Under Development... (but the work isn't 😄)

EVANGELOS
BATSALIS

Portfolio & Digital Workspace

Building resilient infrastructure. Shipping automation. Keeping production alive.

I work across Windows Server, virtualization, networking, security, and DevOps pipelines—turning "it works on my laptop" into "it runs in production."

View Projects Cheats & Tuts 💛Download Resume / Contact

About Me

I'm an IT System Administrator and Infrastructure/DevOps Engineer with hands-on experience in on-prem environments (Hyper-V, Windows Server Core, storage, VLAN segmentation, firewalls) and modern DevOps workflows (Docker, CI/CD, reverse proxies, monitoring).

I care about security, reliability, and clean operations: least privilege, strong segmentation, documented runbooks, and automation over heroics.

Core Values

  • ›Reliability > hype
  • ›Security by design
  • ›Automate the boring
  • ›Document like you'll forget tomorrow

Core Skills

Infrastructure & Virtualization

  • â– Windows Server (Core), Active Directory, GPO, DNS/DHCP
  • â– Hyper-V clusters, VM lifecycle, backup/restore, replication
  • â– Storage integrations (iSCSI/NAS), performance & resiliency

Networking & Security

  • â– VLAN architecture (Mgmt / Main / Guest / IoT / DMZ)
  • â– Firewalls (policy design, NAT, segmentation), VPN access patterns
  • â– Hardening, least privilege, secure exposure of public services

DevOps & Automation

  • â– Docker / Compose, reverse proxy (Caddy / Nginx style patterns)
  • â– CI/CD with GitHub Actions, branching strategy & protections
  • â– Monitoring stacks (Zabbix / Grafana / Prometheus concepts)

Cloud & Identity

  • â– Microsoft 365 / Entra ID hybrid concepts, directory sync patterns
  • â– Cloud fundamentals and production readiness practices

Selected Projects

Segmented Network & DMZ Design (Production)

Designed and maintained a segmented network with dedicated DMZ for public-facing services, isolating critical internal systems and reducing blast radius.

Outcomes

Safer exposure of web apps, clearer boundaries between environments, easier troubleshooting.

Highlights

  • - Dedicated DMZ VLAN for public services
  • - Only required services exposed; admin tooling kept private
  • - Clear separation: Mgmt vs internal vs guest/IoT vs DMZ
VLANsFirewall PoliciesRoutingReverse ProxyAccess Controls

Hyper-V Infrastructure Modernization (On-Prem)

Operated and improved a Hyper-V environment with Windows Server Core hosts, focusing on stability, recoverability, and operational clarity.

Outcomes

More reliable VM operations, faster incident response, cleaner host management.

Highlights

  • - Standardization
  • - Troubleshooting runbooks
  • - Recovery workflows
Hyper-VWindows Server CorePowerShelliDRAC

Dockerized Services & Reverse Proxy Publishing

Built a containerized services stack and published selected apps safely behind a reverse proxy.

Outcomes

Faster deployments, repeatable builds, controlled exposure.

Highlights

  • - Environment separation
  • - Safer defaults
  • - Minimal open ports
DockerDocker ComposeReverse ProxyTLSRouting

qBittorrent Docker Hardening

Hardened inbound traffic rules so only required torrent port ranges are reachable, reducing unnecessary exposure.

Outcomes

Reduced attack surface, predictable connectivity.

Highlights

  • - Explicit rules > 'open everything and pray'
Docker NetworkingFirewall RulesPort-range Controls

Monitoring & Observability Starter Stack

Implemented monitoring patterns for infrastructure/services and created a baseline dashboarding approach.

Outcomes

Better visibility, earlier detection, fewer surprises.

Highlights

  • - Actionable alerts
  • - Service health views
ZabbixGrafanaPrometheus

Devitory (Blog + CMS concept)

Designed the concept for a DevOps/IT blog with CMS so content can be authored easily and published fast.

Outcomes

Clear content structure, scalable categories, easy author workflow.

Highlights

  • - DevOps, Azure, Infra content strategy
Headless CMSNext.jsContent Modeling

Famify (Family Organization SaaS concept)

Defined a multi-tenant SaaS concept for family organization with future API and mobile app roadmap.

Outcomes

Product direction, scope definition, monetization logic.

Highlights

  • - Tenant pages
  • - Booking/calendar features
  • - Subscription plans
Next.jsReactAPI-firstAuth & Tenancy

Experience

IT Operations / System Administration

Current / Recent

  • â– Managed infrastructure operations across servers, virtualization, and networks.
  • â– Delivered reliability improvements through segmentation, standardization, and documentation.
  • â– Supported business-critical systems and ensured continuity of day-to-day IT operations.

Education & Certifications

Computer Science

University studies in Computer Science (In Progress)

Certification Roadmap

AZ-900Planned

Azure Fundamentals

AZ-104Planned

Azure Administrator

DevOps TrackFuture

Azure DevOps Engineer Expert

Writing / Content

Notes from the trenches: infrastructure, DevOps, automation, and real-world IT—without marketing fluff.

Networking / VLANs / FirewallsDraft

DMZ Done Right: Expose Only What You Must

Windows Server & ADDraft

Hyper-V Ops: What Actually Breaks in Production

Docker & Self-hostingDraft

Docker in Real Life: The 10 Things That Bite You

Monitoring & Incident ResponseDraft

Monitoring: Alerts That Don't Make You Hate Your Phone

Azure & IdentityDraft

Branch Protection: How to Stop 'Oops' in Main

Let's build something resilient.

Want to collaborate, hire me, or just talk infra? I'm open to projects and infrastructure/DevOps roles.

v.batsalis@gmail.com
Greece