Skip to content
View hoelee's full-sized avatar
2 followers · 1 following

Block or report hoelee

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
hoelee/README.md

Senior Full-Stack / Product Engineer — production infrastructure · automation · applied AI

I build the application and run the production infrastructure it lives on. Kuala Lumpur, Malaysia · remote (GMT+8).

10+ years delivering production web applications and business systems for SME, NGO and e-commerce clients — then deploying, securing, monitoring and supporting them on a three-host self-managed Docker platform. Most full-stack engineers stop at the application layer; running the platform underneath it is what keeps that layer honest.

Selected work

Project What it is
traefik-botfilter Dependency-free Traefik middleware in Go — rejects scanner and malformed-HTTP traffic using configurable request validation, heuristic scoring and temporary in-memory IP bans.
hoelee-webdav-server Hardened WebDAV server (Apache httpd) in Docker — pinned base image, modern TLS, healthcheck, CI/CD.
Three-host production platform 162 containers across 78+ compose stacks on Synology DSM, Unraid and an Ubuntu VPS, serving live public services — read the case study. Traefik reverse-proxy fleet with automated ACME TLS, Prometheus/Grafana monitoring on every host, authentik SSO, MySQL master/replica replication, CI/CD, and automated backup and restore.
email-sync-oauth2 Dockerised multi-account IMAP sync with OAuth2 for Office 365, Outlook.com and Gmail — built for the Microsoft Basic-Auth retirement.
springboot-hoelee-demo Modern Spring Boot showcase — Thymeleaf UI, JPA, Security, caching and tests. Live at spring.hoelee.com.
digikedai-bot Production Telegram AI customer-support bot: Dockerised, LLM-backed, tunnel-only ingress (no inbound ports). TypeScript + LiteLLM. Running as @DigiKedaiBot.
universal-video-transcode Any video in, one MP4 out that plays on both iPad and Android. Source-file-driven recipe selection (lossless copy where possible) and a header-only gate that catches the frame-timing defect no fps test can see.
hoelee-blog Technical writing on real debugging, migrations and platform design. Astro 5 + Markdown, English-first with Chinese under /posts/zh/, deployed by self-hosted CI/CD.

What I work with

Languages    PHP · Java · Python · JavaScript · TypeScript · SQL
Frameworks   Spring Boot · CodeIgniter · WordPress · Node.js · REST APIs
Data         PostgreSQL · MySQL/MariaDB (incl. replication) · Redis · SQLite · Elasticsearch
Platform     Docker · Linux · Traefik · Nginx · Cloudflare · CI/CD (GitHub Actions, Gitea Actions)
Infra        Self-hosted mail (Postfix/Dovecot/Rspamd) · Prometheus/Grafana · authentik SSO · restic backup
AI           OpenAI API · LLM integration · OCR · n8n automation · local LLM inference (llama.cpp)

Beyond application work I take automation end-to-end: browser-automation and CDP tooling, marketplace and fulfilment workflows, and AI features shipped inside commercial products, including a WordPress plugin that generates furniture product photography with an image model.

Elsewhere

Most of my day-to-day repositories live on a self-hosted Gitea instance; what is public here is what I can show.

Pinned Loading

  1. email-sync-oauth2 email-sync-oauth2 Public

    Dockerized multi-account IMAP sync with OAuth2 for Office 365, Gmail & Google Workspace. Migrate emails from Hotmail/Outlook.com/Gmail to any IMAP server — even after Microsoft killed Basic Auth.

    Shell 1

  2. hoelee-webdav-server hoelee-webdav-server Public

    Hardened WebDAV server (Apache httpd) in Docker — pinned base, modern TLS, healthcheck, CI/CD

    Shell 1

  3. traefik-botfilter traefik-botfilter Public

    A lightweight Traefik middleware that blocks scanners, malformed HTTP requests, and suspicious clients using configurable request validation, heuristic scoring, and temporary in-memory IP bans.

    Go 1

  4. digikedai-bot digikedai-bot Public

    Multi-channel AI customer-support bot for Digi Kedai (Telegram + WhatsApp): TypeScript, grammY, Cloudflare tunnel webhook, LiteLLM, PostgreSQL.

    TypeScript

  5. universal-video-transcode universal-video-transcode Public

    Any video/audio in, one MP4 out that plays on iPad AND Android. Source-file-driven recipe selection (lossless copy when possible), HEVC/H.264 + AAC, and a header-only gate that catches the frame-ti…

    Python 1