pookzie@eu:~$ neofetch

Nejc Pavlič (pookzie), Linux sysadmin & DevOps

ID: POOKZIE

Scan complete

LVL
38
Class
Sysadmin
Faction
Horde
Threat
low
Ljubljana
--:--
Caffeine

Subject scanned · threat level: low
caffeine dependency detected

whoamineofetch v7.1
Name:      Nejc Pavlič
Role:      Linux sysadmin & DevOps
Work:      DHH / Webtasy · Infrastructure
Host:      Ljubljana, Slovenia
Uptime:    6.5 years in Linux ops
Fleet:     2,000+ hosts · SI / HR / RS
Shell:     bash (fleet) · zsh (home)
Games:     Dota 2 · Cyberpunk 2077 · Elden Ring
Mail:      [email protected]
Links:     linkedin · github

I keep 2,000+ machines across Slovenia, Croatia and Serbia answering in the morning.In between, I build small weird things and write down what I notice.

[SCROLL] or [1]–[7] to jack into the next layer ↓

Visitor health check--/5

pookzie@eu:~$ check_visitor -H you --verbose

Health checks are my job.

So this page runs one on you. The connection data comes from Cloudflare's trace on this domain, the rest is read by your own browser. Nothing about you is stored. Your network and rough location are looked up on this server. The only requests to someone else's server are for your weather, to Open-Meteo, with a location rounded to about 10 km.

Report #--------pending
  • Public IP…info
  • Location…info
  • Network…info
  • Cloudflare edge…info
  • Latency to edge……
  • IP version……
  • HTTP version……
  • TLS……
  • Key exchange……
  • SNI…info
  • Privacy Control……

JavaScript is off, so this page cannot run any checks. That is also the most private setting there is.

Verdictexit -
--checks
passed

Waiting for the scan…

What your browser tells every website

Any page can read these values with a few lines of JavaScript, without asking. Harmless one by one; together they form a fingerprint that can recognise your browser across sites, even after you clear cookies. Read locally here, never stored or sent. Hover or tap a group to see why it matters.

~/you9 groups · hover for why
browser…
…
Client hints
…
Cookies
…

Sent in the User-Agent header with every request. Chromium browsers also hand out exact versions through client hints.

system…
…
CPU threads
…
Memory
…

Memory is rounded and threads are capped in some browsers, but together with the OS they narrow down the device.

display…
…
Viewport
…
Colour
…

Screen size and pixel ratio are among the most identifying values a site can read.

graphics…
…
WebGPU
…

The GPU model is readable through WebGL. Firefox and Safari generalise it; Chromium usually does not.

input…
…
Touch points
…
Hover
…
Storage for sites
…

Input type tells a site whether you are on a phone, tablet or desktop, whatever the User-Agent claims.

locale…
…
Time zone
…
Languages
…
Week starts
…

Time zone and language list reveal roughly where you are, even behind a VPN.

network…
…
Downlink
…
Round trip
…
Data saver
…

Chromium shares rounded speed estimates so sites can adapt. Firefox and Safari do not share them.

privacythis page
…
Global Privacy Control
…
Do Not Track
…
Cookies set here
…
Third-party scripts
…

Global Privacy Control is a legally recognised opt-out in some places, such as California. Do Not Track is retired and ignored.

fingerprintsha-256
…
Values combined
…
Needs cookies
no
Saved here
no

A hash of the values above. A site that computes something similar can recognise this browser on later visits without any cookie.

~/you/weather · locating……
…loading the weather…
Feels like
…
Wind
…
Humidity
…
Sun
…
Client data is read locally by JavaScript and never leaves your device.
Most websites can see all of it, and many collect it.
Connection: /cdn-cgi/trace · network: iptoasn.com data, looked up here · weather: open-meteo.com, for your approximate location
no cookies · no third-party scripts · nothing stored
Live from the 404 log24 h

pookzie@eu:~$ tail -f 404.log | ./classify --since=24h

The internet, in the last 24 hours.

This site is a handful of static files. Bots don't care: they knock on every door anyway, looking for WordPress logins, leaked .env files and unpatched servers. Every miss is written down by a small 404 handler. Here is what they tried. Updated every minute; no IP addresses are stored.

