BEHIND EVERY SERVICE, A SYSTEM.
Morgan Mathis. Cybersecurity Master’s at CNAM. Systems & network apprentice at STT / IP INFOPRO. From hardware to real use, I build to understand.
Cybersecurity Master’s · CCNA · StormshieldMY EXPERIENCE ↗Initializing measurements…
Homelab probe → gateway
REAL HARDWARE PHOTOGRAPHA real rack. Where every service begins.
Master’s in IT Security, Cybersecurity and Cyber Threats at CNAM. Systems and network apprentice at STT / IP INFOPRO. CCNA and Stormshield CSNA certified. The lab extends field work: build, diagnose and make decisions verifiable.
Eight layers explain the architecture, following the six 3D perspectives. Each chapter connects a decision, its purpose and its evidence.
A real rack. Functions you can trace from hardware to service. I build this home lab using enterprise infrastructure practices: segmentation, monitoring, backups and procedures.
The model simplifies shapes. Two photographs guide placement; the gateway sits in the upper rack, behind its mount.
The physical server runs Proxmox VE. Virtualization isolates workloads; ZFS provides the storage foundation. Ten virtual machines fulfil distinct functions.
INVENTORY — OCTOBER 2026
Logical isolation does not remove the shared physical dependency. This lab is not a high-availability cluster.
The UCG Fiber gateway, inside the rack, controls ingress. Uses are segmented. A web page and a Minecraft connection take different paths.
↳ You are here: this portfolio.
ILLUSTRATIVE ANIMATION · NO ACTUAL TRACING
Public conceptual diagram: no addresses, VLAN numbers or internal rules.
Resolve a name, protect a secret, operate an application. Services are organized by function, with explicit dependencies.
DNS-01 and DNS-02 combine AdGuard and Unbound: filtering, local resolution and logical redundancy. Documentation uses Git, inventories, procedures and runbooks.
Metrics describe a state; logs explain an event. Prometheus and Loki feed Grafana to guide diagnosis.
61/61 monitoring targets UP — documentary snapshot, October 12, 2026. The screenshot is historical and cropped; no administration console is exposed here.
PBS backups were successfully verified. On October 12, 2026, VM204 was restored and booted in isolation. For Minecraft, partial extraction has been validated; a complete isolated boot remains planned.
Documented process; no action on the lab.
VM204: ISOLATED RESTORE VALIDATED — 12 OCT. 2026Verified backups do not establish a fully validated recovery plan. Recovery procedures are documented and limitations stay visible.
Reduce exposure, segment and apply least privilege. Defence combines filtering, a DMZ, VPN access, MFA, updates, monitoring and backups.
Principles: default deny, limited permissions and separate administration access.
The reverse proxy handles web services. Game connections reach Minecraft in the DMZ through the gateway and NAT.
The Eaton UPS protects power and provides short-term continuity during an outage. This simulation explains that role.
Grid power · illustration
No guaranteed runtime or unverified automatic shutdown procedure is claimed.
Progression within the same company environment, working on customer systems while studying cybersecurity in greater depth.
SEP. 2026 → PRESENT
STT INFOPRO / IP INFOPRO
Groupe Factoria · Le Muy · Master’s apprenticeship
Systems and network administration, infrastructure security, operational maintenance, technical projects, troubleshooting, support and on-site work.
Infrastructure · Networking · Security · OperationsSEP. 2025 → AUG. 2026
IP INFOPRO
Groupe Factoria · Professional degree apprenticeship
L1/L2 support, workstation deployment, Windows and servers, Microsoft 365 and Entra ID. Virtualization, switching, VLANs, Wi-Fi, VPNs, Stormshield, backups and documentation, in the workshop and on site.
Microsoft 365 · Entra ID · Windows · VLAN · StormshieldJAN. → FEB. 2025
Circet
Solliès-Pont · Internship
Network diagnosis, troubleshooting and work on Fortinet security and switching equipment.
Fortinet · Switching · DiagnosisMAY → JUN. 2024
Commune de Solliès-Pont
Local government
Windows Server, Active Directory, GPOs, DNS, monitoring and backups.
Windows Server · Active Directory · DNSAPR. → MAY 2022
Mairie du Cannet-des-Maures
Local government
Workstation deployment, hardware maintenance and user support.
Deployment · Maintenance · Support
The lab lets me follow a system over time: install, observe, fix, back up and document. My apprenticeship connects this practice to real users’ constraints.
Systems Linux · Proxmox VE · ZFS · Docker · Portainer
Networks UniFi · VLAN · DNS · AdGuard · Unbound · VPN
Operations Grafana · Prometheus · Loki · PBS · Git
Publishing Cloudflare · Nginx Proxy Manager / NPMplus · DMZ
Cisco Certified Network Associate
Certified Stormshield Network Administrator
Additional training: Cisco Networking Academy CyberOps and Ethical Hacker; SecNumacadémie MOOC.
2026 → 2028
CNAM
Conservatoire National des Arts et Métiers · Apprenticeship · In progress
2025 → 2026
Université de Toulon
Licence Professionnelle MRIT · Mention Bien (with honours)
2023 → 2025
Lycée Bonaparte · Toulon
Infrastructure, Systems and Networks · Mention Bien (with honours)
2020 → 2023
French Baccalauréat
Mention Bien (with honours)
A question about a project, or a systems or networking requirement? I can walk through the decisions, tests and limitations.
