Open to workAvailable for Junior SysAdmin & IT consulting & Junior Quant →
Lugano · Switzerland · USI Economics student
Pietro
Quintavalle
Systems Engineer · Developer · Homelabber

5+ years building production-grade infrastructure from the ground up. I design resilient systems and write the software that runs on top of them — then secure and monitor all of it myself.

Get in touch →Explore homelabView projects
⚡
90%+ uptime
Production servers
💻
6–10 servers
Under management
📅
5+ years
SysAdmin experience
🎓
BSc Economics
USI · Ongoing
🌐
IT · EN · DE · ES · NO
5 languages
quinta@proxmox:~
➤ ~ neofetch
 
OS Proxmox VE 8 / UNRAID 7.3.1 / TrueNAS
Virt LXC · Docker · KVM
DNS Cloudflare · AAAA · AdGuard
Tunnels Cloudflare Tunnel · Newt
Proxy Pangolin + Traefik + Auto-TLS
Security Fail2Ban · Crowdsec · Authelia
Storage UNRAID parity · ZFS RAID-Z
Media Jellyfin · Navidrome · *arr
Music Listenbrainz · Symfonium
Monitor Grafana · Prometheus · Kuma
Code Python · TypeScript · SQL
Status Open for work ●
 
➤ ~
About me

Hi — friends call me Quinta. I’m an Economics student at USI Lugano and a self-taught systems engineer who’s been running homelab infrastructure since 2020.

My setup spans everything from bare-metal Proxmox clusters to DNS and domain management via Cloudflare, Pangolin/Traefik reverse proxying, and a full media+music automation pipeline.

On the academic side I’m deepening my understanding of microeconomics, macroeconomics, game theory, and quantitative finance — and finding more overlap with systems thinking than you’d expect.

Daily driver — Ryzen 7 9800X3D · RTX 5080 · hand-built custom keyboard

Technical Arsenal
🖧
System & Infra
Proxmox VEUNRAIDTrueNASDockerLXCKVMLinuxWin ServerAD
🔒
Network & Security
VLANCloudflareAAAA/DNSCF TunnelsTailscaleFail2BanCrowdsecUFWAutheliaTraefik
⌨
Development
PythonTypeScriptReactNext.jsDjangoSQLBashAnsibleHTML/CSSSoldering
📊
Data & Monitoring
GrafanaPrometheusUptime KumaZFSrsyncRAIDcAdvisor
Economics & Quant
📈
Microeconomics
Consumer theoryMarket structuresProduction & costsPrice theoryWelfare econ.
🌎
Macroeconomics
GDP & growthMonetary policyFiscal policyIS-LM modelOpen economy
⚅
Game Theory
Nash equilibriumDominant strategiesExtensive formMechanism designAuctions
💹
Quantitative Finance
Time value of moneyProbabilityStatisticsRegressionFinancial modelling
Certifications
🎓 Google Data Analytics Professional Certificate
🎓 Google IT Support Professional Certificate
Homelab Infrastructure

Every service containerised, every entry-point proxied, every failure logged. Domain management via Cloudflare with AAAA records and tunnels. Built to enterprise patterns at personal scale.

Hardware
ComponentUNRAID ServerProxmox Node
CPUIntel Core Ultra 5 225Intel Core i7-8700
RAM48GB DDR5 5600MHz32GB DDR4
Storage4× HDD parity array + NVMe cacheSSD (OS) + SATA pool
Network1Gbps LAN · VLANs1Gbps LAN · VLANs
OSUNRAID 7.3.1Proxmox VE 8
AccessPangolin + TraefikTailscale + SSH
FocusIdle power efficiency · perf/wattVirtualisation · LXC
Services & Stack
💾UNRAID NAS
Parity-protected array hosting 9-user network shares, Docker Appdata, automated backups. Acts as the central file hub for all services via SMB/NFS.
UNRAID 7.3.1Parity arrayNVMe cache9 usersrsyncSMB/NFS
🌎DNS & Cloudflare
Domain managed through Cloudflare with AAAA records for IPv6, Cloudflare Tunnels for zero-open-port external access, and AdGuard Home for internal DNS resolution and ad-blocking.
CloudflareAAAA recordsCF TunnelsAdGuard HomeSplit DNSDNSSEC
🔀Pangolin + Traefik
Pangolin (Traefik-based) handles all inbound HTTPS with automatic TLS, subdomain routing, and middleware. Newt tunnel enables access without exposing raw ports. Authelia adds SSO/2FA.
PangolinTraefikAuto-TLSNewt tunnelAutheliaMiddleware
🛡Fail2Ban + Security
Fail2Ban monitors SSH and auth logs, auto-banning brute-force IPs. Crowdsec adds community threat intelligence with real-time blocklist sync. UFW provides host-level firewall rules on each node.
Fail2BanCrowdsecUFWiptablesSSH hardeningAuthelia
🎬Jellyfin + Media
Jellyfin handles hardware-transcoded streaming with per-user OAuth authentication and Authelia SSO. Sonarr/Radarr auto-manage TV and film libraries; Bazarr handles subtitles; Prowlarr indexes trackers.
JellyfinHW transcodeOAuthSonarrRadarrBazarrProwlarr
🎵Music Pipeline
Lidarr monitors for releases → Prowlarr indexes → Beets normalises tags → Navidrome streams via Subsonic API. Scrobbling to Listenbrainz. Mobile playback via Symfonium and Explo apps.
NavidromeLidarrProwlarrBeetsListenbrainzSymfoniumExplo
🔗
Zero open ports via Tailscale + Cloudflare Tunnels
All services reachable remotely through a combination of Tailscale mesh VPN (for trusted devices) and Cloudflare Tunnels (for public-facing services). No port-forwarding. MagicDNS handles internal name resolution. Pangolin’s Newt agent tunnels external traffic into the private LAN.
Personal Workstation

