Runtime CVE Scanning with Trivy in GitLab CI: Auto-block Images
Integrate Trivy into GitLab CI to scan container images at runtime and automatically block vulnerable builds before deployment.
Hello, I'm
Furkan İkkan
|
I manage complex IT infrastructures, ensuring robust system security and high availability. I deploy and monitor enterprise solutions ranging from server architectures to comprehensive backup systems.
99.9% Uptime
45+ Skills
0
Infrastructure Projects
0
Technical Skills
0
Years Experience
Summary
About Me
As Furkan İkkan, I have extensive experience in network and system administration. From government institutions to private sectors, data centers to e-commerce platforms, I have provided robust infrastructure management, server configuration, and monitoring solutions.
My core focus is ensuring continuous system availability, preparing for disaster recovery scenarios, and preventing security breaches. I also place great importance on learning new tools and tracking modern methodologies in the ever-evolving world of IT operations.
Technical Skills
Areas of Expertise
OS & Scripting
AlmaLinux
CentOS
Ubuntu
Windows Server
Bash Scripts
Windows Scripts
Bots
Scheduled Task
Databases
PostgreSQL
MySQL
MSSQL
MongoDB
MariaDB
RabbitMQ
Redis
Web & Hosting
Nginx
Apache
IIS
Tomcat
Plesk / cPanel / WHM
Web Hosting
Let's Encrypt / Certbot
Reverse Proxy
PHP-FPM
PM2 / Node Process Managers
LiteSpeed
DNS Zone Management
WAF / ModSecurity
Network & Security
DNS
VPN
SSL
Cloudflare / CDN
Kerio Control
pfSense
Switch Mgmt
Office Cabling
FTP / SFTP / NFS
Virtualization
Docker
vCenter
ESXi
Proxmox
VMware Workstation
Hyper-V
VMs Mgmt
Snapshot / Clone Management
Monitoring & Backup
Uptime Kuma
Zabbix
Grafana
Prometheus
Veeam Backup
Disaster Recovery
SQLBackupAndFTP
Backup Scripts
Schedule Backup Tasks
rsync / rclone / Borg / restic
SNMP Monitoring
Corporate Management
Active Directory
Group Policy
HAProxy / Loadbalance
Rack Management
Deployment & Continuity
Team Leadership
Enterprise Hubstaff
Enterprise Bitdefender
Enterprise Email Services
Call Center IP Phone Setup & Management
My Own Work
Products & Posts
Products I build and technical blog posts I publish. Open a card for details and links.
Using systemd WatchdogSec to Auto-Recover Hung Services
Learn how WatchdogSec detects unresponsive systemd services and triggers automatic restarts to improve system reliability.
Detecting Anomalous sudo Session Duration with LLM and iptables Automation
Use LLMs to analyze syslog for unusual sudo session lengths and automatically block IPs via iptables—practical steps for Linux admins.
Borg zstd Level 19 Compression: Storage Savings and CPU Impact Test
I tested Borg with zstd compression level 19 to cut backup storage by ~40%. Here are the real CPU, time, and size results from my production environment.
Rate-Limit DHCP Requests with ebtables on Linux Bridge
Limit ARP and IPv4 packet rates on a Linux bridge using ebtables to reduce DHCP starvation attack impact.
Automating SBOM and License Compliance in GitLab CI with Trivy
Learn how to use Trivy in GitLab CI to generate SBOMs and scan for HIGH/CRITICAL CVEs and license issues automatically.
Prevent journald Disk Spikes with RateLimitInterval and Burst Settings
Learn how to tune systemd-journald.conf to stop log floods from filling your disk and monitor journal usage effectively.
Fail2ban + LLM: Auto-block SSH brute force using log analysis
Use an LLM to analyze SSH auth logs and dynamically adjust Fail2ban bans for smarter brute force defense.
Loading products...
Experience
Projects Infrastructure
I managed the server configurations, network security, continuous monitoring, and backup architectures for the following projects.
E-Commerce / Marketplace
elemegi.com
Owned the full infrastructure for this handmade marketplace: load-balanced API layers, CDN delivery, database and server backup systems, server/log monitoring, and uptime operations.
Public / Portal
yildirim.bel.tr
Managed high-availability server clusters, firewall rules, uptime checks, SSL setup and tracking, and secure database and VM & DB backups for the municipal portal.
Public / Sports
yildirimbelediyespor.org
Maintained the hosting servers, uptime monitoring, load distribution, and secure backup routines for the sports club system.
Public / Portal
bbb.gov.tr
Delivered end-to-end system administration, secure network configurations, and disaster recovery planning for this public portal.
Public / Education
yildirimkitapligi.com
Managed hosting, uptime monitoring, and secure backup routines for the municipal library platform.
Data Center
pendc.com
During my internship and time working here, I learned and supported data center operations, colocation networks, virtualization nodes (VMs), and full-scale disaster recovery (DR) processes.
HealthTech / SaaS
medicalcepte.com
Maintained compliant (KVKK) cloud servers, strict network access controls, and highly available database architectures for clinics.
SaaS / PropTech
apartasist.com
Administered the cloud infrastructure, database performance tuning, monitoring tools, and daily backup strategies for this management SaaS.
E-Commerce
malikki.com
Configured server nodes, network security, continuous uptime monitoring, and automated database backups for this marketplace platform.
FinTech / SaaS
mahsup.net
Configured server nodes, network security, and continuous monitoring for this reconciliation platform.
Public / Education
mollayegan.com
Provided complete system administration, secure hosting environments, and robust network configurations for this educational portal.
Mobile / Game
Duelio (Mobile App)
I provided services and support including VM backups, monitoring, system and uptime tracking, technical support, and corporate email.
Technology & Vision
My Interests
AI & AI Agent
I actively follow the latest developments in artificial intelligence, autonomous agents, and the use of AI in IT operations.
Server & Security
I continuously improve myself on Zero Trust architectures, server hardening practices, and proactive network security.
Emerging Technologies
I explore innovations transforming infrastructure management, such as modern DevOps practices and Infrastructure as Code (IaC).
Contact
Let's Connect
Feel free to reach out to me for new projects, collaborations, or just to chat about technology.