Debian, Apache, PHP-FPM, PHP, SQLite, TLS, UFW, fail2ban
Portfolio and secure self-hosting
Design and operation of amineidrissi.fr: virtual hosts, Apache/PHP hardening, Let’s Encrypt certificates, logs, backups, private data outside the webroot, CSRF/honeypot-secured forms, Basic Auth administration and FR/EN internationalization.
Windows Server, AD DS, DNS, GPO, WDS
Windows Server, Active Directory and WDS homelab
Personal-scale enterprise lab: OUs, accounts and groups, security policies, logon scripts, shares, Windows images, network boot and standardized reinstallations.
WireGuard, NAT, reverse proxy, Guacamole, TLS
Remote access and network security
Separation of public HTTPS flows and private administration flows, local addressing plan, limited exposed ports, reverse proxy to internal services, logging and access protection with UFW/fail2ban.
PHP, HTML, CSS, JavaScript, SQLite, App-V
Development and application packaging
Progressive development of a responsive portfolio without a heavy framework, plus App-V Sequencer/Client experiments on Windows Server 2016.