ACT ISOURCE

DHAKA, BANGLADESH — 23.8103° N / 90.4125° E

SHOABURRAHMANCHISHTY

DEVOPS ENGINEERI KEEP PRODUCTION ALIVE

commit a3f9c21 (HEAD -> main)

Author: chishty · chishty828rahman@gmail.com

SCROLL TO DEPLOY

DOCKERKUBERNETESTERRAFORMHELMARGOCDNGINXPROMETHEUSGRAFANAGITHUB ACTIONSJENKINSAZUREAWSTYPESCRIPTNESTJSREACTPOSTGRESQLMONGODBREDISDOCKERKUBERNETESTERRAFORMHELMARGOCDNGINXPROMETHEUSGRAFANAGITHUB ACTIONSJENKINSAZUREAWSTYPESCRIPTNESTJSREACTPOSTGRESQLMONGODBREDIS

ACT IISTAGE — COMMIT

COMMIT

I build the systems other people's code depends on. By trade: backends — TypeScript, NestJS, Node. By obsession: everything after git push — the servers, the pipelines, the dashboards that watch it all breathe. Right now that means two live multi-tenant SaaS products: one turns a company's inboxes and Google Drive into reconciled accounting entries; the other proves NYC buildings' carbon compliance, cell by cell.

And I don't rent my convictions — I built the proof. A five-node highly-available Kubernetes cluster raised by hand from bare KVM: stacked etcd, a floating VIP, a fifteen-template Helm chart, ArgoCD healing drift. An entire Azure platform from five custom Terraform modules, where the database never touches the internet. Blue/green pipelines that flip traffic only when health checks say yes — and roll back on their own when they don't.

ORIGIN COMMIT✓ VERIFIED

commit a3f9c21e8b (HEAD -> main, tag: v2026.0)

Author: Shoabur Rahman Chishty <chishty828rahman@gmail.com>

Date: Jan 2020 — present · Dhaka

feat: engineer who treats infrastructure like cinema

12 artifacts shipped, 5 postmortems written, 0 downtime tolerated

// OPERATING PRINCIPLE 01
ZERO-DOWNTIME IS NOT A FEATURE.
IT IS THE POINT.

When things break — and they always break — I dig to the layer. Five production failures root-caused and written down, including a five-layer ingress outage that ended at a load-balancer health probe receiving a 308. That habit became a 3,663-line book on the craft. Because infrastructure is the closest thing engineering has to bending time:

// OPERATING PRINCIPLE 02
BUILD IT RIGHT ONCE,
AND IT WORKS FOREVER.

ACT IIISTAGE — BUILD

BUILD

~/chishty/Dockerfile7 LAYERS

1FROMubuntu:24.04# the bedrock — production Linux administration

Linux / UbuntusystemdBashVPS hardeningDNSTCP/IP · NAT · VPNMTCNA networking

2RUNinstall --containers# everything ships in a box

DockerDocker Composemulti-stage buildsnon-root imagesGHCR / ACR / Docker Hub

3RUNinstall --orchestration# containers at scale, by hand

Kuberneteskubeadmk3sHelmArgoCDcert-manageringress-nginxCalico CNIHPA

4COPY./ci-cd /pipeline# the conveyor belt

GitHub ActionsJenkinsblue/green deployshealth-gated rollbackGit feature-flowartifact releases

5RUNterraform init && apply# infrastructure as code

TerraformAnsibleAzure (VM · VNet · AKS · ACR)AWS (S3 · SES)remote statecustom modules

6EXPOSE9090 3000# you cannot fix what you cannot see

PrometheusGrafanaSentryWinston / Pinouptime & alertingrunbooks

7RUNinstall --runtime# the engineer underneath

TypeScriptNode.jsNestJSExpressReact / Next.jsPostgreSQLMongoDBRedis / BullMQPython

[7/7] RUNNING final_checks --zero-downtime

✓ Successfully built chishty/engineer:latest

✓ Successfully tagged registry.chishty.me/engineer:v2026.0

ACT IVSTAGE — STAGING

STAGING

PRODUCTIONFEB 2026 — PRESENT

Junior Software Engineer

@ Nifty IT Solution

DevOps, server management, build & release for two live multi-tenant SaaS products — app.niftyhq.ai and energy.niftyhq.ai.

▸Runs production Ubuntu VPS/cloud servers — Docker + PM2, /api/health liveness, graceful shutdown, 150+ REST endpoints across 7 active organizations
▸Owns Nginx reverse proxies: SSL/TLS via Let's Encrypt, security headers, rate limiting, DNS, least-privilege firewalls
▸Builds & maintains GitHub Actions + Jenkins pipelines with SSH deploys; Prometheus/Grafana + Sentry for uptime, performance, security
▸Ships backend for an enterprise NestJS platform — layered guard stack, org-scoped RBAC across 15+ MongoDB collections, n8n bidirectional automation
▸Integrates Xero & QuickBooks OAuth2, Stripe subscriptions with HMAC-verified webhooks, AWS S3/SES, Microsoft Graph mail ingestion
▸Wires an Azure OpenAI document pipeline — classification, structured extraction, Tesseract OCR, fallback handling

STAGINGOCT 2025 — JAN 2026

AI Engineer Intern

@ Nifty IT Solution

Where the pipeline was forged — first production deployments, first servers, first 3 AM incidents.