Daily driver and dev machine. Built around AMD’s 3D V-Cache architecture for a blend of high single-threaded performance and serious GPU compute — doubles as a gaming rig, 3D modelling workstation, and 3D printing controller.

ComponentSpec
CPUAMD Ryzen 7 9800X3D (8c/16t · 3D V-Cache)
GPUZotac RTX 5080 Solid OC
RAM32GB DDR5 6000MHz
MotherboardGigabyte X870E AORUS PRO X3D ICE
OSCachyOS
RoleDev · Gaming · 3D Modelling · 3D Printing · Daily Driver
KeyboardWeikav Stars 75 · Huano Sakura switches (hand-lubed, custom assembly)
⚡AMD Ryzen 7 9800X3D
Zen 5 architecture with 96MB 3D V-Cache. Exceptional single-thread and gaming performance, with low-latency cache access ideal for simulation and data-heavy workloads.
Zen 58c / 16t96MB L3 3D V-Cache5.0GHz boost
🎮Zotac RTX 5080 Solid OC
Blackwell architecture. 16GB GDDR7, hardware ray tracing, DLSS 4 with Multi Frame Generation. Used for gaming, 3D rendering, and GPU-accelerated dev and compute tasks.
Blackwell16GB GDDR7DLSS 4MFGCUDARay Tracing
🔌X870E AORUS PRO X3D ICE
Gigabyte X870E flagship board with PCIe 5.0, USB4, and optimised X3D power delivery. Supports DDR5 6000MHz XMP out-of-the-box. White aesthetic matches the build’s ICE theme.
X870EPCIe 5.0USB4DDR5 6000WiFi 7
⌨Weikav Stars 75
Fully custom 75% aluminium keyboard — hand-lubed Huano Sakura tactile switches, gasket mount, per-key RGB, 1000Hz polling. Full assembly and switch tuning done from scratch.
75% layoutHuano SakuraTactileHand-lubedGasket mountAluminium1000Hz
Personal & Client Projects
● Live
Professional Client
Enterprise Proxmox Cluster
Full single-node virtualisation with VLAN segmentation, Pangolin/Traefik reverse proxy, Cloudflare Tunnels, and centralised Grafana/Prometheus monitoring. 90%+ uptime maintained.
ProxmoxDockerLXCTraefikTailscale
● Live
Professional Client
9-User RAID 10 NAS
TrueNAS on RAID 10 serving as a self-hosted cloud for 9 users. Per-user ACLs, automated rsync offsite backups, ZFS snapshots for instant point-in-time recovery.
TrueNASRAID 10ZFSrsyncACLs
↗ Open Source
Personal Project
Valgo — Algorithm Visualizer
Step-by-step algorithm visualisation built with React and Next.js. Sorting, graph, and search algorithms with live code annotations and speed controls.
ReactNext.jsTypeScriptTailwind
◐ In Dev
Personal Project
Finance Tracker
50/30/20 budgeting tool with Django backend, SQLite, and Chart.js dashboards. Monthly trend analysis, category breakdowns, and exportable reports.
DjangoPythonSQLiteChart.js
● Live
Personal Homelab
Self-Hosted Stack (IaC)
Entire homelab reproduced from code — Ansible playbooks, Docker Compose, and Bash scripts. Idempotent provisioning; full rebuild in under 30 minutes from scratch.
AnsibleComposeBashIaC
↗ Open Source
Personal Project
re-soulcommand
Music recommendation downloader integrating ListenBrainz and Last.fm playlists with Navidrome via slskd (Soulseek daemon). Fork rebuilt around a REST API backend — stripped of bloat, Docker-native.
PythonDockerListenBrainzLast.fmslskdNavidrome
● Live
Personal Homelab
Ainulindale — Music Stack
Fully self-hosted music discovery and streaming platform. Auto-discovers music weekly from listening habits, downloads via Soulseek P2P through a VPN gateway, streams via Navidrome. No commercial services required.
DockerNavidromeslskdGluetunListenBrainzProtonVPN
● Live
Personal Homelab
UNRAID Home Server
Intel Core Ultra 5 225 build running UNRAID 7.3.1 as primary NAS, Docker host, and media stack. Parity-protected array with NVMe cache, 9-user SMB/NFS shares, and all homelab services containerised.
UNRAID 7.3.1DockerParity Array48GB DDR5SMB/NFS
● Live
Personal Homelab
Proxmox Virtualisation Node
Intel Core i7-8700 node running Proxmox VE 8 for LXC containers and KVM VMs. VLAN-segmented network, Tailscale + SSH access, acts as the compute backbone for all hosted services.
Proxmox VE 8LXCKVMTailscaleVLAN32GB DDR4

