Systems Engineer — NixOS, Infrastructure, Security.

I work in German public sector IT, where I'm responsible for the networks, firewalls, and server infrastructure across multiple locations — including automation and monitoring across that environment. On the side, I work part-time at Applicative Systems, where I help run NixOS-based infrastructure — most recently I rolled out a backup solution across several servers and wrote a custom wrapper around it.

I've been running NixOS on pretty much everything for the past two years and try to keep my entire setup open source. Most of my free time goes into self-hosting, tinkering with my homelab, and figuring out how to make infrastructure more reproducible and secure. I mostly write Nix and Bash, and I'm currently learning Python.

nixmate — A Rust TUI for managing NixOS. Generations, rebuilds, services, and system errors in one place. Built as an experiment with AI-assisted coding; landed in nixpkgs and grew a small user base, though I'm not actively developing it further.

nasdots — My NixOS config for the Ugreen DXP4800 Plus. RAID5 with btrfs, NFS, SMART monitoring, fan control, and some basic hardening.

lapdots — NixOS flake config for my ThinkPad T14. Hyprland, Gruvbox, hardened kernel, firejail, and a bunch of security tools I like to play around with.

More at daskladas.de — blog, longer write-ups, contact.