Muhammad Armghan
Full-Stack Developer, DevOps Practitioner, and Systems Architect. I build robust backends, secure multi-tenant identity systems, and optimize containerized environments.
Professional Profile
Senior Full-Stack and Backend Engineer with strong expertise in building scalable, secure backend systems and APIs. I design and implement real-time features, advanced authentication, and complex data models while ensuring maintainable, future-proof, and highly efficient code bases. My approach blends backend robustness with clean, reusable frontend components to deliver reliable web applications. I focus on infrastructure autonomy—running services in isolated LXCs and cloud-agnostic servers to keep applications performant and highly secure.
Codebases
-
Laravel & FrankenPHP: Application Deployment
Enterprise-grade Laravel application deployment featuring Laravel Octane and FrankenPHP inside an LXC, fully orchestrated via Supervisor for high-availability Queues, WebSockets, and SSR rendering.
-
code-server: Web-Based IDE
Secure web-based development environment using code-server in Proxmox LXCs, configured with custom network binds and upstream reverse proxies for direct, browser-based hotfixes.
-
Logto OIDC: Identity Infrastructure
Secure self-hosted deployment of Logto OIDC identity provider in a Debian LXC, decoupled with a remote PostgreSQL cluster to manage SSO and centralized multi-tenant SAML authentications.
-
MySQL: Dedicated Relational Database
Native MySQL deployment inside an Ubuntu LXC, featuring secure command-line administrative hardening, multi-user privilege routing, and local network bind configurations.
-
PostgreSQL: Enterprise Relational Database
High-performance enterprise relational database management utilizing PostgreSQL in a dedicated Proxmox LXC, featuring secure non-interactive credential hardening and restricted host-based network routing.
-
RustFS: S3-Compatible Object Storage
Deployment and policy hardening of RustFS, a modern S3-compatible object storage server, featuring custom AWS IAM bucket policy setups for unprivileged clients.
-
SFTP Storage & FileBrowser
A secure, lightweight storage node utilizing chrooted SFTP and FileBrowser, designed to act as an S3-alternative for application asset management without the resource overhead.
-
MariaDB: Persistent Database Infrastructure
Centralized MariaDB database management designed for reliability, featuring hardened authentication, remote connectivity, and isolated resource allocation for a multi-app ecosystem.
-
Dokploy: Intelligent Application Deployment
Efficient application lifecycle management utilizing Dokploy for fine-grained container orchestration, featuring hybrid Nginx/Tunnel ingress and persistent cloud-storage integration.
-
Microsoft Exchange: Enterprise Strategy
Strategic migration to Microsoft Exchange to ensure enterprise-grade deliverability and security, moving away from vulnerable shared hosting and high-overhead workspace solutions.
-
Cloudflare: Strategic DNS Infrastructure
Strategic DNS infrastructure design utilizing Cloudflare’s global network to provide performant, API-driven record management while maintaining end-to-end encryption.
-
n8n: Automated Workflow Engine
Self-hosted n8n deployment for complex, multi-step workflow orchestration, featuring automated cloud-storage synchronization and CLI-based disaster recovery.
-
Stalwart Mail Server: Ecosystem SMTP Relay
Secure SMTP relay configuration for virtualized environments, featuring DKIM/SPF integration and optimized outbound routing strategies for transactional VM system alerts.
-
Vaultwarden: Secure Secrets Management
Secure credential management utilizing Vaultwarden and n8n for automated lifecycle synchronization and real-time security event monitoring via Slack.
-
Nginx Edge Proxy & Security Layer
Edge proxy configuration securing internal infrastructure with SSL termination, Basic Authentication, and optimized WebSocket handling for remote console access.
-
Proxmox Virtualization Environment
Bare-metal configuration hosting LXC containers for isolated development, production apps, and internal network routing.