feat(moritzgrafde): rewrite personal website with Vue 3, Vite, and Tailwind CSS

- Replace legacy Hugo static site generator and hugo-goa theme with a modern Vue 3 + Vite + TypeScript application
- Implement Clean Enterprise design system using Tailwind CSS with light/dark mode support
- Position website around Cloud Platform & Infrastructure Leadership (GCP & AWS central platforms, Kubernetes at scale, enterprise spin-off governance, and systems depth) without chronological resumes
- Add 6 comprehensive capability dossiers and verified credential badges (CKA, PSM II, M.Sc.)
- Implement interactive skill matrix with real-time text search and category filtering
- Add engineering philosophy section, contact channels with one-click email copying, and Impressum modal
- Configure multi-stage Dockerfile (Node builder to Nginx runtime) with custom gzip, caching, and security headers
- Update build scripts (Makefile, build.sh), .gitignore, and AGENTS.md documentation across the monorepo
This commit is contained in:
Moritz Graf
2026-09-26 20:37:53 +02:00
parent afb80bbba8
commit d2dac3470f
103 changed files with 3872 additions and 1924 deletions
@@ -0,0 +1,290 @@
import type {
Credential,
StatItem,
CapabilityDossier,
SkillItem,
Principle,
SocialLink
} from '@/types'
export const personalInfo = {
name: 'Moritz Graf',
title: 'Cloud Platform & Infrastructure Leader',
tagline: 'Architecting resilient multi-cloud foundations, scaling Kubernetes platforms, and steering enterprise carve-out migrations.',
bioSummary: 'Central Platform Engineer and Engineering Leader with over a decade of production operations experience. I specialize in building autonomous developer platforms on Google Cloud and AWS, operating Kubernetes at scale, and orchestrating complex enterprise cloud spin-offs. Grounded in low-level systems engineering, network routing (BGP, SIP), and maker craft.',
location: 'Regensburg, Germany',
email: 'contact-moritz@moritzgraf.de',
headshotUrl: '/headshot.jpg',
availabilityBadge: 'Active in Central Platform Engineering',
credentialsSummary: 'CKA · PSM II · M.Sc. Computer Science'
}
export const credentials: Credential[] = [
{
id: 'cka',
title: 'Certified Kubernetes Administrator (CKA)',
issuer: 'Cloud Native Computing Foundation (CNCF)',
badgeText: 'CKA Certified',
icon: 'ShieldCheck',
highlight: true
},
{
id: 'psm2',
title: 'Professional Scrum Master II (PSM II)',
issuer: 'Scrum.org',
badgeText: 'PSM II Advanced',
icon: 'Award',
highlight: true
},
{
id: 'msc',
title: 'M.Sc. Computer Science (Technical Systems)',
issuer: 'OTH Regensburg',
badgeText: 'M.Sc. Degree',
icon: 'GraduationCap'
},
{
id: 'psm1',
title: 'Professional Scrum Master I (PSM I)',
issuer: 'Scrum.org',
badgeText: 'PSM I',
icon: 'Award'
},
{
id: 'itil',
title: 'ITIL Foundation (v3)',
issuer: 'AXELOS',
badgeText: 'ITIL Certified',
icon: 'CheckCircle2'
},
{
id: 'lang',
title: 'UNIcert III Technical English (C1)',
issuer: 'Language Center Regensburg',
badgeText: 'C1 Fluent',
icon: 'Globe'
}
]
export const impactStats: StatItem[] = [
{
value: 'Multi-Cloud',
label: 'Hyperscaler Mastery',
description: 'Central Platform on GCP & enterprise analytics platforms on AWS'
},
{
value: 'Spin-Off',
label: 'Carve-Out Leadership',
description: 'Technical cloud separation & migration from Continental to AUMOVIO'
},
{
value: 'K8s at Scale',
label: 'CKA-Certified GitOps',
description: 'Bare-metal & cloud clusters managed via Kubespray, Helm, & Istio'
},
{
