Skip to content
View heridotlife's full-sized avatar

Highlights

  • Pro

Block or report heridotlife

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don't include any personal information such as legal names or email addresses. Markdown supported. This note will be visible to only you.
Report abuse

Contact GitHub support about this userโ€™s behavior. Learn more about reporting abuse.

Report abuse
heridotlife/README.md

๐Ÿ‘‹ Hello, I'm Heri Rusmanto

โšก DevOps Certified & Backend Engineer

Infrastructure System Engineer | Cloud & Backend Specialist

๐Ÿ“ Tokyo, Japan

Website LinkedIn GitHub Email


CI Test Report codecov Tests Coverage Security


๐Ÿš€ About Me

Cloud and Backend Engineer with extensive experience in administering and optimizing customer systems, ensuring reliability through preventive maintenance, and providing proactive issue resolution. Currently working as an Infrastructure System Engineer in Tokyo, Japan.

Skilled in system installation, configuration, and implementation, with a strong focus on supporting new projects. Experienced in migrating applications from virtual machines to containers, enhancing scalability and efficiency. Proficient in backend development with expertise in Golang, Node.js, Python, and Bash scripting.

Experienced in setting up monitoring tools such as Grafana, Prometheus, and Alertmanager for enhanced system observability and alerting. Adept at working collaboratively with teams to maintain seamless operations and prevent future system issues.

๐Ÿ”ง Tech Stack

Backend & Programming:

  • ๐Ÿน Golang - Primary backend development
  • ๐Ÿ Python - Automation and scripting
  • ๐ŸŸข Node.js - API development
  • ๏ฟฝ Bash Scripting - Automation and DevOps

Cloud & Infrastructure:

  • โ˜๏ธ Cloud Infrastructure - AWS, GCP migration expertise
  • โŽˆ Kubernetes - Container orchestration and management
  • ๏ฟฝ Docker - Containerization and deployment
  • ๐Ÿ—๏ธ Terragrunt - Infrastructure as Code

DevOps & Monitoring:

  • ๐Ÿ“Š Grafana - System monitoring and visualization
  • ๐Ÿ” Prometheus - Metrics collection and alerting
  • ๏ฟฝ Alertmanager - Alert routing and management
  • ๐Ÿ”„ GitLab CI/CD - Continuous integration and deployment

Frontend & Web:

  • โš›๏ธ React / Next.js
  • ๐ŸŒŸ Astro
  • ๏ฟฝ TypeScript
  • ๐ŸŽจ Tailwind CSS

Databases & Storage:

  • ๐Ÿ—„๏ธ Elasticsearch - Search and analytics
  • ๐Ÿ˜ PostgreSQL
  • ๐Ÿ“ SQLite, D1

๐Ÿ’ผ Professional Experience

๐Ÿข Infrastructure System Engineer

April 2025 - Present | Tokyo, Japan

  • Lead design and development of system architecture for new services
  • Develop software solutions and maintain high-quality, secure code
  • Create and maintain technical documentation
  • Collaborate with teams to deliver features with quality and speed

โ˜๏ธ Cloud Engineer

September 2024 - March 2025 | Semarang, Indonesia

  • Administered customer systems with regular checks and maintenance
  • Led migration of applications from VMs to containers
  • Set up monitoring tools: Grafana, Prometheus, and Alertmanager
  • Provided technical support for new project implementations

๐Ÿ—๏ธ Backend Infrastructure (SRE)

July 2022 - July 2024 | Indonesia

  • Led AWS to GCP migration using Terragrunt for scalable infrastructure
  • Implemented robust Kubernetes monitoring tools
  • Optimized deployment workflows reducing complexity and improving reliability
  • Conducted cost monitoring and optimization for K8s clusters
  • Automated operational tasks using Bash and Python scripts

๐Ÿš€ DevOps Engineer

July 2021 - April 2022 | Surakarta, Indonesia

  • Set up and managed Kubernetes clusters for dev/prod environments
  • Configured GitLab CI/CD pipelines improving delivery speed
  • Implemented cost-efficient cloud resource strategies

๐ŸŒŸ Featured Project: Personal Website & URL Shortener

This repository contains my personal website and production-ready URL shortener service built with modern technologies and deployed on Cloudflare Workers.

