Patrick Beane

Infrastructure & Security Engineer

Building resilient systems. Automating everything. Logging what matters.

12+ Linux hosts · 3 K8sKubernetes clusters · GitOps + CI/CD

🛰️ Latest case study: tfSTRIDE - Evolving Terraform Threat Modeling into a Multi-Cloud Engine · Read the latest post

Personal Roots & Technical Legacy

About Me

My introduction to Linux came as a kid flipping open a freshly mailed Ubuntu 6.06 CD, Dapper Drake.

Since then, I’ve hardened countless VPS environments, crafted memorials like Maggie.lol to honor beloved companions, and deployed dashboards such as threats.beane.me which make invisible threats visible.

I'm an Infrastructure & Security Engineer focused on building resilient systems where automation, security, and accessibility are foundational, not afterthoughts. From Python and Docker to Terraform and cloud infrastructure, I design and operate platforms with equal parts empathy and precision.

It's the legacy of that first spark, still guiding every system I harden, every workflow I automate, and every decision I ship to production.

15+ years from open-source curiosity to infrastructure storytelling.

📀 First Linux install: Ubuntu 6.06, age 12
🛡️ First VPS secured: Late teens
📊 Dashboard launched: threats.beane.me
🐾 Memorial created: Maggie.lol
⚙️ Focus today: Security, automation, accessibility

From infrastructure insights to dev chronicles, plus stories behind threat intel and vulnerability management—discover what drives each project forward.

Featured Engineering Projects

tfSTRIDE

See security risks before you deploy.

STRIDE threat modeling for AWS, Azure, and GCP Terraform plans. Evidence-backed findings with no cloud credentials, held in place by thousands of regression tests.

Tech stack: Python, Terraform, AWS, Azure, GCP

Operations Briefing

The whole platform on one live page.

Service health, threat response, backup recovery, GitOps reconciliation, CI, and operational alerting, each backed by live evidence.

Tech stack: Python, FluxCD, CrowdSec, Renovate, Grafana, Gitea Actions

Production Infrastructure

Threat Monitoring

View real-time logs from CrowdSec: how I respond to constant internet probing with automated bans and alerts. Emphasized for real-time signal.

Tech stack: Python, CrowdSec, live log ingestion

Backup Monitoring

Check backup status, time, duration and size across servers: auto-extracted from sanitized JSON logs and displayed live.

Tech stack: Python, Cron, Borgmatic

Self-Hosted Git

Gitea instance running on MicroK8s with PostgreSQL persistence and Valkey caching. Nightly backups via Borgmatic. Built for reliability and low-cost operation.

Tech stack: Kubernetes, Gitea, PostgreSQL, Valkey, Borgmatic

Intel Monitoring

Enriches CrowdSec ban data with GeoIP and interactive mapping, turning raw security logs into real‑time, visual intelligence for a threat‑aware infrastructure.

Tech stack: Python, CrowdSec, Flask, Gunicorn, Plotly, GeoIP

Vulnerability Intelligence

Proactive vulnerability scanning: from pulled images to running containers, turning raw scan data into actionable, privacy‑first intelligence.

Tech stack: Trivy, Python, Docker

Observability Dashboard

Real-time enforcement and escalation with MITRE mapping and distributed threat analytics, providing evidential reasoning across the entire security platform.

Tech stack: Python, CrowdSec, Flask, Gunicorn, SQLite

Personal Projects & Tools

🎭 Jokes & Quotes API

Flask + Gunicorn microservice with SQLite persistence, rate limiting, and delivery tracking. Frontend via Dockerized Caddy on a private network.

Tech stack: Python, Flask, Gunicorn, SQLite, Docker

🗝️ Vaultwarden Hosting

Self-hosted password manager backed up every six hours to Google Drive, monitored for access attempts, and protected behind hardened reverse proxies.

Tech stack: Docker, reverse proxy, secure backups

🐾 Maggie.lol Memorial

A tribute space for two beloved dogs: designed with uptime, transitions, and gentle storytelling. Emotional architecture meets technical polish.

Tech stack: NGINX, Let's Encrypt