value: '12+ Years',
label: 'Infrastructure Depth',
description: 'Continuous production operations, high-availability & on-call leadership'
}
]
export const capabilityDossiers: CapabilityDossier[] = [
{
id: 'cloud-platforms',
title: 'Enterprise Multi-Cloud Platforms',
category: 'Cloud Architecture & Governance',
tagline: 'Resilient, secure, and self-service landing zones across Google Cloud and AWS.',
overview: 'Designing and maintaining centralized enterprise cloud foundations that balance developer velocity with enterprise-grade guardrails. Leading central platform strategy for Google Cloud (GCP) and enterprise analytics platforms on AWS.',
icon: 'Cloud',
keyAreas: [
'GCP Organization & Landing Zones architecture with fine-grained IAM & VPC Service Controls',
'AWS multi-account governance (Control Tower, SCPs, Transit Gateway, Direct Connect)',
'Automated tenant onboarding with self-service project/account vending machines',
'Cost governance, FinOps visibility, resource tagging, and budget alerting automation'
],
technologies: ['Google Cloud (GCP)', 'AWS', 'IAM', 'VPC Service Controls', 'Transit Gateway', 'Organizations', 'FinOps'],
impactNote: 'Powers centralized platform capabilities across hundreds of projects and thousands of internal users.'
},
{
id: 'kubernetes-cncf',
title: 'Kubernetes & Cloud-Native Ecosystem',
category: 'Container Orchestration & GitOps',
tagline: 'CKA-certified cluster architecture, service meshes, and GitOps delivery pipelines.',
overview: 'Deep hands-on expertise operating production Kubernetes clusters on bare-metal and in cloud environments. Specializing in immutable cluster provisioning, zero-trust service mesh networking, and declarative GitOps pipelines.',
icon: 'Server',
keyAreas: [
'Production cluster lifecycle provisioning via Kubespray, Ansible, and managed cloud engines',
'Service mesh routing, mutual TLS (mTLS), and traffic shaping with Istio and Traefik Ingress',
'Declarative GitOps deployment workflows using ArgoCD, Flux, and Kustomize overlays',
'Full-stack cluster observability with Prometheus, Thanos, Loki, and custom Grafana dashboards'
],
technologies: ['Kubernetes (CKA)', 'Kubespray', 'Istio', 'Traefik', 'Helm', 'Kustomize', 'ArgoCD', 'Prometheus', 'Grafana'],
impactNote: 'Maintains zero-downtime microservice environments with automated certificate lifecycle management.'
},
{
id: 'data-platforms',
title: 'Enterprise Data Lake & Analytics Enablement',
category: 'Data Engineering & Service Ownership',
tagline: 'Product & Service Ownership of global enterprise data lake platforms.',
overview: 'Led the Continental.datalake platform as Global Team Lead, Service Owner, and Product Owner. Bridging business data requirements with rock-solid infrastructure to deliver self-service analytics for data scientists and engineers.',
icon: 'Database',
keyAreas: [
'Global Service & Product Ownership of an enterprise data lake serving hundreds of data workloads',
'Scalable analytical storage pipelines leveraging Amazon S3, Redshift, Glue, and Matillion ETL',
'Data governance, cataloging, compliance, and granular data access control policies',
'High-throughput telemetry and metrics processing with real-time alerting'
],
technologies: ['Amazon Redshift', 'S3 Data Lake', 'AWS Glue', 'Matillion', 'Kafka', 'Python Data Tooling', 'Athena'],
impactNote: 'Delivered mission-critical data lake services supporting global enterprise analytics and machine learning initiatives.'
