Skip to content

SYSTEMS • DATABASES • DEVSECOPS

Unish Dhungana

Systems & Infrastructure Professional

DevSecOps Focused

Early-career infrastructure professional working across Linux, PostgreSQL, containers, automation, networking, and secure deployment workflows.

Secure systems connected through reliable infrastructure.

Linux, PostgreSQL, containers, automation, and deployment workflows.

Credible early-career experience from local, lab, test, and supervised environments.

Featured projects

Case studies shaped around deployment decisions, data flow, and maintainability.

Featured deployment project

FileDrop

A temporary cross-device file-transfer application for uploading one or more files, generating a short-lived code, and downloading the files on another device.

Role
Built and deployed the application stack, backend data model, container network, reverse proxy, persistence, and deployment documentation.
Outcome
A secure, documented, multi-service deployment workflow for short-lived file transfers with private services and public HTTPS ingress.
Next.jsFastAPIPostgreSQLSQLAlchemyAlembicDocker ComposeCaddyAzure Ubuntu VMCloudflareHTTPS
reverse_proxy: publicapi/db/web: privatedownloads: expiringdefault_limit: 1
Technical decisions and challenges

Engineering decisions

  • Deployed a multi-service Docker Compose stack with PostgreSQL, FastAPI, and Next.js services kept private.
  • Exposed only the Caddy reverse proxy while using private Docker networking for internal services.
  • Configured persistent PostgreSQL and uploads volumes with health and readiness endpoints.
  • Created and applied Alembic migrations for PostgreSQL metadata storage.
  • Implemented multiple-file uploads, single-file direct download, ZIP download for multiple files, expiring transfers, configurable download limits, and automatic physical-file cleanup.
  • Used SSH tunnelling during development and documented deployment, database, backup, restore, and architecture procedures.

Key challenges

  • Separating public ingress from private service networking.
  • Keeping metadata, uploads, cleanup, and download limits consistent across expiring transfers.
  • Documenting repeatable operations without exposing secrets or infrastructure details.

Local analysis pipeline

Forensic Video Analysis and Dataset Pipeline

A modular local pipeline that extracts video metadata, representative frames, temporal information, audio information, and structured forensic features for dataset preparation.

Role
Developed pipeline modules for auditable feature extraction, validation, structured outputs, error handling, and tests.
Outcome
A repeatable dataset-preparation pipeline that supports structured forensic analysis workflows without claiming to determine authenticity on its own.
PythonOpenCVFFmpegffprobeNumPyJSONJSONLCSVpytest
Technical details

Engineering decisions

  • Used versioned schemas and structured logging so generated outputs can be reviewed later.
  • Separated metadata, frame, temporal, audio, and feature extraction steps into maintainable modules.
  • Added validation, error handling, and automated tests around local processing workflows.

Key challenges

  • Producing consistent outputs from varied source media.
  • Keeping forensic preparation auditable without claiming authenticity decisions.

Lab and test-environment project

Infrastructure Automation and CI/CD Lab

A test-environment workflow for repeatable build, test, and deployment stages using containerized services and GitLab CI/CD.

Role
Configured YAML pipeline stages and delivery patterns for local or test-server deployment practice.
Outcome
A practical CI/CD lab for understanding delivery stages, configuration, and deployment flow.
DockerGitLab CI/CDYAMLShellTest serverDeployment workflow
Technical details

Engineering decisions

  • Defined build, test, and deployment stages in pipeline configuration.
  • Used containers to make local and test-server delivery more repeatable.
  • Kept the project clearly scoped as a lab rather than production ownership.

Key challenges

  • Making pipeline steps repeatable across local and test environments.

Hackfusion 2026 team prototype

VisionX

A four-member digital-evidence analysis prototype built during Hackfusion 2026.

