5 min read
Closing a critical hole in end-of-life PHP 7.4 / 8.1 apps with a patched base image, no code changes: the stopgap measures and the lasting fix.
İsmail Altıntaş
Senior Network & System Specialist · Electrical & Electronics Engineer
> Senior Network & System Specialist
An engineer who designs and runs enterprise IT infrastructure end to end: high-availability (HA) network architectures, cloud and virtualization platforms. On screen: firewall clusters, Kubernetes and databases. Off screen: backpacking, long-distance cycling and camping.
focus:
FortiGate HAProxmox VERKE2 KubernetesPostgreSQLClaude Code
NODE · IST
demo
--:--:--
Istanbul local time
HA● sync
VPN● up
WAF● on
Illustrative board · in-browser animation, not connected to any real system.
stack --list
The engine room
From network security to virtualization, databases to automation: I work across four core areas.
ops --recent
Featured operations
Every project follows the same structure: problem, approach, result. No unmeasured numbers.
OP-02Security
FortiGate HA Cluster Transformation
Next-gen firewall
- Result
- The firewall layer now runs on a clustered architecture with a leaner policy set.
OP-08Infrastructure
Multi-Data-Center Kubernetes Upgrade
RKE2 · Longhorn · cert-manager
- Result
- All environments are on the same supported versions, and the upgrade steps are documented as a reusable runbook.
OP-09Disaster recovery
Kubernetes Backup & Restore Drill
Velero · Longhorn · etcd · PITR
- Result
- Backups run automatically and their results are monitored with alerts. The strategy was validated in a drill by deleting a namespace and restoring it from backup.
cat /etc/motd
Architecture principles
The five rules behind every system I build.
rule.01
Single Point of Failure = 0
Every critical layer is designed with redundancy (HA).
rule.02
Automate Everything
Any operation done manually twice becomes a Bash or PowerShell script the third time.
rule.03
Backup != Restore
An untested backup is not a backup (MinIO S3 + automated verification).
rule.04
Zero-Trust & Least Privilege
Packets go only where they need to go, and only as far as they need to.
rule.05
AI accelerates, humans own it
AI speeds things up, but responsibility stays with people: generated code and commands are reviewed first, tested next, and only then go live.
out-of-office --enable
Off screen
14 countries, countless cities, a shelf full of stories. Cycling, camping and a bit of adrenaline.
MA5 stops
Morocco
From the maze of the medinas to the stone desert of the Sahara.
Casablanca → Fez → Marrakesh → Essaouira → Agafay Desert
SEA14 stops
Southeast Asia
Four countries, countless scooters, a lot of pho.
Bangkok → Phuket → Pattaya → Hanoi → Ha Long Bay → Ninh Binh → Da Nang → Hoi An → Kuala Lumpur → Bali · Sanur → Nusa Penida → Ubud → Uluwatu → Amed
BALKAN6 stops
Balkan Road Trip
Six countries, one road: bridges, fortresses and endless burek.
North Macedonia → Serbia → Montenegro → Albania → Bosnia and Herzegovina → Kosovo
cat ~/notes/*.md
Latest notes
Technical write-ups from the field: the problem, the diagnosis and the lasting fix.
4 min read
Three-layer Kubernetes backups with Velero, Longhorn volume backups and etcd snapshots, plus the step that really matters: the restore drill.
2 min read
Controlled access to local admin passwords without Domain Admin: delegating Windows LAPS read permission to a dedicated group and auditing it.
Got an infrastructure question, a project or a route tip?
Email is the fastest way. If I'm on the road, I'll reply from the next Wi-Fi.