Building backends that scale and frontends that don't get in the way.
Most of what I work on lives in the unsexy but critical layer multi-tenant infrastructure isolation, provisioning pipelines, auth systems. The parts that have to be right before anything else matters.
Currently building TropicCrm
Current Build: Multi-Tenant SaaS Platform
flowchart TD
Client(["Client\nReact · TypeScript"])
subgraph Gateway["API Gateway Layer"]
RateLimit["Rate Limiter"]
AuthFilter["Auth Filter\nJWT · 2FA"]
Router["Request Router"]
end
subgraph Auth["Auth Service"]
Login["Login Flow"]
TOTP["TOTP / 2FA"]
TokenMgr["Token Manager\nRefresh · Revoke"]
RBAC["RBAC Engine\nRoles · Permissions"]
end
subgraph Provisioning["Tenant Provisioning"]
Onboard["Onboarding Pipeline"]
SchemaGen["Schema Generator"]
SeedData["Seed + Config"]
end
subgraph MultiTenant["Multi-Tenant Data Layer"]
direction LR
Resolver["Tenant Resolver\nContext Propagation"]
SchemaA[("tenant_acme\nPostgreSQL Schema")]
SchemaB[("tenant_globex\nPostgreSQL Schema")]
SchemaC[("tenant_initech\nPostgreSQL Schema")]
end
subgraph Infra["Infrastructure"]
Docker["Docker"]
AWS["AWS"]
CI["CI/CD Pipeline"]
Linux["Linux"]
end
Client -->|HTTPS| RateLimit
RateLimit --> AuthFilter
AuthFilter --> Router
Router --> Auth
Router --> Provisioning
Router --> Resolver
Auth --> RBAC
Auth --> TOTP
Auth --> TokenMgr
Provisioning --> Onboard
Onboard --> SchemaGen
SchemaGen --> SchemaA
SchemaGen --> SchemaB
SchemaGen --> SchemaC
Resolver --> SchemaA
Resolver --> SchemaB
Resolver --> SchemaC
Docker --> AWS
CI --> Docker
Linux -.->|"runs it all"| Infra
classDef primary fill:#0f1e35,stroke:#1a6ea0,color:#e8eef8,stroke-width:2px
classDef secondary fill:#0a1525,stroke:#0d3a5c,color:#8aa8c8,stroke-width:1px
classDef db fill:#0d2a45,stroke:#1a6ea0,color:#e8eef8,stroke-width:2px
classDef infra fill:#0a1520,stroke:#2a5a80,color:#4a8ab0,stroke-width:1px
class Client,Router,AuthFilter primary
class Login,TOTP,TokenMgr,RBAC,Onboard,SchemaGen,SeedData,Resolver secondary
class SchemaA,SchemaB,SchemaC db
class Docker,AWS,CI,Linux infra
◆ schema-per-tenant true isolation — no WHERE tenant_id scattered everywhere
◆ rbac at resolver permissions enforced before the data layer, not after
◆ stateless auth refresh token rotation — revokable, auditable, no sticky sessions
◆ provisioning pipeline schema creation, seeding, config as atomic steps
| repo | description | lang |
|---|---|---|
archcool |
minimal arch linux post-install — audio, network, builder | shell |
kitty |
terminal config — warm palette, nerd fonts, powerline tabs | shell |
◆ multi-tenant saas schema isolation, provisioning, auth hardening
◆ 2fa + rbac token rotation, auditable sessions
◆ archcool minimal arch post-install for the ones who care
◆ reading kernel 6.x memory management patches
rebuilding from @gitggaurav — previous account compromised

