Anton Babaskin is a DevOps Engineer, Linux Engineer and System Administrator focused on production infrastructure, automation, observability, security and reliable operations.
I design, operate and automate production infrastructure — with a focus on reliable Linux systems, mail platforms and practical operator tooling.
Featured work · MailOps & security · Automation & platforms · Operating principles · Contact
I work with production Linux infrastructure end to end: architecture, day‑2 operations, incident diagnostics, mail delivery, backups, networks and automation. The repositories below are built for real operators: explicit behaviour, safe defaults and evidence before remediation.
Tip
Start here: MailOps & security for mail-server diagnostics, or Automation & platforms for fleet and infrastructure tooling.
|
Telegram MailOps control plane with whitelisted SSH commands, confirmed actions and SQLite audit logging. 
|
🛰️ FleetOpsAgentless Linux diagnostics: deterministic checks, SSH collection, JSON contracts and optional Telegram access. 
|
|
Read-only-by-default security audit for Linux mail servers: exposure, authentication, DNS, TLS, firewalls and Fail2Ban. 
|
Incident-response tool for attributing abnormal outbound SMTP connections to processes, Postfix, users, jobs or containers. 
|
| Project | Purpose | Stack |
|---|---|---|
| 📡 miab-radar | Mail-in-a-Box health, mail flow, deliverability, DNS, TLS and security diagnostics. | Bash · Postfix · Dovecot |
| 🔐 mail-sec-audit | Structured, read-only security posture audit for Linux mail servers. | Bash · Linux · Mail services |
| 📤 smtp-egress-audit | Evidence-first attribution of suspicious outbound SMTP activity. | Bash · ss · Postfix |
| 🛡️ miab-whitelists | Postfix/Postgrey whitelists, SPF range refresh and fleet sync for MIAB. | Bash · Postfix · systemd |
| 💾 miab-backups | Restic + rclone backup automation with verification, retention and Telegram reports. | Bash · Restic · rclone |
| 📊 mail_analyzer.sh | Postfix log analytics for domains, relays, routes and delivery failures. | Bash · awk |
| 🔔 Postfix-Telegram-Notifier | Real-time alerts for bounced, deferred and rejected mail. | Bash · systemd · Telegram |
| ⏱️ postgrey-telegram-notify | Stateful Postgrey and delivery-status notifications. | Bash · systemd · Telegram |
| Project | Purpose | Stack |
|---|---|---|
| 🛰️ FleetOps | Agentless fleet diagnostics and a terminal-first operator workflow. | Python · asyncssh · Docker |
| 📮 miab-sentry | Controlled MailOps actions from Telegram, with an audit trail. | Python · SSH · SQLite |
| 🔒 Docker-WireGuard-Monitor | Health monitoring for containerized WireGuard. | Bash · Docker · WireGuard |
| 🌐 WireGuard-Monitor | Monitoring and installation tooling for native WireGuard hosts. | Bash · WireGuard · systemd |
| 🗄️ proxmox-hetzner | Rescue-mode Proxmox VE automation for Hetzner dedicated servers. | Shell · Proxmox VE · ZFS |
| ⚙️ SysTuneX | Transparent, reversible Windows performance and latency tuning. | .NET · PowerShell · WinAPI |
| 🚀 Xray-easy-installer | Xray VLESS/REALITY installer and user management. | Bash · Xray · systemd |
| 📚 sysadmins-guides | Practical notes on Linux operations, mail infrastructure and troubleshooting. | Markdown · GitHub Pages |
Observe → collect evidence → understand the blast radius → make a controlled change → verify
- 🛡️ Safe by default — diagnostics should not quietly rewrite a production server.
- 🔎 Evidence before assumptions — logs, sockets, queues and service state come first.
- 🧩 Simple, inspectable tooling — Bash and Python where they make operations clearer.
- ♻️ Controlled, reversible changes — explicit actions, backups and auditable workflows.
The complete catalog and project boundaries live in PROJECTS.md. It is the source of truth for avoiding overlapping tools and duplicate repository ideas.
🌐 Website ·
💼 LinkedIn ·