VickyApp
Open navigation menu

I build and maintain infrastructure that stays up when part of it fails.

Three years and counting running hybrid cloud, multi-datacenter virtualisation, and container platforms that other people depend on every day. I automate what repeats, measure before and after, and write down how it works so it can be maintained without me.

Based in
Tasikmalaya, West Java, Indonesia
Time zone
WIB (UTC+7)
Work pattern
Working remotely, with data center operations in Jakarta.
Current focus
Hybrid cloud infrastructure and container platforms that have to stay up.

In short

I came into IT through network cabling, not through a slide deck.

My vocational school specialisation was Computer and Network Engineering, and the first piece of work I was genuinely proud of was building a school-wide local network so digital exams could actually run. My way of working has not changed much since: the problem has to be genuinely solved, not made to look solved.

From there I moved to the less visible side: the servers, storage and networks that let everything else run. I learned that most of this work is about making a system maintainable by someone else — not about who types a command fastest.

Today I work on hybrid cloud infrastructure: virtualisation and storage clusters spread across more than one data center, container platforms for a product sold to clients, and automation for the work that should never have to be done manually twice.

If you want to know how my technical decisions get made, the Approach section below summarises it. For the employment and study history, the About page has it.

More about me

Problems I solve

The three reasons people most often get in touch

Every one of them starts from a situation, not from a list of technologies.

  • 01

    A system goes down without warning, and nobody knows where to start.

    The first thing I check is not the service — it is whether this is genuinely new, or a symptom that has been sitting in the logs for weeks with nobody reading them. Once the cause is found I close the way in, rather than only restoring the service.

  • 02

    Releases are tense because there is always a manual step that can be missed.

    I move the repeated manual steps into a pipeline, then make sure the result is exactly repeatable. Two numbers tell you whether it worked: how long a release takes, and how often a step has to be redone because it was forgotten.

  • 03

    Running costs keep climbing with no clear explanation of why.

    I map what is actually used against what is being paid for, then cost it per workload. The most common finding: capacity paid for as insurance that is rarely touched — and the opposite, one small service quietly holding up the whole budget.

Areas of work

Five areas, one way of thinking

Each area below is not a separate service. The value shows up when they are treated as one interdependent system.

  1. 01Systems & infrastructure

    Keeping the machines that run a service alive, secure, and unremarkable when something breaks.

    • Maintaining physical and virtual servers, including hands-on hardware work in a data center rack.
    • Setting up backups and actually testing them — not only documenting them.
    • Tracing an outage back to its root cause, rather than restoring the service and stopping there.
    • Writing down how a system works so the next person does not have to guess.
    Technical detail and the tools I normally reach for9 items

    The terms below are the vocabulary used in technical environments. You do not need them to judge the section above.

    • Linux (Debian, Ubuntu, Rocky Linux)
    • Windows Server
    • HPE ProLiant DL380 Gen10
    • Bare-metal provisioning
    • systemd
    • RAID & ZFS
    • WHM/cPanel
    • Mailcow
    • Zabbix
  2. 02Virtualisation & storage

    Pooling many machines into shared resources, so that one machine failing does not take a service down with it.

    • Running virtualisation and distributed storage clusters spread across two physical data centers.
    • Growing storage capacity without taking running services offline.
    • Separating data that must not be lost from data that can be rebuilt, then giving each a clear recovery path.
    • Planning capacity from measured usage rather than from a procurement estimate.
    Technical detail and the tools I normally reach for8 items

    The terms below are the vocabulary used in technical environments. You do not need them to judge the section above.

    • Proxmox VE
    • KVM
    • Ceph (distributed storage)
    • MinIO (S3-compatible)
    • ZFS
    • LVM
    • NFS & SMB
    • Snapshot & replication policy
  3. 03Containers & automation

    Making an application run and update the same way every time, without a manual step in the middle.

    • Building a container platform that serves many clients from one shared cluster, with workloads kept apart.
    • Automating environment creation so a client gets a ready-to-use instance with no hand work.
    • Moving the release process into a pipeline, so there is no longer a manual step to forget.
    • Keeping configuration recorded as code rather than as one person’s memory.
    Technical detail and the tools I normally reach for10 items

    The terms below are the vocabulary used in technical environments. You do not need them to judge the section above.

