peraleslab.com

Building peraleslab.com: Hugo + S3 + CloudFront + Terraform

Fri, 17 Jul 2026 00:00:00 +0000

Why build this myself?

A conversation I’ve encountered repeatedly throughout my career goes something like this: someone asks how a system is deployed, how a particular part of the environment works, or why something was designed a certain way — and the honest answer is, “Let me check the documentation. I didn’t build that part.”

That is normal in enterprise IT. No one person owns every layer of a large system.

About

Wed, 15 Jul 2026 00:00:00 +0000

Background

I’m a cloud architect based in Texas with more than 20 years in enterprise IT, much of that time at IBM working across cloud transformation, migration, and modernization.

My career started as a Windows NT administrator, on a pager rotation, keeping servers running at 2 a.m. From there, I moved through server consolidation, data center relocations, infrastructure transformation, and eventually into architecture — leading migration and modernization engagements across banking, energy, pharmaceuticals, insurance, and government.

Adopting Existing AWS Infrastructure into Terraform

Thu, 08 May 2025 00:00:00 +0000

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Bringing hand-built AWS infrastructure under Terraform management is rarely a clean slate — it’s an exercise in careful importing, refactoring, and stabilizing what already exists in production.

Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore. This post covers a practical, low-risk approach: import first, refactor second, and never let plan surprise you.

OIDC Deploy Pipelines with GitHub Actions and AWS

Mon, 28 Apr 2025 00:00:00 +0000

Lorem ipsum dolor sit amet, consectetur adipiscing elit. GitHub Actions can assume an AWS IAM role directly via its built-in OIDC identity provider, removing the need to store long-lived AWS access keys as repository secrets.

Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. This post walks through configuring the trust policy, scoping the role’s permissions, and wiring the workflow.

Running a Home Lab with Cloudflare Tunnel

Sun, 20 Apr 2025 00:00:00 +0000

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Cloudflare Tunnel lets home lab services reach the internet without opening a single inbound port on the router — the tunnel daemon initiates an outbound connection and Cloudflare handles the rest.

Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum. This post covers setup, routing multiple services, and the tradeoffs versus a traditional reverse proxy.

EC2 Right-Sizing: Practical Lessons from Real Assessments

Sat, 12 Apr 2025 00:00:00 +0000

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Right-sizing EC2 fleets is less about hitting a utilization target and more about understanding burst patterns, workload shape, and the cost of getting it wrong in either direction.

At vero eos et accusamus et iusto odio dignissimos ducimus qui blanditiis praesentium. This post walks through a real assessment: the data collected, the instance families considered, and the recommendation delivered.