},
{
id: 'iac-automation',
title: 'Declarative Infrastructure as Code (IaC)',
category: 'Automation & Continuous Delivery',
tagline: '100% Everything as Code: repeatable, testable, and drift-resistant infrastructure.',
overview: 'Pioneer of GitOps and automated infrastructure workflows. Managing multi-region infrastructure exclusively through declarative manifests, pull-request driven automation, and automated validation tests.',
icon: 'Code2',
keyAreas: [
'Modular Terraform and Terragrunt architectures with DRY module reuse and remote state locking',
'Automated PR workflows with Atlantis, Renovatebot, and pre-commit security validation',
'Configuration management and server templating using Ansible and Packer',
'Robust CI/CD pipelines in Jenkins and GitHub Actions with automated linting and security scanning'
],
technologies: ['Terraform', 'Terragrunt', 'Atlantis', 'Ansible', 'GitHub Actions', 'Jenkins', 'Packer', 'Renovatebot'],
impactNote: 'Eliminated manual infrastructure changes, enforcing peer review and automated compliance across all environments.'
},
{
id: 'leadership-governance',
title: 'Engineering Leadership & Enterprise Spin-Offs',
category: 'People, Culture & Organizational Transformation',
tagline: 'Steering high-stakes cloud carve-outs and cultivating high-trust engineering teams.',
overview: 'Experienced team lead and PSM II Scrum Master with a proven track record of guiding engineering teams through structural corporate carve-outs. Steered the cloud infrastructure separation during the spin-off from Continental to AUMOVIO.',
icon: 'Users',
keyAreas: [
'Technical leadership of the cloud platform carve-out and migration from Continental to AUMOVIO',
'Serving as Global Team Lead and Agile Coach (PSM II) fostering psychological safety and autonomy',
'Founding and hosting technical exchange forums (DevOps Office Hours, Architecture Syncs)',
'Mentoring junior and mid-level platform engineers in infrastructure best practices'
],
technologies: ['Scrum (PSM II)', 'Carve-Out Strategy', 'Service Management', 'Team Mentorship', 'DevOps Advocacy', 'Stakeholder Management'],
impactNote: 'Executed seamless platform transition during enterprise spin-off without operational downtime.'
},
{
id: 'systems-networking-iot',
title: 'Systems Depth, Telecom Roots & Maker Craft',
category: 'Low-Level Engineering & Physical Hardware',
tagline: 'From BGP and VoIP SIP protocols to physical IoT sensors and microcontroller labs.',
overview: 'Unlike purely conceptual architects, my foundation is built on deep telecommunications engineering, Linux kernel performance tuning, and hands-on physical hardware hacking. Understanding the metal makes cloud abstractions trivial.',
icon: 'Cpu',
keyAreas: [
'Telecom infrastructure: SIP redirect servers, dynamic least-cost routing, ISDN, and Cisco ASR platforms',
'Enterprise networking: BGP routing and troubleshooting, Fortinet firewalls, DMZ segmentation',
'Deep Linux performance engineering and kernel diagnostics using atop, eBPF, and system tools',
'Physical IoT and hardware tinkering: ESPHome firmware, BLE sensor mesh, and home automation nodes'
],
technologies: ['BGP', 'Cisco ASR', 'VoIP (SIP/ISDN)', 'Linux Internals (atop)', 'ESPHome', 'ESP32 / BLE', 'Fortinet', 'Python / Bash'],
impactNote: 'Applies deep understanding of physical networking and hardware constraints to diagnose complex distributed systems.'
