The technical hub of
my online presence._

Long-form writing on cloud architecture, migration, Terraform, and home lab engineering. Full articles live here first.

Every push to main → live in production. No stored credentials, no inbound ports.

Featured build log

Building peraleslab.com: Hugo + S3 + CloudFront + Terraform

This site is a working example of its subject matter. A Hugo static site hosted on S3 and delivered by CloudFront. TLS via ACM with Cloudflare DNS. Deployed on every push with GitHub Actions using OIDC — no stored credentials. The entire stack is fully defined in Terraform.

Jul 17, 2026 5 min read Build Log

Read the build log →

1peraleslab-infra/
2├── main.tf
3├── modules/
4│   ├── s3-website/
5│   ├── cloudfront/
6│   ├── acm/
7│   └── iam-oidc/
8├── environments/
9│   └── prod/
10└── README.md
11

Adopting Existing AWS Infrastructure into Terraform

A practical approach to importing, refactoring, and stabilizing existing resources.

May 8 Terraform

OIDC Deploy Pipelines with GitHub Actions and AWS

Use GitHub's OIDC provider to assume roles in AWS securely — no long-lived credentials.

Apr 28 CI/CD

Running a Home Lab with Cloudflare Tunnel

Expose services safely without opening inbound ports. Private, simple, and reliable.

Apr 20 Home lab

EC2 Right-Sizing: Practical Lessons from Real Assessments

How we analyze utilization, burst patterns, and workloads to recommend the right instance families.

Apr 12 Migration

Built with