// available for opportunities

Hi, I'm Aslan Tishbek

DevOps & AI Infrastructure Engineer

I build and automate cloud-native infrastructure using Kubernetes, GitOps, and IaC. I run a fully declarative bare-metal homelab with local AI workloads — proving production-grade skills at home.

View Homelab Get in Touch
Aslan Tishbek
K3s
Kubernetes
IaC
100% Declarative
AI
On-Prem LLMs
// who I am

About Me

I'm a self-driven infrastructure engineer passionate about building reliable, automated, and observable systems. My homelab is my proving ground — it runs the same tools used at scale in production: FluxCD, Terraform, Prometheus, and external-secrets, all on bare metal.

Beyond infrastructure, I'm deeply interested in on-premise AI — running LLMs and diffusion models locally with full control over the stack. I believe the best engineers understand the entire system from silicon to service.

Certified CKAD and HashiCorp Terraform Associate (004). Currently targeting AWS Solutions Architect as the next milestone.

GitOps Kubernetes Local AI Terraform Observability Bare-Metal

Homelab Specs

  • CPURyzen 7 5800X3D
  • GPURX 7900 XTX 24GB
  • RAM48GB DDR4
  • Storage2× 2TB NVMe

Quick Info

// what I work with

Technical Skills

Container & Orchestration

Kubernetes / K3sAdvanced
Docker / ComposeAdvanced
HelmProficient
KustomizeProficient

GitOps & IaC

FluxCDAdvanced
TerraformAdvanced
AnsibleProficient
Git / GitHub ActionsAdvanced

Cloud & Networking

AWS (Route53, S3, IAM)Proficient
Traefik IngressAdvanced
Cert-Manager / TLSAdvanced
DNS / AdGuardProficient

Observability

PrometheusProficient
GrafanaProficient
AlertmanagerIntermediate
kube-prometheus-stackProficient

AI / Local Inference

Ollama (LLMs)Advanced
ComfyUI (Diffusion)Proficient
LiteLLM / Open WebUIAdvanced
whisper.cpp (STT, ROCm)Proficient
MCP (Model Context Protocol)Advanced

Languages & Tools

PythonProficient
Bash / ZshAdvanced
YAML / HCLAdvanced
Node.js / JavaScriptIntermediate
SQL / SQLiteIntermediate

// full stack

Linux Kubernetes Docker FluxCD AWS Terraform Ansible Cert-Manager Traefik Prometheus Grafana Ollama ComfyUI Git GitHub Python Node.js Bash Bitwarden ESO AdGuard Home Loki LiteLLM Open WebUI Qdrant MCP
// flagship project

Production-Grade Homelab

A fully declarative, GitOps-driven infrastructure running on bare metal — mirroring real-world SRE/DevOps practices.

Homelab Architecture

Hosted at a-tishbek.info

Production GitOps AI-Powered
K3s Cluster
Single-node bare-metal
GitHub Source
aslantishbek/homelab-gitops
Zero Secrets in Git
ESO + Bitwarden
Auto TLS
Let's Encrypt wildcard

Infrastructure as Code

  • Ansible Configuration Management

    Automated baseline OS setup, user groups, K3s bootstrapping, and GPU drivers across the entire homelab.

  • Terraform Provisioning

    AWS S3 state backend. Provisions namespaces, Route53 DNS wildcard records, and base Helm charts via modules.

  • FluxCD GitOps

    Continuous reconciliation of the Kubernetes state directly from GitHub. Zero manual kubectl apply.

  • External Secrets Operator

    Integrated with Bitwarden to inject API keys and credentials securely into the cluster without Git exposure.

Bare-Metal AI Stack

// AI workloads run as systemd services to bypass container overhead for massive models

  • Ollama — LLM Engine

    Qwen3 family (8B / 32B / 30B-Coder) on ROCm, fronted by LiteLLM and served to Open WebUI and a fleet of Claude Code subagents.

  • ComfyUI — Diffusion & Video

    Running Stable Diffusion 3.5 Large and WanVideo generation natively on the 24GB AMD GPU.

