Projects & contributions
Small tools in Go, infrastructure that runs for real, and patches upstream where things were broken.
hop/ short links & pastes
A short-link service and a pastebin in one stdlib-only Go binary: token-protected writes, anonymous reads, expiry and a janitor, HTML or plain-text negotiation, a CLI built in. Runs at go.divyam.top and paste.divyam.top behind Caddy.
voyager/ the GitOps box
One repo describes a 2-vCPU VPS end to end: a systemd timer pulls it every five minutes and converges with Docker Compose. Caddy is the only thing with public ports; behind it sit this portfolio, a Telegram bot, a Gatus status page, CrowdSec with a public “what is being blocked” page, a self-hosted NetBird VPN, analytics and hop.
kubernetes-mixin/ PR #1194
KubeHpaMaxedOut fired on HPAs whose min and max replicas were equal — noise, not a problem. I reported it (issue #1193) and changed the PromQL so fixed-size autoscalers never page anyone again.
bitnami/charts/ PR #19568
The RabbitMQ Operator chart violated PodSecurity standards on recent clusters (issue #19394). The fix hardened the container security contexts so the chart deploys cleanly under restricted policies.
mattermost-helm/ PR #396
Plugins that run their own web server had no way through the chart. Dynamic extraPortssupport lets them deploy without forking the chart.
opsbridge/ Mattermost ⇄ Gitea
Keeps Mattermost alert threads and Gitea issues in sync: Alertmanager-label ticket matching, status reporting, two-way assignment and comments. Ships with a Helm chart (my helm-charts repo).
tpaudit/ Teleport audit log, from the shell
Search the Teleport audit log from the command line — the questions a security engineer actually asks, without the web UI.
k3s-terraform/ and KubeAid
k3s-terraform: k3s on AWS with IAM, cloud-controller-manager, Calico, cluster-autoscaler and HAProxy ingress. And day-to-day contributions to Obmondo's KubeAid — a GitOps-native Kubernetes management suite, its CLI and config templates.