HX LabThe Self-Hosted DevSecOps Platform

Security-focused infrastructure, designed and operated like production.

Networking

Segmented VLAN architecture, routing, DNS control, and secure service exposure across internal and external boundaries.

Centralized identity and authentication flows using Authentik, with controlled access across services and environments.

Zero trust design, host hardening, threat modeling, and continuous scanning with DevSecOps tools.

Infrastructure provisioning with OpenTofu, configuration via Ansible, and containerized workloads using Podman.