  • whisper.cpp — Speech-to-Text

    Native HIP build of large-v3 on the RX 7900 XTX, exposed as an OpenAI-compatible /v1/audio/transcriptions endpoint at stt.a-tishbek.info. ~7.6× realtime on the 7900 XTX.

  • Qdrant + local-rag MCP

    Vector store deployed via GitOps with a custom MCP server using nomic-embed-text for semantic codebase search across homelab repos.

  • doc-cache MCP + Smart-Read Hook

    SQLite-backed cache fronting Context7 library docs and Ollama answers, plus a PreToolUse hook that intercepts oversized file reads and routes them to local summarizers.

  • Ollama-Backed Agent Fleet

    ~30 specialist subagents (code review, log triage, vision OCR, k8s/GitHub/Gmail/Drive payload condensers) routing bulk work off Claude Opus onto local Ollama via custom MCP servers.

// public openai-compatible endpoints

litellm.a-tishbek.info/v1 — chat completions (Qwen3 fleet via LiteLLM router)
stt.a-tishbek.info/v1 — audio transcriptions (whisper.cpp large-v3 on ROCm)

Observability & Networking

  • Traefik Ingress & TLS

    Wildcard routing for *.a-tishbek.info secured with Let's Encrypt via cert-manager HTTP-01 challenges.

  • kube-prometheus-stack

    Prometheus, Alertmanager, and Grafana providing full node and pod-level metrics with custom dashboards.

  • Loki + Promtail

    Centralized log aggregation across all cluster workloads, queryable from Grafana alongside metrics.

  • AdGuard Home — Network-Wide

    Running on hostNetwork to intercept all LAN DNS and serve DHCP, bypassing ISP router limitations.

Services Running

Open WebUI
LiteLLM Proxy
ComfyUI
Grafana
Loki
Prometheus
AdGuard Home
Qdrant
Vaultwarden
3x-ui (VPN)
DevOps Coach
Samba
whisper.cpp STT
Obsidian + CouchDB
LibreSpeed
// what's next

Goals & Roadmap

Certifications

CKAD
Certified Kubernetes Application Developer
Verify
HashiCorp Terraform Associate 004
Infrastructure as Code — Terraform Cloud & CLI
Verify
AWS SAA-C03
Solutions Architect Associate
In Progress
CKA
Certified Kubernetes Administrator
Planned

Engineering Roadmap

Updated May 2026

// recently shipped

whisper.cpp STT Service · May 2026
large-v3 on ROCm; OpenAI-compatible /v1/audio/transcriptions at stt.a-tishbek.info.
Obsidian Vault Sync · Apr 2026
Self-hosted Obsidian + CouchDB LiveSync via Local REST API; works alongside an ssh-filesystem fallback when the API is offline.
Ollama-Backed Agent Fleet · Apr 2026
~30 specialist Claude Code subagents routing bulk work to local Ollama via custom MCP servers.
Local Vector Search (Qdrant) · Mar 2026
Qdrant + nomic-embed-text + custom MCP for semantic codebase search across homelab repos.
doc-cache MCP · Mar 2026
SQLite-backed cache fronting Context7 docs and Ollama answers; cuts repeat-query latency.
Smart-Read PreToolUse Hook · Mar 2026
Intercepts unbounded file reads >1k lines and routes them to local summarizers.

// up next

Velero Cluster Backups
Automated snapshot backups to AWS S3 for disaster recovery.
external-dns Automation
Fully automated Route53 record management from Kubernetes Ingress objects.
GitHub Actions CI/CD
Terraform Plan/Apply on PR with automated policy checks.
Self-Hosted Game Streaming
Wolf on docker-compose with GPU passthrough; Tailscale for off-LAN access from any client.
// let's talk

Get In Touch

I'm open to DevOps, SRE, and infrastructure engineering opportunities. Whether it's a full-time role, freelance project, or just a tech conversation — reach out.

tishbekaslan@gmail.com