▸Built early NestJS + MongoDB backend services and report-generation pipelines for the Energy Reporting Platform
▸Stood up Docker-based deployments on a self-managed Azure Linux VM — server config, process supervision, structured Winston logging
▸Shipped the backend for a Meeting Analyzer meeting-to-report pipeline

TRAINING GROUNDFEB 2021 — OCT 2021

Data Center Internship Program

@ ICC Teleservices Ltd.

Enterprise Linux, server virtualisation, network operations — operational discipline: ticketing, runbooks, incident documentation.

TRAINING GROUNDNOV 2020 — JAN 2021

MTCNA — MikroTik Certified Network Associate

@ IT Q Solutions

Routing, VLAN, VPN, NAT, firewall rules, DNS & TCP/IP — the networking foundation under everything above.

ACADEMYJAN 2020 — JAN 2025

B.Sc. in Computer Science

@ BRAC University

The origin commit. Five years of computer science — from data structures to distributed systems.

ACT VSTAGE — RELEASE

RELEASE

PRODUCTION SYSTEMS

2 LIVE — SERVING REAL USERS

registry.chishty.me/sys-001:prodLIVE

NIFTY AI

AI BOOKKEEPING SAAS

SERVING PRODUCTION TRAFFIC NOW

Google Drive and email flow in; reconciled Xero/QuickBooks bills flow out. OCR → GPT extraction → vendor matching, across ~50 services and ~45 models with per-org token metering and Stripe billing. I keep the fleet alive: Jenkins pipelines to PM2-managed servers, logrotate, backups, DRY_RUN-gated migrations.

✓150+ REST endpoints, org-scoped on every query
✓SES + Outlook dual email ingestion with org routing rules

Node.js / ExpressMongoDBAgenda jobsTesseract OCRXero / QBO OAuth2StripeJenkins

app.niftyhq.ai↗product overview — niftyhq.ai↗

registry.chishty.me/sys-002:prodLIVE

ENERGY REPORTING PLATFORM

ENTERPRISE ENERGY AUDITING

SERVING PRODUCTION TRAFFIC NOW

Production multi-tenant platform for NYC building energy audits — ASHRAE bin-hour models, ECM savings, Local Law 97 carbon-compliance scenarios, and client-ready PDF/DOCX reports. ~40 domain modules; deploys are atomic symlink releases with health-gated automatic rollback and golden-vector contract tests guarding the math in both repos.

✓caught a consultant's 2.18× overstated savings figure — with cell-level evidence
✓contract gates block deploys when LL97 math drifts

NestJS 11React 19MongoDBPuppeteerPM2GitHub ActionsAWS S3/SES

energy.niftyhq.ai↗

SYS-003:v0.0.16REDEPLOYING

INHUNT

B2B ENRICHMENT SAAS

Upload a CSV of incomplete company data, get back verified, AI-enriched rows — each with a visible evidence trail. Deterministic-first scoring (9 signals, ~135 points) escalates borderline cases to an Azure OpenAI reasoning judge. Full SaaS shell: Clerk orgs, Stripe metered billing, pgvector, 24 ADRs.

NestJS + FastifyNext.js 15PostgreSQL + pgvectorBullMQ

inhunt.chishty.me↗

SYS-004:v1.0.0REDEPLOYING

MEETING ANALYZER

7-STAGE AI PIPELINE

Drop in a raw Zoom transcript; a 7-stage Azure GPT pipeline extracts person-assigned, ClickUp-ready tasks — each grounded in the verbatim quote that justifies it. A critic loop catches owner misattribution; BullMQ + Redis stream live progress over SSE; blue-green deploys flip behind Caddy.

NestJSNext.js 15PostgreSQLRedis / BullMQ

SYS-005:v2.1.0REDEPLOYING

AIT INTEGRATION PLATFORM

CRM → ACCOUNTING SYNC

Multi-tenant platform syncing Zoho CRM sales orders into QuickBooks invoices with parity checks, issuing P12 digitally-signed PDF receipts, and bridging Zoho Desk support to WhatsApp. ADR-gated engineering: CI fails if OpenAPI docs drift from the zod schemas.

NestJS 11Next.js 16MongoDB Atlaspnpm + Turborepo

SYS-006:prodREDEPLOYING

SMART QA

AI TEST MANAGEMENT

AI-powered QA suite: generates test cases straight from Confluence docs with fast/deep reasoning modes, auto-triages Intercom tickets (severity, sentiment, suggested replies), and grades daily SQA compliance. LLM provider abstraction routes across model tiers with per-call cost logging.