More projects at github.com/Quinta0 ↗

GitHub — Contributions & Issues
Quinta0/valgo
Algorithm visualizer — step-by-step sorting, graph and search walkthroughs. Author & maintainer.
TypeScript↗ repo
Quinta0/finance-tracker
50/30/20 budgeting dashboard with Django and Chart.js. Author & maintainer.
Python↗ repo
Quinta0/re-soulcommand
Music recommendation downloader — ListenBrainz & Last.fm playlists into Navidrome via slskd. Author & maintainer.
Python↗ repo
Quinta0/Ainulindale
Self-hosted music discovery & streaming stack — auto-discovery, Soulseek P2P download via VPN, Navidrome streaming. Author & maintainer.
Shell↗ repo
Quinta0/homelab
IaC scripts, Ansible playbooks, Docker Compose stacks for full homelab provisioning.
Shell↗ repo
Experience

End-to-end IT infrastructure for private and business clients in Ticino.

  • Delivered and maintained 6–10 production servers at 90%+ uptime using containerisation, IaC, and automated monitoring — all without managed hosting.
  • Eliminated public exposure across all client servers by routing every external entry-point through Cloudflare Tunnels and Pangolin/Traefik — zero open ports, DNSSEC enforced, split-DNS via AdGuard Home.
  • Pangolin + Traefik reverse proxy with Authelia SSO, automatic TLS, and Newt tunnelling.
  • Fail2Ban + Crowdsec intrusion detection; UFW + iptables firewall rules across all nodes.
  • Reduced storage recovery time to under 30 minutes by implementing ZFS RAID-Z snapshots and automated rsync offsite backups on all storage nodes.
  • Music pipeline: Lidarr → Prowlarr → Beets → Navidrome + Listenbrainz scrobbling + Symfonium/Explo mobile.
  • Windows Server: Active Directory, DNS, DHCP, Group Policy, Disaster Recovery planning.
Education

Ongoing bachelor’s focusing on rigorous theory and quantitative methods.

  • Microeconomics — consumer and producer theory, market structures (perfect competition, oligopoly, monopoly), welfare economics, externalities.
  • Macroeconomics — GDP and growth models, IS-LM, monetary and fiscal policy, open economy models, inflation and unemployment dynamics.
  • Game Theory — Nash equilibrium, dominant strategies, extensive and normal form games, mechanism design, auction theory, repeated games.
  • Quantitative Finance & Statistics — probability theory, statistical inference, regression analysis, time series, financial modelling, portfolio theory basics.
  • Accounting, Statistics, and Quantitative Methods for economic analysis.
Game TheoryMicroeconomicsMacroeconomicsQuantitative FinanceStatisticsFinancial ModellingIS-LMNash Equilibrium

Two years of rigorous computer science foundations before transitioning to Economics.

  • Software Engineering — agile methodologies, requirements engineering, UML modelling, design patterns, and testing practices.
  • Data Structures & Algorithms — complexity analysis (Big-O), arrays, linked lists, trees, graphs, and sorting and searching algorithms.
  • Object-Oriented Programming — Java and C++ with inheritance, polymorphism, encapsulation, and SOLID principles.
  • Web Development — HTML, CSS, and JavaScript fundamentals with introductory full-stack concepts.
  • Discrete mathematics, logic, and formal reasoning for computer science.
JavaC++AlgorithmsData StructuresOOPAgileSoftware EngineeringWeb Dev

Swiss dual-track qualification combining the academic Maturità with a commercial AFC diploma. Graduated above average in both tracks.

  • Economics & Business — microeconomic principles, business organisation, entrepreneurship, and market dynamics.
  • Accounting & Finance — double-entry bookkeeping, financial statements, cost accounting, and Swiss business law.
  • Mathematics & Statistics — algebra, calculus foundations, probability, and descriptive statistics.
  • Languages — Italian (native instruction), German, English, and French; professional writing and communication.
  • Maturità Cantonale: 4.5 / 6 · AFC Economics: 5 / 6. Above average in both tracks.
Maturità 4.5/6AFC 5/6AccountingBusiness LawMathematicsEconomicsMultilingual
Languages
Italian
Native
English
Fluent
German
Conversational
Spanish
Basic
Norwegian
Basic

Ready to
collaborate?

Whether you need server infrastructure, network architecture, a self-hosted media stack, or a Junior SysAdmin — let’s build something reliable together.

✉ 0pietroquintavalle0@gmail.comGitHub ↗LinkedIn ↗