FrançaisLOCAL --:--:--
ROOM 01 · PORTFOLIO

Jean-Sébastien Loiseau

Infrastructure & Systems Engineer

I make the layer underneath hold: virtualization, networks and automation. Currently on the ANR project Fo6Med, exploring HPC.

Download CV
GitHub ↗LinkedIn ↗
jean.sebastien.loiseau@gmail.com

Served from my own rack. Static export: no tracker, no analytics.

Click a rack to open it.

IRC-A1IRC-B1CDU-01GEOTHERMAL LOOP · WATER-COOLEDPRODPROJECTSCORESKILLSEXPERIENCECAREER PATHEDUCATIONDEGREESHPC-LABPROVISIONING · DLC4 JOBS PENDINGR740XD-1CPU 42°C LOAD 0.63UPTIME 84 d CTN 12
← EXIT AISLEBACK TO RACK

PROD

PROJECTS IN PRODUCTION

Each unit in this rack is something I actually built and run. Pull one out.

RELEASED

Nexus

Server-fleet management with a Go agent and a Node/Fastify backend, over an end-to-end encrypted channel.

WHAT IT DOES

  • Watchdog-revert auto-rolls back a risky firewall or netplan change, so you can't lock yourself out.
  • End-to-end encrypted agent channel (ECDSA + AES-GCM).
  • Security-reviewed before release.

GoNode/FastifyPrismaPostgreSQLE2E crypto

Repo ↗

NexusRELEASED

Server-fleet management with a Go agent and a Node/Fastify backend, over an end-to-end encrypted channel.

WHAT IT DOES

  • Watchdog-revert auto-rolls back a risky firewall or netplan change, so you can't lock yourself out.
  • End-to-end encrypted agent channel (ECDSA + AES-GCM).
  • Security-reviewed before release.

GoNode/FastifyPrismaPostgreSQLE2E crypto

Repo ↗

ProjectHubRELEASED

Built with my brother

A collaborative project-management platform where teams work together in real time on documents, spreadsheets, diagrams and meetings.

WHAT IT DOES

  • Real-time collaborative docs (TipTap + Hocuspocus + Yjs).
  • Spreadsheets with formulas and charts, diagrams and Gantt (React Flow).
  • PDF e-signing; auth via Google OAuth, Keycloak SSO or magic link.

Next.jsReactPostgreSQL/PrismaYjsTipTapNextAuthDocker

Repo ↗

NautilusRELEASE PENDING

Manage Docker across several hosts without opening a single inbound port.

WHAT IT DOES

  • Outbound-only agents (no exposed inbound ports).
  • Mutual ECDSA P-256 authentication.
  • MIT licensed.

DockerGo agentsECDSA P-256MIT

Repository not public yet.

Traefik ManagerRELEASE PENDING

One place to run multi-instance Traefik: declarative configuration generated from a relational database.

WHAT IT DOES

  • RBAC with Keycloak SSO.
  • Configuration generated from a database, shipped via CI/CD.
  • Node/TypeScript + React.

Node/TypeScriptReactKeycloak SSOCI/CD

Repository not public yet.