NestJSMongoDBAzure OpenAIembeddings / RAG

qa.niftyai.net↗

INFRASTRUCTURE RELEASES

BUILT FROM BARE METAL · REDEPLOY QUEUED

registry.chishty.me/art-001:v1.35REDEPLOYING

AZURE K8S PLATFORM

TERRAFORM · AKS · GITHUB ACTIONS

A production-style platform provisioned entirely as code: custom Terraform modules stand up AKS, ACR, VNet and NSGs; a React + Express app ships via multi-job GitHub Actions; PostgreSQL lives on a private VM that never touches the internet; cert-manager issues real Let's Encrypt TLS.

✓Five real production failures root-caused — incl. a five-layer ingress outage traced to an Azure LB health probe getting a 308
✓Custom Terraform modules only — network, ACR, monitoring, AKS, database
✓SHA-tagged images, never latest; remote state with blob-lease locking

TerraformAKSDockerGitHub Actionscert-managerPostgreSQLAzure CNI

app.chishty.me↗

registry.chishty.me/art-002:v1.1.0REDEPLOYING

HA LARAVEL CLUSTER

KUBEADM · HELM · ARGOCD

Laravel 11 running on a hand-built, highly-available Kubernetes cluster — 3 control-plane + 2 worker KVM nodes, stacked etcd quorum behind a kube-vip floating IP. Shipped with a 15-template Helm chart and continuous GitOps delivery via ArgoCD self-heal.

✓Hardened images: UID 1000, all capabilities dropped, seccomp RuntimeDefault
✓HPA + PodDisruptionBudget + NetworkPolicy + migration-as-Helm-hook
✓12 documented troubleshooting case studies — Calico CRD limits, RBAC crashes, SSA fixes

kubeadmHelmArgoCDkube-vipCalicoingress-nginxLaravel 11

laravel.chishty.me↗

registry.chishty.me/art-003:v1.30REDEPLOYING

KUBEADM FROM SCRATCH

BARE LINUX · CONTAINERD · TLS

No managed anything. Two Azure VMs became a working Kubernetes cluster by hand — containerd runtime, Calico CNI with a VXLAN fix for Azure dropping IP-in-IP, NGINX Ingress on hostNetwork, cert-manager + Let's Encrypt on a live domain, HPA autoscaling, Helm.

✓Least-privilege firewall — 22/80/443 and nothing else
✓Full build documented with a 5-incident troubleshooting log
✓The cluster that hosts this portfolio's sibling demos

kubeadmcontainerdCalico VXLANNGINX Ingresscert-managerHPA

k8s.chishty.me↗

registry.chishty.me/art-004:v2.4.0REDEPLOYING

DEVOPS DASHBOARD

MERN · BLUE/GREEN · OBSERVABILITY

A MERN platform self-hosted on a Linux VPS behind Nginx with SSL/TLS, security headers and rate limiting. GitHub Actions builds → GHCR → SSH deploy with blue/green zero-downtime flips and health-gated automatic rollback. Watched by Prometheus + Grafana. Ships on an optional k3s lane too.

✓Blue/green releases — health check gates the traffic flip, rollback is automatic
✓Two live lanes: Docker on one subdomain, Kubernetes on another

GitHub ActionsGHCRNginxPrometheusGrafanak3sBash

qtec.chishty.me↗source↗

LAB NOTES

THE DOCUMENTED OBSESSION

THE DEVOPS JOURNEY

DEPLOYED

SELF-PUBLISHED BOOK · 3,663 LINES

A story-driven book written while crossing from developer to DevOps engineer — six months, eleven projects, from Linux first principles to a GitOps capstone. Paired with a master plan, two interview prep books, and ~45 hand-drawn SVG architecture diagrams.

AZURE DOCUMENT INTELLIGENCE LAB

ARCHIVED

TRIAL-AND-ERROR NOTEBOOK

A structured lab for Azure's document AI — 8 typed experiments from raw OCR to custom neural model training, each paired with a journal entry of findings. A thin wrapper tames the REST long-running-poller pattern with proper error narrowing.

INTERMISSION

TIME IS RELATIVE.

UPTIME IS ABSOLUTE.

ACT VISTAGE — OPERATE

OPERATE

guest@chishty.me: ~ — ssh — 80×24CONNECTED

Last login: from the far side of the wormhole

CHISHTY-OPS SHELL — type `help` to begin.

Hint: real engineers run `deploy`.

guest@chishty.me:~$

↑/↓ HISTORY · CTRL+L CLEARS · THREE EASTER EGGS HIDE IN THE DARK

ACT VIIPRODUCTION

SHIP IT

$git push origin chishty→

EMAILchishty828rahman@gmail.com ↗GITHUBgithub.com/chishty313 ↗LINKEDINshoabur-rahman-chishty ↗WEBchishty.me ↗