Role
Contributed to the homepage and analysis-results interface, supported limited video-pipeline work, and helped maintain a stable working version during development-environment issues.
Outcome
The project received the Best Social Impact Award at Hackfusion 2026.
Frontend UIVideo pipeline supportPrototype workflowTeam delivery
Technical details

Engineering decisions

  • Focused contributions on the homepage and analysis-results experience.
  • Helped preserve a stable working version while the team handled environment issues.
  • Supported the digital-evidence analysis prototype without claiming sole ownership of the full system.

Key challenges

  • Coordinating prototype delivery across a four-member team under event constraints.

Optional networking practice

Network Configuration Labs

Cisco Packet Tracer labs for VLANs, IPv4 addressing, subnetting, routing concepts, firewall rules, and traffic segmentation.

Role
Practiced network design fundamentals and documented configuration behavior in lab scenarios.
Outcome
Hands-on reinforcement of networking fundamentals used in infrastructure and security workflows.
Cisco Packet TracerVLANsIPv4SubnettingRoutingFirewall rules
Technical details

Engineering decisions

  • Used lab topologies to reason about segmentation, addressing, routing, and policy behavior.

Key challenges

  • Keeping traffic segmentation and addressing plans readable across small lab topologies.

Professional experience

Hands-on systems and database experience.

Supported Linux, PostgreSQL, CI/CD, and firewall tasks in supervised local and test environments.

October 2025 – April 2026

System Admin & Infrastructure Trainee

Digi HubLocal, supervised, and test-environment infrastructure work.
  • Supported Ubuntu Linux servers and Linux service checks.
  • Configured and supported Samba file sharing.
  • Managed users, permissions, authentication, and connectivity under supervision.
  • Created shell scripts for user-management tasks.
  • Used Ansible playbooks across local and test hosts.
  • Assisted with software installation and server configuration.
  • Performed PostgreSQL service checks and supported PostgreSQL 16 roles and privileges.
  • Reviewed pg_hba.conf and postgresql.conf configuration files.
  • Used pg_dump and pg_restore for backup and restore practice.
  • Reviewed PostgreSQL and WAL logs.
  • Supported pgstream live replication and helped diagnose a missing-target-schema replication failure.
  • Configured a GitLab CI/CD pipeline in a test environment.
  • Assisted with Sophos Firewall rules, policies, and log review.
  • Supported account provisioning and produced technical documentation.

Technical capabilities

Grouped skills for systems, databases, deployment, and secure operations.

Systems and Linux

  • Ubuntu Linux
  • Linux services
  • User and permission management
  • Samba
  • Bash
  • Shell scripting
  • Logs and troubleshooting

Containers and Deployment

  • Docker
  • Docker Compose
  • Caddy
  • Reverse proxies
  • Container networking
  • Persistent volumes
  • Health checks

Automation and CI/CD

  • Ansible
  • GitLab CI/CD
  • Git
  • YAML
  • Deployment workflows

Databases

  • PostgreSQL
  • psql
  • pgAdmin
  • SQLAlchemy
  • Alembic
  • pg_dump
  • pg_restore
  • Roles and privileges
  • Configuration review
  • Replication exposure

Networking and Security

  • TCP/IP
  • DNS
  • HTTPS
  • IPv4 subnetting
  • VLAN fundamentals
  • Sophos Firewall exposure
  • Nmap
  • Wireshark
  • SSH tunnelling

Continuous learning

Current focus areas for practical DevSecOps growth.

DevSecOps workflowsSecure CI/CDContainer securityLinux hardeningInfrastructure as CodeSecrets managementObservabilityPostgreSQL reliabilityBackup and disaster recoveryCloud infrastructureThreat modelling

Training and recognition

Accurate milestones without inflated claims.

Internship Completion

Digi Hub

Ethical Hacking Training

DanpheLink

Best Social Impact Award

Hackfusion 2026

Contact

Let’s discuss infrastructure, databases, or junior DevSecOps opportunities.

I’m open to junior systems administration, database administration, infrastructure, and DevSecOps-focused opportunities.