TTE System Integration

Contributed to the deployment and integration of a government digital signature and document workflow system used to support secure document processing and publication. My work covered backend deployment, reverse proxy configuration, storage integration, production troubleshooting, and infrastructure support for reliable service delivery.

This project involved close coordination between application and infrastructure layers, including secure file handling, service exposure, and operational maintenance in production environments.

Multi-Data Center Storage, Replication & Secure Connectivity

Designed and implemented a secure multi-data-center architecture for TTE services across four locations: Cyber 1 Jakarta, Diskominfo Bekasi Cikarang, NDC Batam, and Diskominfo Jabar Bandung. Inter-site connectivity was established using WireGuard in a hub-and-spoke topology, with Jakarta acting as the primary endpoint for secure communication between data centers.

At the storage layer, I configured MinIO replication between the primary site in Jakarta and three remote sites. Replication was implemented in both directions to improve storage continuity, reduce dependency on a single location, and support more resilient document services for TTE workloads.

At the database layer, I implemented MariaDB replication with one master and three slave nodes distributed across all data centers to improve availability, data redundancy, and operational readiness for production services.

This architecture was introduced to solve earlier issues with single-site storage, recurring data loss, and failed backup processes. The result was a more reliable and disaster-recovery-ready environment with cross-site redundancy, better backup readiness, and stronger service continuity.

On-Premise Kubernetes Production Platform

Designed, deployed, and maintained an on-premise Kubernetes cluster for production workloads under the Himalaya Karya server environment. The platform runs on one control-plane node and three worker nodes using Ubuntu 24.04 and containerd.

Implemented a multi-namespace architecture supporting various workloads including chatbot, HRIS, monitoring stack, Redis, and internal application services. Persistent storage was provisioned using NFS-based PV/PVC to support shared storage requirements across services.

I was responsible for the full lifecycle of the platform, including cluster setup, workload deployment, storage provisioning, Grafana-based monitoring, ongoing maintenance, and performance improvement for production services.

This work improved operational consistency, service reliability, and performance for containerized workloads running in a long-term production environment.

BOSS Public Service Platform

A public service platform supporting online licensing and digital service workflows. The earlier version was developed using PHP and MySQL, and later modernized into a more scalable architecture using Django as backend, Vue.js as frontend, and GraphQL as the API layer.

The modernization focused on improving maintainability, flexibility, and system scalability, while enabling more efficient data communication between frontend and backend through GraphQL. This approach simplified API management and supported future system expansion.

This project reflects experience in transforming legacy systems into modern architectures that are easier to maintain, extend, and operate in production environments.

Secure Reverse Proxy & HTTPS Publishing

Configured reverse proxy publishing, HTTPS access, and secure request routing for internal and public-facing services. This work supported safer exposure of production applications while improving deployment structure and routing control.

The implementation covered service publishing, certificate-based HTTPS access, and infrastructure adjustments required to support secure production environments.

Gaido Express & Logistics

A logistics and courier operations system developed to support transaction processing, operational workflows, and internal business administration. Implemented with Flask and MariaDB as part of a practical business operations platform.

The project focused on supporting day-to-day operational needs through a structured internal system for business process handling and administration.