/home/fel1x

Talos on Proxmox – Hybrid Kubernetes with AWS Burst Workers

xuanphuc.a1gv@gmail.com (Felix Hoang) — Sun, 30 Aug 2026 00:00:00 +0000

This project automates independent development and production Talos Kubernetes environments on Proxmox using OpenTofu and GitHub Actions, with optional stateless AWS workers connected through KubeSpan. Each cluster runs its own Argo CD for GitOps application management, while Doppler and External Secrets supply credentials and persistent workloads stay on Proxmox.

Refurbished Marketplace – Distributed Go Microservices

xuanphuc.a1gv@gmail.com (Felix Hoang) — Sun, 29 Mar 2026 00:00:00 +0000

This project explores distributed Go microservices through a refurbished-goods marketplace, with a server-rendered storefront, catalog search, inventory reservations, and merchant-scoped checkout. It combines gRPC APIs, Kafka and Debezium messaging, a durable checkout saga, and Argo CD deployments on Talos Kubernetes with Istio ambient mTLS and OpenTelemetry observability.

Vault (Part 4): Dynamic Secrets for Kubernetes Pods with External Secrets Operator

xuanphuc.a1gv@gmail.com (Felix Hoang) — Mon, 24 Nov 2025 00:00:00 +0000

This is Part 4 of the Hashicorp Vault series. In Part 1, we bootstrapped Vault. In Part 2, we built our CI/CD pipeline. In Part 3, we finally killed the static kubeconfig.

Vault (Part 3): Secure Kubernetes Authentication with HashiCorp Vault OIDC

xuanphuc.a1gv@gmail.com (Felix Hoang) — Sun, 23 Nov 2025 00:00:00 +0000

This is Part 3 of the Hashicorp Vault series. In Part 1, we bootstrapped Vault. In Part 2, we built the full CI/CD pipeline. Now, we’re solving the final, massive headache: getting secure, dynamic kubectl access.

Vault (Part 2): Secure On-Prem Automation with Ephemeral Runners and Tailscale

xuanphuc.a1gv@gmail.com (Felix Hoang) — Mon, 17 Nov 2025 00:00:00 +0000

This is Part 2 of the Hashicorp Vault series. Part 1 covered bootstrapping and configuring HashiCorp Vault (the one-time terraform-admin work) and the design goals for Zero Trust secrets management.

Vault (Part 1): HashiCorp Vault for Zero Trust Secrets Management

xuanphuc.a1gv@gmail.com (Felix Hoang) — Sun, 16 Nov 2025 00:00:00 +0000

In the last two parts of the On-Premise 101 series, I showed you how to provision and bootstrap a full Kubernetes cluster. Now, I’m tearing part of it down and rebuilding the entire workflow. Why? The project’s goal was always automation, but I hit a wall. The manual steps to set up that automation - like managing secrets and SSH keys - became a huge liability.

On-Premise 101 (Part 5): From Terraform VMs to a K8s Cluster with Ansible

xuanphuc.a1gv@gmail.com (Felix Hoang) — Tue, 11 Nov 2025 00:00:00 +0000

People are often scared to learn Kubernetes because it’s difficult to set up an environment to play around with. Sure, you can use a project like minikube to learn on your own, but running it on your laptop seems limited, and you may not get to experience all the awesome features Kubernetes offers (remember, it was born for high availability). Or, if you have money, you can use a managed Kubernetes cluster from one of the cloud providers. Often, they’ve abstracted away so many things under the hood that you only need to learn kubectl and you’re good to go.

On-Premise 101 (Part 4): Automating 12 VMs creation on Proxmox with Terraform

xuanphuc.a1gv@gmail.com (Felix Hoang) — Thu, 06 Nov 2025 00:00:00 +0000

I’m the kind of person who will happily spend 10 hours building an automation script just to save 10 minutes of manual work every day. If that sounds like you, you’re in the right place.