…probes, answered with 404
…countries of origin
…different paths tried
Where the probes came fromby country
fewermoreSlovenia, home of this server
What they were looking forby category
  • waiting for data…
tail -n 8 404.logconnecting…

waiting for data…

Probes per houryour time
Logged by a 404 handler on this server: time, country (from Cloudflare), method, path.
no IP addresses · kept 7 days · a path is only shown if it looks like a real probe target
Map: Natural Earth, public domain · bot share: Cloudflare analytics
hover a country, bar or category for its count
Fleet status · SI / HR / RS2000+

pookzie@eu:~$ fleet --status --simulate

The day job: keep it green.

System administrator and DevOps engineer on the Infrastructure team at DHH / Webtasy. 2,000+ hosts across Slovenia, Croatia and Serbia: shared hosting, VPSes, mail, DNS, firewalls and a private cloud. Most fixes end up in Puppet, so they survive the next reinstall. The map below is a simulation with made-up host names: what a day on the fleet looks like, not the fleet itself.

Fleet map · simulationall green
healthywarningcriticalself-healinghealed: 0
journalctl -fsimulated
Only certified sysadmins are allowed to manipulate,
access or disable these devices.
Protocol pkz-2000 · SI / HR / RS · el7/el8/el9
puppet-converged · 24/7
Career log · installed packages2015→

pookzie@eu:~/career$ git log --all --graph --since=2015

How I got here.

Eleven years, two kinds of machines. Pick a mission on the timeline or in the list.

Timeline2015 → now
DHH / Webtasy
Respawn
SIEL
STORK / Hosterdam
NOVEM · factory
respawn
2015201620172018201920202021202220232024202520262027
  • Sysadmin & DevOpsActivea7c0de1 · DHH / Webtasy · Infrastructure · Apr 2025 – now
  • RespawnRespawnr35p4wn · Between jobs · side quest · Jan 2025 – Apr 2025
  • Linux system administratorCompleted5ie1d22 · SIEL, d.o.o. · Feb 2022 – Jan 2025
  • Linux system administrator (junior)Completedh05t3r2 · STORK R, d.o.o. · Hosterdam · Apr 2020 – Feb 2022
  • CNC operator → shift leadCompletedcnc2015 · NOVEM Car Interior Design · Jun 2015 – Mar 2020
  • EducationSide quest0r1g1n0 · Side quest · Celje · Velenje
Mission detailscommit a7c0de1
DHH / Webtasy · Infrastructure

Sysadmin & DevOps

Apr 2025 – now · 1y 6m

Objectives

  • Keep 2,000+ hosts across Slovenia, Croatia and Serbia healthy
  • Fleet-wide patching and CVE response, ported into Puppet
  • Mail deliverability: SPF, DKIM and DMARC hardening
  • DDoS detection with BGP blackhole and scrubbing
  • Migrate the private cloud from oVirt to Apache CloudStack

Loot

PuppetCloudStackHAProxyEximOPNsensePrometheusNetBox
Fix it once, then make sure Puppet fixes it forever.
You died…respawned April 2025
Between jobs · side quest

Respawn

Jan 2025 – Apr 2025 · 3m

Objectives

  • Logged a lot of hours in the Lands Between
  • Walked the streets of Night City while the job hunt ran in the background
  • Rested at a site of grace, then back up
  • Kept applying until the next gig came through

Loot

Elden RingCyberpunk 2077PatiencePerspective
Every run ends in a respawn. This one spawned me at DHH / Webtasy.
SIEL, d.o.o.

Linux system administrator

Feb 2022 – Jan 2025 · 2y 11m

Objectives

  • Technical and systems support for customer servers
  • Domains, SSL certificates and DNS
  • 3CX VoIP for clients who just needed the phones to work
  • Testing and QA on internal projects
  • On-site hardware swaps when something died

Loot

DNSSSL3CXHardware
The useful part was the boring part: certificates that renew, names that resolve, boxes that still answer in the morning.
STORK R, d.o.o. · Hosterdam

Linux system administrator (junior)

Apr 2020 – Feb 2022 · 1y 10m

Objectives

  • Shared hosting for a large group of Hosterdam customers
  • Support tickets and domain administration
  • Renewal quotes that keep the lights on

Loot

cPanelTicketsDomains
Junior title, production load. Where hosting stopped being a lab and became other people’s websites.
NOVEM Car Interior Design

CNC operator → shift lead

Jun 2015 – Mar 2020 · 4y 9m

Objectives

  • Run a CNC line in car-interior manufacturing
  • Cover shift lead: plan people, watch the line, cut downtime
  • Trained for project lead on a new product introduction

Loot

CNCLeanPeople
Different machines, same job: keep the process moving when something sticks.
Side quest

Education

Celje · Velenje

Objectives

  • Economics technician diploma, Celje
  • Computer engineering, Višja strokovna šola Velenje (thesis still open)

Loot

Computer engineeringEconomics
One branch still waiting to be merged.
Installed packages · rpm -qa --brain | sort54 pkgs

The stack I work in every day. CLI first, with a GUI fallback for the boxes that only have a GUI.

