom azure-platform-lz-custom Public

    Azure tenant, featuring a light-weight, CAF-aligned platform landing zone. Deployed using Terraform IaC and GitHub Actions.

    HCL 1