}
]
export const skills: SkillItem[] = [
// Cloud & Multi-Cloud
{ name: 'Google Cloud (GCP)', category: 'cloud', tags: ['Central Platform', 'Landing Zones', 'IAM', 'VPC Service Controls'], description: 'Leading central enterprise platform architecture and organizational governance.', featured: true },
{ name: 'Amazon Web Services (AWS)', category: 'cloud', tags: ['Enterprise Scale', 'Control Tower', 'EKS', 'S3', 'Redshift'], description: 'Multi-account AWS landing zones, analytics architectures, and automation.', featured: true },
{ name: 'Multi-Cloud Architecture', category: 'cloud', tags: ['Enterprise Strategy', 'Hybrid Cloud', 'Zero-Trust'], description: 'Designing unified identity and network boundaries across disparate providers.' },
{ name: 'FinOps & Cost Governance', category: 'cloud', tags: ['Budgets', 'Tagging Enforcement', 'Cost Optimization'], description: 'Algorithmic cost allocation, rightsizing, and spend visibility.' },
// Kubernetes & CNCF
{ name: 'Kubernetes (CKA)', category: 'k8s', tags: ['Certified', 'Cluster Architecture', 'Production Operations'], description: 'Certified Kubernetes Administrator with bare-metal and cloud cluster expertise.', featured: true },
{ name: 'Kubespray & Kubeadm', category: 'k8s', tags: ['Ansible', 'Bare Metal', 'Cluster Lifecycle'], description: 'Automated cluster bootstrapping, OS hardening, and zero-downtime upgrades.', featured: true },
{ name: 'Istio Service Mesh', category: 'k8s', tags: ['mTLS', 'Traffic Management', 'Security'], description: 'Zero-trust networking, traffic splitting, and service-to-service encryption.' },
{ name: 'Traefik & Ingress-Nginx', category: 'k8s', tags: ['Ingress Controllers', 'Let\'s Encrypt', 'Cert-Manager'], description: 'Edge routing, automatic SSL/TLS certificate lifecycle, and header mutation.' },
{ name: 'Helm & Kustomize', category: 'k8s', tags: ['Package Management', 'Overlays', 'GitOps'], description: 'Declarative workload templating across staging and production clusters.' },
{ name: 'ArgoCD & Flux', category: 'k8s', tags: ['GitOps', 'Continuous Deployment', 'Reconciliation'], description: 'Pull-based deployment engines enforcing cluster state synchronization.' },
// IaC & Automation
{ name: 'Terraform', category: 'iac', tags: ['HCL', 'State Management', 'Provider Authoring'], description: 'Declarative cloud provisioning with reusable, modular design patterns.', featured: true },
{ name: 'Terragrunt', category: 'iac', tags: ['DRY Modules', 'Multi-Account', 'State Locking'], description: 'Orchestrating complex multi-account and multi-region infrastructure hierarchies.', featured: true },
{ name: 'Atlantis', category: 'iac', tags: ['GitOps for IaC', 'PR Workflows', 'Automated Plans'], description: 'PR-based Terraform execution ensuring full transparency and compliance.' },
{ name: 'Ansible', category: 'iac', tags: ['Playbooks', 'Roles', 'Configuration Management'], description: 'Server provisioning, fleet configuration, and Kubespray automation.' },
{ name: 'GitHub Actions & Jenkins', category: 'iac', tags: ['CI/CD Pipelines', 'Automated Testing', 'Docker Builds'], description: 'Building resilient automated pipelines for container builds and lint checks.' },
{ name: 'Python (Scripting & Boto3)', category: 'iac', tags: ['Automation', 'CLI Tooling', 'AWS SDK'], description: 'Custom cloud automation scripts, CLI utilities, and API wrappers.' },
// Systems & Networking
{ name: 'BGP & IP Routing', category: 'systems', tags: ['Border Gateway Protocol', 'Troubleshooting', 'Autonomous Systems'], description: 'Dynamic routing protocols, peering troubleshooting, and route reflection.', featured: true },
{ name: 'VoIP, SIP & ISDN', category: 'systems', tags: ['Telecom', 'Least Cost Routing', 'Cirpack', 'Oracle SBC'], description: 'Architected SIP redirect servers and enterprise telephony carrier routing.', featured: true },
{ name: 'Cisco ASR & Switching', category: 'systems', tags: ['Hardware Routers', 'VLANs', 'Core Infrastructure'], description: 'Carrier-grade hardware router operation, interface diagnostics, and QoS.' },
