Code
What I'm working on
38 repositories pushed in the last year, across 5 places. Most of the work happens in the organisations below. Everything is on github.com/mattiashem.
Samma
Kubernetes-native security scanning, with the results in your own SIEM.
Samma runs open-source security scanners from inside your Kubernetes cluster. The operator finds your Ingresses and targets and scans them with Nmap, Nikto, Tsunami and a set of small always-on checks for TLS, DNS, headers and changes over time.
Results go to Grafana or your SIEM, not to yet another dashboard. A web app manages targets and organisations, a SIEM chart on NATS JetStream ships with detection rules, and an MCP server lets AI agents read the latest findings.
- Kubernetes operator
- Nmap
- Nikto
- Tsunami
- NATS
- Grafana
- SIEM
- MCP
app
The samma.io web app: manage scan targets, read results and administer organisations.
dashboard · nextjs · prisma · samma
mcp
Read-only MCP server: let AI agents list samma.io scan targets and fetch the latest scan results
ai-agents · go · mcp · model-context-protocol
operator
Kubernetes operator that runs open-source security scanners against your Ingresses and sends results to Grafana.
grafana · kubernetes · kubernetes-operator · python
nmap
Nmap wrapped as a Samma scanner: ports, HTTP recon and TLS ciphers for your Kubernetes Ingresses.
kubernetes · nmap · port-scanner · samma
nikto
Nikto wrapped as a Samma scanner: web server checks for your Kubernetes Ingresses.
kubernetes · nikto · owasp · samma
siem
Samma SIEM for Kubernetes: Helm chart with NATS JetStream, detection rules and Grafana dashboards.
grafana · kubernetes · nats · samma
siem-rules
Frozen. Detection rules now live in samma-io/detection-engine as Sigma rules.
detection-rules · samma · siem
guide
Hands-on guide to Samma: run the scanners, deploy them to Kubernetes, and set up the AWS and Kubernetes SIEM.
kubernetes · samma · security · siem
★ 1
detect
Nine small security scanners (TLS, DNS, HTTP headers, redirects, ports, SSH banners and more) for Samma's always-on checks.
dns · http-headers · kubernetes · samma
tsunami
Google Tsunami wrapped as a Samma scanner: finds high-severity vulnerabilities in your Kubernetes Ingresses.
kubernetes · samma · security-scanner · tsunami
wazuh-helm
Helm chart for running Wazuh SIEM on Kubernetes (dev and test setups).
helm · kubernetes · siem · wazuh
★ 4
wazuh-agent
Wazuh agent in Docker that acts as an ingestion proxy: send JSON to its API and it forwards to your Wazuh manager.
docker · log-forwarding · python · siem
★ 2
change
Stateful change scanners for Samma: baseline a target, then report every change (DNS, certificates, content, open ports).
change-detection · kubernetes · python · samma
wazuh-help
Scripts, configs and checklists for running and tuning Wazuh.
security · siem · wazuh
★ 2
Ollebo
Drone mapping, live video and AI workflows for the people who fly.
Ollebo turns drone flights into maps, 3D models and live video that a whole team can work in. Upload photos or GeoTIFFs and they become fast web maps; fly a DJI enterprise drone and it shows up live on the map, with every flight saved as a mission.
Under the hood, uploads go through NATS JetStream to a map-maker that builds Cloud-Optimized GeoTIFFs with GDAL. Live video goes through MediaMTX to HLS and WebRTC. It all runs on a Talos Linux cluster at Hetzner, deployed with ArgoCD, with Keycloak for login.
- Kubernetes
- Talos
- ArgoCD
- NATS
- PostGIS
- GDAL
- MediaMTX
- Keycloak
api
API for ollebo.com: create, update and serve maps.
api · drone-mapping · maps · python
maps-proxy
Serves and authorizes Ollebo's private map tiles and 3D models at maps.ollebo.com.
3d-models · keycloak · map-tiles · proxy
ollebo-client
Helper scripts and tools for connecting devices (Raspberry Pi, Navio2) to the Ollebo platform: live telemetry, images and video
drone · ollebo · raspberry-pi · rtsp
mavproxy
Forwards MAVLink drone telemetry to the Ollebo API, with a small web UI for mission config and the live-video URL.
ardupilot · drone · mavlink · mavproxy
roadmap
Public roadmap and feature requests for Ollebo — submitted from the in-app support page
feature-requests · ollebo · roadmap
mapserver
Self-hosted map server for Ollebo: turns your GeoTIFFs into Cloud-Optimized GeoTIFF tiles, served from your own machine.
cog · drone-mapping · geotiff · gis
GoodTribes
Volunteer and nonprofit projects: goodtribes.org, kickfix.se and asylguiden.se.
goodtribes.org
GoodTribes: connecting skilled volunteers with impact-driven organisations.
meilisearch · nextjs · nonprofit · postgresql
asylguiden.se
Asylguiden: information for asylum seekers in Sweden.
asylum · nextjs · nonprofit · refugees
deploy
GitOps manifest repo for goodtribes-org
argocd · gitops · helm · kubernetes
kickfix
Swedish marketplace for small jobs: post, find and accept gigs. React, Express, Prisma and MongoDB.
express · jobs · marketplace · mongodb
agent
Shared Claude Code skills and configuration for the Goodtribes team
ai-agents · claude-code · github-projects · project-management
Hacking Robots & Beer
The community org for home automation and home-lab work. OpenClaw skills that give AI agents Swedish everyday services (SMHI weather, Vklass school schedules, Willys groceries, Köket recipes, Polisen events, FOGIS football), Home Assistant integrations, a Growatt solar and battery scheduler, a Cisco access point controller, and Helm charts for our hosting platform.
cisco
Controller for Cisco Aironet 2602/2702 access points in autonomous mode: replaces a WLC by managing each AP over SSH.
aironet · cisco · go · kubernetes
growatt-skill
OpenClaw skill for monitoring and controlling a Growatt MIN/TLX solar plant: production, battery state, and price- and weather-aware battery scheduling
battery · growatt · home-assistant · openclaw
helmcharts
Helm charts for our hosting platform: WordPress, Matomo, Mautic, Moodle, Wiki.js, Postal and more.
helm · helm-charts · hosting · kubernetes
smhi-skill
OpenClaw skill and Home Assistant integration for SMHI weather and forecasts. No API key needed.
home-assistant · openclaw · python · smhi
vklass-skill
OpenClaw skill and Home Assistant integration for Vklass: your children's school schedule, meals and messages.
home-assistant · openclaw · python · school
willys-skill
OpenClaw skill for your Willys account: cart, order history, product search and delivery times.
groceries · openclaw · python · sweden
space-skill
OpenClaw skill and Home Assistant integration for the sky right now: ISS position, moon phase, sunrise/sunset, aurora Kp index and visible planets.
astronomy · aurora · home-assistant · iss
polisen-skill
OpenClaw skill and Home Assistant integration for Swedish Police events near you, from the public polisen.se API.
home-assistant · openclaw · polisen · python
koket-skill
OpenClaw skill for searching recipes and getting cooking tips from Köket.se.
openclaw · python · recipes · sweden
fogis-skill
OpenClaw skill and Home Assistant integration for FOGIS, the Swedish Football Association's club system: match schedules for your teams.
fogis · football · home-assistant · openclaw
wetherflow
Bridge from the WeatherFlow Tempest API to MQTT, with Home Assistant auto-discovery.
docker · home-assistant · mqtt · python
lifeandshell.com
Legacy static version of lifeandshell.com. No longer maintained.
blog · hugo · static-site