Life and Shell

Notes from building platforms, breaking them on purpose, and flying drones over the results. Written by Mattias Hemmingsson, DevSecOps engineer in Stockholm.

Mattias Hemmingsson

On LinkedIn

More posts →

What I'm working on

Drone mapping, live video and AI workflows for the people who fly.

Ollebo turns drone flights into maps, 3D models and live video that a whole team can work in. Upload photos or GeoTIFFs and they become fast web maps; fly a DJI enterprise drone and it shows up live on the map, with every flight saved as a mission.

Under the hood, uploads go through NATS JetStream to a map-maker that builds Cloud-Optimized GeoTIFFs with GDAL. Live video goes through MediaMTX to HLS and WebRTC. It all runs on a Talos Linux cluster at Hetzner, deployed with ArgoCD, with Keycloak for login.

  • Kubernetes
  • Talos
  • ArgoCD
  • NATS
  • PostGIS
  • GDAL
  • MediaMTX
  • Keycloak

Kubernetes-native security scanning, with the results in your own SIEM.

Samma runs open-source security scanners from inside your Kubernetes cluster. The operator finds your Ingresses and targets and scans them with Nmap, Nikto, Tsunami and a set of small always-on checks for TLS, DNS, headers and changes over time.

Results go to Grafana or your SIEM, not to yet another dashboard. A web app manages targets and organisations, a SIEM chart on NATS JetStream ships with detection rules, and an MCP server lets AI agents read the latest findings.

  • Kubernetes operator
  • Nmap
  • Nikto
  • Tsunami
  • NATS
  • Grafana
  • SIEM
  • MCP

Other projects

On the podcast

All →

Recently in code

All →