Matt Almeida software · infrastructure · systems

Hey, I’m Matt.

I build software, run infrastructure, and care whether the whole thing actually makes sense.

SYSTEM EXHIBIT / KNG–01

FIELD STUDY / 01

The Kingdom

A production system, documented as built.

SYSTEM MAP / AS BUILT

REV 07 SCALE NTS

Cloudflare DNS

public names · DNS-01
PUBLIC HTTPS / TLS Caddy entrypoint on VM100
ONE PHYSICAL HOST

Hetzner Dedicated Host FSN1 / Falkenstein

shared local failure domain

  • Intel Core i7‑7700
  • 64 GB DDR4
  • 2 × 512 GB NVMe · mirrored ZFS/rpool
  • Intel I219-LM · 1 Gbit
PROXMOX VE
bare metal · VM100–VM103
VM100
OPNsense
Gateway · Router · Firewall · DNS
Caddy + ACME NPTv6 Tailscale subnet router

Suricata + NetFlow telemetry → VM101 Wazuh

Internal ULA · fd00:ba5e:c0de::/64 IPv6-first · private IPv4 /16 secondary
VM101
Wazuh
SIEM / XDR · security monitoring security signals
VM102
VictoriaLogs
log storage · retention · query Vector → VictoriaLogs
VM103
VictoriaMetrics + Grafana
metrics · dashboards · alerting exporters → VictoriaMetrics
HOST-LEVEL / OUTSIDE VM INVENTORY
Proxmox Backup Server
VM100–VM103 + host data · encrypted · compressed · deduplicated
encrypted off-box copy
OFF-SITE COPY

Cloudflare R2

external object storage
01

AUTHORIZED REMOTE ENDPOINT

Framework 13 Windows 11 + WSL
02 Tailscale encrypted overlay
03
VM100 subnet router to the Kingdom network
private path back in
PATH KEY routed / ingress secure management backup / retention
THE KINGDOM / FIELD SHEET KNG–01 / END OF EXHIBIT
SELECTED EVIDENCE / A

Selected work.

Built, shipped, and kept useful.

01 / PRODUCT & OPERATIONS

Socially Savvy

Different Roads to Learning

  • Web Development Contractor 2024–present

I built Socially Savvy’s paid assessment platform from the ground up. It’s used to administer social skills assessments for children with autism and track their progress.

I’m its sole technical owner, responsible for the application architecture, feature delivery, hosting, and production support.

  • Ruby on Rails
  • SQLite
  • Linux
What I’ve shipped
  • Assessment-agnostic data models, reports, and progress analytics.
  • Licensing, self-service exports, and a legacy-data migration.
  • Deployment, transactional email, observability, backups, security hardening, and production support.
300+ commits Ongoing ownership

02 / OPEN SOURCE & MAINTENANCE

HCB

The Hack Foundation

  • Software Engineering Intern Summer 2023
  • Volunteer maintainer 2023–present

HCB is a financial platform for fiscally sponsored nonprofits. I shipped Stripe billing-address integration and support for preferred and legal names, alongside fixes and improvements to authentication, receipts, monitoring, deployment tooling, and usability. I also handled incident response for a malicious card-testing attack.

As part of the same team, I rebuilt the backend and public API for Hack Club’s hackathon directory from the ground up. It reliably delivers thousands of personalized hackathon digests by email each week, and I’ve continued maintaining it as a volunteer since 2023.

  • Ruby on Rails
  • PostgreSQL
  • Docker
What I’ve shipped
  • Stripe billing-address validation, clearer form errors, and preferred and legal name handling.
  • Expiring signed links for receipt uploads, authentication fixes, and access-control corrections.
  • Error-monitoring improvements, branch deployments, dependency upgrades, and simpler development setup.
  • Incident documentation and mitigation evaluation, including rate limits, IP blocking, and temporarily pausing unauthenticated donations.
  • Hackathon directory: domain models, geocoding, passwordless authentication, location-based subscriptions, and background jobs. Ongoing Rails and PostgreSQL upgrades, CI, deployment tooling, and reliability improvements.

Upstream contributions

Selected merged patches.

Tools I use

Build
Ruby, Rails, PostgreSQL, SQLite
Operate
Debian, Docker, Proxmox, OPNsense, Caddy
Observe
Wazuh, Vector, VictoriaLogs, VictoriaMetrics, Grafana
Workflow
Git, Zsh, mise, RubyMine, GitHub Actions

A little more about me.

Beyond the code

I’m studying Computer Science at RIT, with graduation planned for 2029.

Outside software, I’m fascinated by the relationship between legal rules, institutional power, and fairness in practice. I enjoy reading judicial opinions and tracing how courts resolve competing interpretations, define the limits of authority, and decide what relief is warranted. I’m also an amateur radio operator with an FCC General-class license, and I play guitar and sing.

How I work

  • Understand the problem before choosing the machinery.
  • Write down the reasoning.
  • Make tradeoffs explicit.
  • Own what happens after the code ships.
  • Leave things easier to understand than you found them.

Have an interesting problem or project?

Let’s talk.

matt@mha.fyi
GitHub LinkedIn Résumé

Rochester, NY · Newton, MA · Remote-first