Initial portfolio site: Astro + Tailwind MVP

Outcome-led hero, about, grouped skills, experience summary, featured
projects + /projects index, static contact, SEO/OG, dark/light theme.
Dockerfile + nginx config + build script for homelab deploy.

src/data/skills.ts

@@ -0,0 +1,86 @@
+// Grouped capability matrix — NO percentage bars / ratings / logo walls.
+// Driven entirely by this file; the Skills section renders whatever is here.
+
+export type SkillGroup = {
+  title: string;
+  // Short framing line for the group.
+  blurb: string;
+  items: string[];
+};
+
+export const skills: SkillGroup[] = [
+  {
+    title: "Platform Engineering",
+    blurb: "Kubernetes platforms designed to be reasoned about and recovered.",
+    items: [
+      "Kubernetes",
+      "Talos Linux",
+      "OpenShift",
+      "ArgoCD / GitOps",
+      "Helm & Kustomize",
+      "Cilium / flannel",
+      "Gateway API & Ingress",
+    ],
+  },
+  {
+    title: "Infrastructure Automation",
+    blurb: "Removing the manual step entirely, not documenting it.",
+    items: [
+      "Ansible",
+      "AWX",
+      "GitOps pipelines",
+      "Renovate",
+      "Image pre-pull & templating",
+      "Reproducible cluster bring-up",
+    ],
+  },
+  {
+    title: "Linux & Systems",
+    blurb: "From the hypervisor up to the workload.",
+    items: [
+      "Debian / RHEL",
+      "systemd",
+      "Proxmox / KVM",
+      "PCIe / GPU passthrough",
+      "LVM & block storage",
+      "restic / SMB backup",
+      "Bash & PowerShell",
+    ],
+  },
+  {
+    title: "Networking & Security",
+    blurb: "Default-deny, least-privilege, and a small attack surface.",
+    items: [
+      "Split-horizon DNS",
+      "Cloudflare Tunnel",
+      "Reverse proxy (Traefik / nginx)",
+      "NetworkPolicies",
+      "OIDC / SSO (Authentik)",
+      "Secrets (Vault / Infisical / ESO)",
+      "TLS & cert-manager",
+    ],
+  },
+  {
+    title: "Observability",
+    blurb: "Knowing the system is healthy, not just the pods.",
+    items: [
+      "Prometheus",
+      "Grafana",
+      "Alertmanager",
+      "node-exporter / kube-state-metrics",
+      "ServiceMonitors",
+    ],
+  },
+  {
+    title: "AI & GPU Infrastructure",
+    blurb: "Serving vision and language models on real hardware.",
+    items: [
+      "NVIDIA GPU Operator",
+      "Multus / SR-IOV",
+      "YOLO / computer-vision inference",
+      "Local LLM serving (llama.cpp)",
+      "Agent frameworks & tooling",
+      "Hardware-isolated workloads (Kata)",
+    ],
+  },
+];