Scalable Real-Time Credit Card Fraud Detection System

xuanphuc.a1gv@gmail.com (Felix Hoang) — Thu, 06 Nov 2025 00:00:00 +0000

This repository contains a complete end-to-end system for real-time credit card fraud detection, including data analysis notebooks, a machine learning API, and infrastructure-as-code for cloud deployment. The system is designed with a modern, observable, and scalable architecture.

Building an AI ArXiv Pipeline: Is n8n the Future of Automation? Not Quite

xuanphuc.a1gv@gmail.com (Felix Hoang) — Sun, 02 Nov 2025 00:00:00 +0000

This is my story of how I attempt to build an AI-powered pipeline for ArXiv papers. It was a journey that started with a cool idea about AI agents and ended with me wrestling Docker, n8n, and Python into submission.

On-Premise 101 (Part 3): My "Fearless" NAS Build with Virtualized TrueNAS, ZFS, and Cloud Backups

xuanphuc.a1gv@gmail.com (Felix Hoang) — Sun, 02 Nov 2025 00:00:00 +0000

In the previous parts of this series, we went from a single hand-me-down PC to a full 3-node cluster, and then we installed Proxmox as our hypervisor. We even managed to pass through a GPU to a VM for near-native performance.

SIS ArXiv VAD Papers

xuanphuc.a1gv@gmail.com (Felix Hoang) — Sun, 02 Nov 2025 00:00:00 +0000

This project is a comprehensive platform for managing, processing, and displaying ArXiv research papers. It combines a Hugo static site with a powerful backend of containerized services for AI-driven PDF processing, metadata extraction, and ArXiv interaction.

On-Premise 101 (Part 2): Proxmox, the "Glue" for My Homelab

xuanphuc.a1gv@gmail.com (Felix Hoang) — Thu, 30 Oct 2025 00:00:00 +0000

In the previous part, we covered how I started playing around with my hand-me-down computer and then escalated to building a whole 3-node cluster. It’s been a 3-year journey, and there have been so many changes to the software stack I host. But no matter what, there’s one thing I’ve used consistently from beginning to end: Proxmox (Hypervisor). So before we dive into how I deploy my applications on Docker or Kubernetes, I’ll show you the glue that connects the hardware we just built to all the software we’re going to deploy.

On-Premise 101 (Part 1): Building a 3-Node Cluster

xuanphuc.a1gv@gmail.com (Felix Hoang) — Tue, 28 Oct 2025 00:00:00 +0000

You might have heard about the recent AWS outage that caused many services to go down. To think that half of the internet relies on a single service is crazy, even if it might be the best in its field. The engineers at AWS have done many things to prevent this, such as high availability, multi-region, zones, etc., but if a critical part of it still goes down, the whole thing goes down too. Therefore, if you don’t want to give all your money and trust to a single company, you might want to explore the on-premise option, which is self-hosting.

Building a Secure Network for Homelab with OpenWRT, NextDNS, Tailscale, and a VPS

xuanphuc.a1gv@gmail.com (Felix Hoang) — Mon, 27 Oct 2025 00:00:00 +0000

A long time ago, my house only had 1 router, located on the third floor. So whenever we needed to access the internet while having dinner on the first floor, we needed to enable 4G or walk near the stairs just to receive a fraction of the WiFi signal. My father decided to give me an important task, which was to figure out how to solve this issue. I initially bought a simple WiFi extender located on the second floor, but after using it for a month, even though we could receive a strong signal from it, we couldn’t access the internet because the signal from the router on the 3rd floor to the WiFi extender on the 2nd floor was still really weak.

Accessing a Homelab from a Locked-Down PC with a Travel Router

xuanphuc.a1gv@gmail.com (Felix Hoang) — Mon, 20 Oct 2025 00:00:00 +0000

A week ago, my laptop died. When I booted it up, it said something like, fTPM is corrupted, press Y to reset or N to do nothing. Neither of them helped me boot into my machine. So I had a severe mental attack back then, because that machine was the primary one that helped me do my work for school, my lab, and my personal projects. I was lucky to have my friend lend me an old laptop of his, but it was pretty bulky, so I figured I couldn’t bring it to school. Therefore, I had to go to the school library to do my work on its public computers.