OS & panels9
  • CloudLinux
  • AlmaLinux
  • CentOS
  • Ubuntu
  • cPanel/WHM
  • Plesk
  • DirectAdmin
  • CageFS
  • LVE
Web & data11
  • Apache EA4
  • Nginx
  • HAProxy
  • LiteSpeed
  • Varnish
  • PHP-FPM
  • Node.js
  • pm2
  • MariaDB
  • MySQL
  • PostgreSQL
Mail & DNS8
  • Exim
  • Dovecot
  • SpamAssassin
  • SPF
  • DKIM
  • DMARC
  • PowerDNS
  • Cloudflare
Network & security9
  • OPNsense
  • IPsec
  • CARP
  • Juniper
  • BGP
  • FastNetMon
  • Imunify360
  • CSF
  • SELinux
Virt & backup7
  • CloudStack
  • KVM
  • libvirt
  • Packer
  • oVirt
  • R1Soft
  • Comet
Automation & eyes10
  • Puppet
  • Ansible
  • Bash
  • awk
  • Python
  • Prometheus
  • Grafana
  • Icinga
  • NetBox
  • Telegraf
$ cat ~/known-traps | shuf -n1

df before du. Always. Then du -x.

Side projects05

pookzie@eu:~$ ls ~/projects --live

Things I built after hours.

The previews below are live widgets, not screenshots.

mail-from-marschecking…
one-way light delay · now…

Mail from Mars

Audio messages with the real Earth–Mars light delay, computed from orbital elements in the browser.

povodni-mozchecking…
Savinja @ Celje II · demo…

Povodni Mož

River monitor for the Savinja: a bot scrapes ARSO, posts alerts to Telegram and feeds a live dashboard with webcams.

heat-minerchecking…
hashrate → heat · demo…

Heat Miner

Heat your home, mine Bitcoin. A landing page for turning a space heater into something that pays back.

groficachecking…
the stars outlasted the counts by570 yearsHouse of Celje · 1341–1456

Grofica

Three countesses of Celje: an empress, a woman drowned for marrying above her station, and a Serbian princess who outlived them all. A one-page history in English and Slovene, checked against Slovenska biografija.

walkie-talkiein progress
channel 1 · hold to talkidle

WalkieTalkie beta

Push-to-talk walkie-talkie app. Expo / React Native front end, Node backend, running on my own server.

Gaming profileLVL 38

pookzie@eu:~$ ./gaming-profile --skin=auto

Player 1: pookzie

Class: SysadminFaction: Horde (WoW, retired)Cyberdeck RAM

Available achievements:

  • ▲
    Uptime Enjoyer
    UnlockedSysadmin
    RAM7
  • ⌁
    df before du
    UnlockedSysadmin
    RAM3
  • ☾
    3 A.M. Page
    UnlockedSysadmin
    RAM5
  • ⚔
    Maidenless No More
    UnlockedElden Ring
    RAM16
  • ◢
    Wake Up, Samurai
    UnlockedCyberpunk 2077
    RAM20
  • ✦
    Rampage
    UnlockedDota 2
    RAM10
  • ⚑
    For the Horde
    UnlockedWorld of Warcraft
    RAM8
  • ⚙
    Career Respec
    UnlockedLife
    RAM12
  • ◆
    Maker
    UnlockedLife
    RAM4
  • ⌂
    Home Automator
    UnlockedLife
    RAM6
  • ✎
    Thesis Finished
    Insufficient time available
    RAM31
  • ?
    ???
    Insufficient RAM available
    RAM28
Data ZPlayer
20XP earned
Cyberpunk 2077
  • This whole site is a love letter to Night City's UI.
TerminalTTY1

pookzie@eu:~$ fortune | cowsay

 ______________________________________________
/ CloudStack stop/start is not a reboot. One   \
| rebuilds the security groups, the other does |
\ not.                                         /
 ----------------------------------------------
        \   ^__^
         \  (oo)\_______
            (__)\       )\/\
                ||----w |
                ||     ||
guest@pookzie.eutry: help
✓
Achievement unlocked
[pookzie]
00:00:00