Marcel G. bifrost0x

Open source for real infrastructure

I build practical software for homelabs, self-hosted environments and people who actually run systems.
Useful tools, clean UX, strong defaults and full ownership of the stack.

Featured project

WebSSH

A secure, self-hosted SSH and SFTP workspace for homelabs and teams.

WebSSH keeps terminal work, files, commands, diagnostics and notes in one responsive browser workspace. It is self-hosted, multi-user and built without a hosted control plane or runtime CDN dependencies.

Core capabilities

multi-session SSH, 1-, 2- and 4-pane layouts, and persistent tmux sessions
session-aware Files, Commands, Diagnostics and Notes
active-session monitoring and expanded Linux diagnostics
source-first SFTP workspace with dual panes and server-to-server transfers
optional LDAP / Active Directory and OIDC sign-in, including LDAP auto-provisioning
optional passkeys, TOTP and one-time Recovery Codes
action-bound confirmation for protected account and administrative changes
encrypted SSH keys and per-user host trust management
Tailscale SSH, jump hosts and saved connections
admin controls, audit logging and resource quotas
verified backup, restore and secret rotation
Docker-first, self-hosted deployment

Built with

Python Flask Socket.IO
Paramiko SFTP WebAuthn
OIDC LDAP / AD TOTP Docker Redis

Built around

self-hosted ownership
strong admin UX
recoverability
clear trust boundaries
operational clarity
reproducible delivery

How I build

Open source

Software should be useful beyond a demo and understandable beyond its author.

practical features
transparent behavior
maintainable code
documentation that helps

Homelab

I like infrastructure you can run, inspect, break, fix and fully own.

self-hosted services
Docker and Linux
backup and recovery
automation and observability

Engineering mindset

My security background shapes how I build without turning every project into a security product.

strong defaults
clear trust boundaries
authentication and auditability
safe operational workflows

Selected upstream work

My professional security background also shows up in selected merged contributions to the official Azure/Azure-Sentinel repository.

AI agent configuration drift

Four hunting queries for security-relevant changes to AI agents, including instruction changes, MCP servers, ownership and sharing scope.

Sentinel Training Lab onboarding

An idempotent Azure Cloud Shell workflow for managed identity creation and Microsoft Graph permission setup.

GitHub developer snapshot

Toolbox

_{Build useful things. Own the stack. Share what works.}

Navigation Menu