Automate provisioning Kubernetes cluster on Proxmox with Terraform + Ansible

xuanphuc.a1gv@gmail.com (Felix Hoang) — Sat, 31 May 2025 00:00:00 +0000

This project automates the provisioning and configuration of a RKE2 Kubernetes cluster on Proxmox using Terraform and Ansible.

Welcome to my blog!

xuanphuc.a1gv@gmail.com (Felix Hoang) — Fri, 04 Apr 2025 00:00:00 +0000

How I got here
#

Hey! I’m Hoang Xuan Phuc, but everyone just calls me Felix.

Running Nintendo Switch Games on iPhone at 60FPS – Free, No Jailbreak Needed

xuanphuc.a1gv@gmail.com (Felix Hoang) — Thu, 03 Apr 2025 00:00:00 +0000

If you thought the biggest gaming news was the upcoming Switch 2, think again. The emulation community has made a breakthrough: you can now run Nintendo Switch games on your iPhone or iPad at buttery-smooth 60FPS—all offline, with no jailbreak, no shady VPNs, and zero sketchiness.

Automating Manga Translations: My Journey to a Seamless Reading Experience

xuanphuc.a1gv@gmail.com (Felix Hoang) — Mon, 03 Mar 2025 00:00:00 +0000

Video demo:
#

The Struggle: Why I Needed This
#

Have you ever stumbled upon a manga so niche and obscure that it never gets an official English release? That was me—desperately trying to read intimate and underrated series that weren’t even on MangaDex, likely due to copyright issues.

Organizing My Digital Life - A Nerdy Journey Across Drives, File Management

xuanphuc.a1gv@gmail.com (Felix Hoang) — Thu, 16 Nov 2023 00:00:00 +0000

We all love the idea of being super organized, right? We make these grand plans, give it our all for a few weeks or months, and then, bam! We’re back to the good old “throw it in the downloads folder with everything else” routine. It happens to the best of us, and I’m guilty too. But hey, even though I’ve still got loads of room for improvement, I can proudly say I’ve gotten way faster at finding my files.

Organizing My Digital Life - How My Workspace Evolved from Chaos to Hackintosh

xuanphuc.a1gv@gmail.com (Felix Hoang) — Sat, 04 Nov 2023 00:00:00 +0000

Today, I would like to introduce you to the journey of optimizing my workspace environment, or in simpler terms, my desk setup. In fact, I am not someone who strictly adheres to principles in life. However, I really enjoy working in a disciplined environment and always strive to optimize it for effective studying and working. To achieve the setup I have today, I had to tear down and rebuild this workstation more than 10 times. Finally, I am truly satisfied with it. It not only satisfies me aesthetically but also makes me eager to work as soon as I step into this room (well, not quite true because nowadays most of the time I feel most productive when working from a coffee shop…).

My STEAM Hacks 2023 experience

xuanphuc.a1gv@gmail.com (Felix Hoang) — Fri, 20 Oct 2023 00:00:00 +0000

Today, I want to share my experience with you about the project I worked on during the Steam Hacks 2023 competition. Although my team did not win any major awards for this project, it was an incredible learning opportunity for me, particularly in terms of coding. Moreover, I also gained valuable insights into the collaborative process through working with my amazing new friend from Son La - Minh Chau.

TechBurst – Revolutionary AI Solution for Identifying Counterfeit Products

xuanphuc.a1gv@gmail.com (Felix Hoang) — Fri, 20 Oct 2023 00:00:00 +0000

This project aims to provide users with a reliable solution to identify counterfeit products. Originally designed as a C2C Ecommerce Platform, the project has evolved to focus solely on counterfeit detection. The system offers two methods for users to verify product authenticity: utilizing a Teachable Machine model and employing a barcode scanner.