โœจ Key Features

  • ๐Ÿ”— Custom URL Shortener - Create branded short links with analytics and metadata
  • ๐Ÿ“Š Analytics Dashboard - Track clicks and manage URLs with comprehensive stats
  • ๐Ÿท๏ธ Category System - Organize links with public category pages
  • ๐Ÿ“ Blog System - Full-featured blog with categories and tags
  • ๐Ÿ”’ Secure Admin Panel - JWT-based authentication with HTTP-only cookies
  • ๐ŸŒ™ Dark Mode - Modern UI with theme switching
  • โšก Edge Performance - Deployed on Cloudflare Workers for sub-50ms latency
  • ๐Ÿ›ก๏ธ Security Hardened - SSRF protection, rate limiting, CSP, and comprehensive security measures
  • ๐Ÿ–ผ๏ธ Image Optimization - Cloudflare Image Resizing with automatic WebP/AVIF conversion
  • ๐Ÿงช 90.95% Test Coverage - Comprehensive testing with Vitest

๐Ÿ› ๏ธ Built With

Frontend & Framework:

  • โšก Astro 5.15.1 - Modern SSR web framework
  • ๐Ÿ“ TypeScript 5.9.3 - Type-safe development (strict mode)
  • โš›๏ธ React 19.2.0 - Interactive admin components
  • ๐ŸŽจ Tailwind CSS 3.4.18 - Utility-first styling

Backend & Infrastructure:

  • ๐Ÿ—„๏ธ Cloudflare D1 - Serverless SQLite database
  • ๐Ÿ’พ Cloudflare KV - Multi-tier caching with 5 specialized instances
  • โ˜๏ธ Cloudflare Workers - Global edge deployment
  • ๐Ÿ” JWT Authentication - Secure session management

Security & Quality:

  • ๐Ÿ›ก๏ธ SSRF Protection - Blocks private IPs and metadata endpoints
  • ๐Ÿšฆ Rate Limiting - Sliding window algorithm
  • ๐Ÿ”’ Content Security Policy - Hardened CSP without unsafe-eval
  • ๐Ÿงช Vitest 2.1.8 - 95 tests passing, 90.95% coverage
  • โœ… ESLint & Prettier - Zero errors, clean codebase

๐Ÿ”— Live Demo

Visit heri.life to see it in action!

๐Ÿ—๏ธ Architecture Highlights

Layered Architecture (3-Tier):

  • Presentation Layer: Astro SSR pages + React components + RESTful API routes
  • Business Logic Layer: Repository pattern with decorator-based caching
  • Data Layer: D1 database + multi-tier KV cache (5 specialized instances)

Performance:

  • 95% cache hit rate expected

  • ~50ms P50 latency on cache hits
  • Edge-optimized with Cloudflare Workers
  • Automatic image optimization at edge

Security Features:

  • SSRF protection in URL metadata fetcher
  • SQL injection prevention with prepared statements
  • Host header validation against trusted domains
  • Rate limiting on all critical endpoints
  • Honeypot detection for suspicious activity
  • No CORS (secure default for SSR app)

๐Ÿ“š Documentation


๐Ÿ† Certifications & Languages

๐Ÿ“œ Certifications

  • ๐ŸŽฏ DevOps Foundation Certification
  • โšก LFEL1014: Scaling Cloud Native Applications with KEDA
  • ๐ŸŒ EF SET English Certificate 74/100 (C2 Proficient)

๐ŸŒ Languages

  • ๐Ÿ‡บ๐Ÿ‡ธ English - Professional Working Proficiency
  • ๐Ÿ‡ฎ๐Ÿ‡ฉ Indonesian - Native/Bilingual
  • ๐Ÿ‡ฏ๐Ÿ‡ต Japanese - Elementary

๐Ÿ’ป Current Focus

Building modern web applications | DevOps & Backend Engineering

๐Ÿš€ Always learning โ€ข ๐Ÿ”— Creating useful tools โ€ข ๐ŸŒŸ Sharing knowledge ๐Ÿ—๏ธ System Architecture โ€ข โ˜๏ธ Cloud Infrastructure โ€ข โŽˆ Kubernetes โ€ข ๐Ÿ”ง Automation


๐Ÿ“ฌ Get In Touch

I'm always interested in new opportunities and collaborations. Feel free to reach out!


"Code is poetry written in logic" โœจ

Thanks for visiting my profile! Feel free to explore my repositories and don't hesitate to get in touch.

Pinned Loading

  1. UGM-Login UGM-Login Public

    Automated login for UGM internet using python and selenium.

    Python

  2. vagrant vagrant Public archive

    My personal customize vagrant provision

    Ruby

  3. mail-scheduler mail-scheduler Public

    Asynchronous Mail Scheduler using Flask-Mail and Flask-RQ2

    Python 2 3