    • Docker
    • Docker Swarm
    • Kubernetes
    • Traefik
    • Portainer API
    • n8n
    • GitHub Actions
    • Bash
    • Python
    • Go
  4. 04Networking & service delivery

    Designing the paths data travels, and keeping those paths fast and correct.

    • Running internal names and addresses so service discovery never depends on a single point.
    • Routing inbound traffic with rules that can be explained — not rules stacked up until something happens to work.
    • Connecting separate locations securely without exposing internal services to the internet.
    • Sending mail from servers we run ourselves so messages arrive and are not treated as spam.
    Technical detail and the tools I normally reach for9 items

    The terms below are the vocabulary used in technical environments. You do not need them to judge the section above.

    • PowerDNS (primary/secondary)
    • HAProxy
    • Nginx Proxy Manager
    • Traefik
    • WireGuard
    • MikroTik
    • Cloudflare (DNS, WAF, CDN, SSL/TLS)
    • Mailcow
    • Exim SMTP relay
  5. 05Cloud & operational security

    Using cloud services safely, and stopping the payment for the parts that turn out to be unused.

    • Setting up cloud environments that can be audited: who may get in, and what gets recorded.
    • Keeping applications protected against common attacks while watching for unusual sign-in attempts.
    • Following security findings from the monitoring team down to the operating system, not stopping at the application layer.
    • Monitoring systems so a small problem is visible long before it becomes a large outage.
    Technical detail and the tools I normally reach for9 items

    The terms below are the vocabulary used in technical environments. You do not need them to judge the section above.

    • AWS (EC2, VPC, ALB, RDS, S3)
    • AWS IAM & Security Groups
    • AWS CloudTrail
    • Cloudflare WAF
    • Wazuh SIEM
    • Prometheus
    • Grafana
    • Loki
    • Incident response

Selected work

A few pieces of work, with the reasoning and the outcome

Every case study records the original problem, what I did myself, and what changed afterwards. Tools come last.

  1. Infrastructure & reliability

    Two data centers that run as one system

    Two physical sites now operate as one shared set of services, so losing a single component no longer turns straight into an outage for users.

    • Proxmox VE
    • Ceph
    • MinIO
    • PostgreSQL
    Role
    System Administrator & DevOps Engineer
    Period
    2024 — present
  2. Infrastructure & operations

    Moving production workloads back onto owned hardware

    Production workloads that ran at an external provider were moved back onto owned infrastructure, cutting the recurring cost without users noticing a change.

    • Proxmox VE
    • Linux
    • Windows Server
    • Microsoft SQL Server
    Role
    IT Network & System Administrator
    Period
    November 2023 — April 2024

Approach

How I work

Four habits that decide how I make technical calls. These are not company values — they are things you can judge me on from the work itself.

  1. 01The problem first, the tool later

    Most requests arrive as an already-chosen solution. I always trace back to the original problem, because the answer is often much cheaper — or turns out not to need building at all.

  2. 02A system that can be explained is easier to maintain

    The cleverest solution is useless if only one person understands it. When the benefit gap is small I choose the simpler design, and write down the reasoning so the decision can be revisited.

  3. 03Measure before and after, not during the presentation

    An improvement without a number is an opinion. I decide what will be measured before starting, and I still report the result when the number is not the one I hoped for.

  4. 04Translate, do not simplify

    A technical explanation for a non-technical audience does not need a misleading analogy. It needs the right order: what the impact is, what the constraint is, and only then how it works.

Selected writing

Notes and articles

Written for two readers at once: the one who builds the system, and the one who has to make decisions about it.

Selected writingNews

Coming soon

This is VickyApp - Portfolio And Blog Website, a brand new site by Vicky Ardiansyah Pathurrohman that's just getting started. Things will be up and running here shortly, but you can subscribe in the meantime if you'd…

1 min read

Coming soon

Working together

Got a system that needs sorting out, or a team that needs technical help?

I am open to conversations about system reliability, release automation, architecture decisions, or a full-time role. You do not need to prepare anything to start — just describe the situation.

[email protected]