MichalKids — used technologies
Cloud, Kubernetes, data and CI/CD behind a family-safety app running in production across Android, iOS and Windows.
Cloud & infrastructure
- Google Cloud PlatformCompute, networking and managed services for the production environment.
- TerraformInfrastructure as code, applied through review gates.
- Hetzner CloudHost for the self-hosted observability stack.
Kubernetes & runtime
- GKE AutopilotManaged Kubernetes running production workloads.
- Talos LinuxSelf-managed on-prem Kubernetes cluster for development and CI.
- Helm, cert-manager, ingress-nginx, external-dnsCluster add-ons for releases, TLS, routing and DNS.
- LonghornDistributed block storage for stateful workloads.
Data
- PostgreSQLPrimary datastore, managed in both cloud and development environments.
- Field-level encryptionAES-256-GCM for personal data at rest.
- BigQueryAnalytics export pipeline.
CI/CD
- GitHub ActionsBuild, test and deploy pipelines.
- Actions Runner ControllerAutoscaling self-hosted runners on Kubernetes.
- Bare-metal runnersDedicated, trust-separated pools for CI versus production deploys.
Observability
- Grafana, Mimir, Loki, AlertmanagerSelf-hosted metrics, logs and alerting.
- Grafana AlloyUnified telemetry collector.
- kube-state-metrics, node-exporter, cAdvisor, postgres-exporterMetric sources across the cluster and database.
Networking & access
- TailscaleMesh VPN connecting cloud, on-prem and development environments.
- CaddyReverse proxy with automatic TLS.
- Google OAuth2Access control for internal tools.
Applications
- KotlinNative Android app.
- SwiftNative iOS app.
- Windows agentNative desktop monitoring client.
- Web backofficeInternal management console.