My First Server Was Office Trash: A Self-Hosting Story

xuanphuc.a1gv@gmail.com (Felix Hoang) — Sun, 27 Aug 2023 00:00:00 +0000

It all started with a computer my mom saved from the trash heap at her office. It was a standard HP Prodesk 600 G4—nothing special, and since I already had a PC and a laptop, I had no idea what to do with it. Just installing Windows on it felt like a waste. I knew it could be something more than just another desktop collecting dust.

Reware App – Ewaste Management Solutions

xuanphuc.a1gv@gmail.com (Felix Hoang) — Wed, 09 Nov 2022 00:00:00 +0000

This is my product created while participating in Samsung Solve for Tomorrow 2022, a STEM contest organized by Samsung Electronic Company that encourages problem-solving skills and showcases the positive impact of young minds on society, with over 76,000 participants nationwide

Lesson Learned in Three-day Trip to Sapa Hope Center

xuanphuc.a1gv@gmail.com (Felix Hoang) — Thu, 30 Jun 2022 00:00:00 +0000

This is my diary about the trip to Sapa Hope Center with 10 colleagues from Summit Education - a renowned English language teaching center in Hanoi. Therefore, this trip is aimed at fostering cultural exchange and teaching English and basic skills to students from Grade 1 to Grade 2 in Sapa, Lao Cai.

The Green Express – Initial Business Concept of Fostering Ewaste Reduction

xuanphuc.a1gv@gmail.com (Felix Hoang) — Thu, 09 Jun 2022 00:00:00 +0000

This product emerged from my participation in the BASF Innovation Challenge, a national competition that empowers students to devise sustainability solutions, where we secured the 3rd Runner Up prize. While our aim was not the highest award, this competition established a robust foundation for me and our team to persist in researching and developing solutions to address the serious issue of e-waste

/home/fel1x

Talos on Proxmox – Hybrid Kubernetes with AWS Burst Workers

Refurbished Marketplace – Distributed Go Microservices

Vault (Part 4): Dynamic Secrets for Kubernetes Pods with External Secrets Operator

Vault (Part 3): Secure Kubernetes Authentication with HashiCorp Vault OIDC

Vault (Part 2): Secure On-Prem Automation with Ephemeral Runners and Tailscale

Vault (Part 1): HashiCorp Vault for Zero Trust Secrets Management

On-Premise 101 (Part 5): From Terraform VMs to a K8s Cluster with Ansible

On-Premise 101 (Part 4): Automating 12 VMs creation on Proxmox with Terraform

Scalable Real-Time Credit Card Fraud Detection System

Building an AI ArXiv Pipeline: Is n8n the Future of Automation? Not Quite

On-Premise 101 (Part 3): My "Fearless" NAS Build with Virtualized TrueNAS, ZFS, and Cloud Backups

SIS ArXiv VAD Papers

On-Premise 101 (Part 2): Proxmox, the "Glue" for My Homelab

On-Premise 101 (Part 1): Building a 3-Node Cluster

Building a Secure Network for Homelab with OpenWRT, NextDNS, Tailscale, and a VPS

Accessing a Homelab from a Locked-Down PC with a Travel Router

Automate provisioning Kubernetes cluster on Proxmox with Terraform + Ansible

Welcome to my blog!

How I got here #

Running Nintendo Switch Games on iPhone at 60FPS – Free, No Jailbreak Needed

Automating Manga Translations: My Journey to a Seamless Reading Experience

Video demo: #

The Struggle: Why I Needed This #

Organizing My Digital Life - A Nerdy Journey Across Drives, File Management

Organizing My Digital Life - How My Workspace Evolved from Chaos to Hackintosh

My STEAM Hacks 2023 experience

TechBurst – Revolutionary AI Solution for Identifying Counterfeit Products

My First Server Was Office Trash: A Self-Hosting Story

Reware App – Ewaste Management Solutions

Lesson Learned in Three-day Trip to Sapa Hope Center

The Green Express – Initial Business Concept of Fostering Ewaste Reduction

How I got here
#

Video demo:
#

The Struggle: Why I Needed This
#