{ name: 'Linux Performance & Internals', category: 'systems', tags: ['atop', 'eBPF', 'Kernel Diagnostics', 'Troubleshooting'], description: 'Deep performance analysis, memory leak isolation, and system optimization.' },
{ name: 'Network Security & Firewalls', category: 'systems', tags: ['Fortinet', 'DMZ Design', 'Security Zones'], description: 'Designing perimeter security zones, DMZ isolation, and packet filtering.' },
// Data & Observability
{ name: 'Enterprise Data Lake', category: 'data', tags: ['Product Owner', 'Service Owner', 'Architecture'], description: 'End-to-end service management of enterprise analytics and data pipelines.', featured: true },
{ name: 'Amazon Redshift & S3', category: 'data', tags: ['Columnar Storage', 'Data Warehousing', 'Query Optimization'], description: 'Analytical storage layers and performance tuning for big data analytics.' },
{ name: 'Prometheus & Grafana', category: 'data', tags: ['PromQL', 'Metrics', 'Dashboards', 'Alertmanager'], description: 'Comprehensive observability stacks and custom operational dashboards.' },
{ name: 'Loki & ELK Stack', category: 'data', tags: ['Log Aggregation', 'LogQL', 'Elasticsearch'], description: 'Centralized log aggregation, fast querying, and audit retention.' },
{ name: 'Matillion & ETL', category: 'data', tags: ['Pipelines', 'Transformation', 'Data Loading'], description: 'Automating high-volume data transforms and warehouse ingestion.' },
// Leadership & Agile
{ name: 'Global Team Leadership', category: 'leadership', tags: ['People Management', 'Platform Strategy', 'Hiring'], description: 'Leading cross-functional distributed platform engineering teams.', featured: true },
{ name: 'Enterprise Spin-Off Management', category: 'leadership', tags: ['Carve-Out', 'Separation', 'Migration Strategy'], description: 'Successfully governed IT infrastructure carve-out from Continental to AUMOVIO.', featured: true },
{ name: 'Professional Scrum Master (PSM II)', category: 'leadership', tags: ['Agile Coaching', 'Scrum.org', 'Continuous Improvement'], description: 'Advanced Scrum Master fostering psychological safety and iterative delivery.', featured: true },
{ name: 'Service & Product Ownership', category: 'leadership', tags: ['ITIL', 'SLAs / SLOs', 'Stakeholder Alignment'], description: 'Full lifecycle responsibility for enterprise platforms and user satisfaction.' },
{ name: 'Community & Office Hours', category: 'leadership', tags: ['DevOps Advocacy', 'Knowledge Sharing', 'Mentorship'], description: 'Founded internal technical office hours to bridge platform teams and users.' },
// Hardware & IoT
{ name: 'ESPHome & Microcontrollers', category: 'iot', tags: ['ESP32', 'Firmware', 'Sensor Networks'], description: 'Building custom firmware for environmental sensors and smart controllers.', featured: true },
{ name: 'BLE & Sensor Telemetry', category: 'iot', tags: ['Bluetooth LE', 'Soil/Plant Monitors', 'Telemetry'], description: 'Low-power wireless telemetry pipelines bridging edge devices to MQTT.' },
{ name: 'Self-Hosted Home Lab', category: 'iot', tags: ['Bare-Metal K8s', 'Storage', 'Home Automation'], description: 'Private infrastructure testing ground running production-grade workloads.' }
]
export const engineeringPrinciples: Principle[] = [
{
title: 'Declarative Everything',
statement: 'If it is not written in code and version-controlled, it does not exist.',
explanation: 'From cloud landing zones and Kubernetes manifests to firewall policies and firmware: every single component is defined declaratively, reviewed via pull requests, and deployed through automated GitOps pipelines.',
icon: 'FileCode'
},
{
title: 'Self-Service over Gatekeeping',
statement: 'A platform team is a product team whose customers are developers.',
explanation: 'Great platform engineering does not create bureaucratic approval tickets. It provides secure, automated guardrails, golden paths, and self-service APIs so product developers can move fast with complete confidence.',
icon: 'Zap'
},
{
title: 'Ground-Up Systems Thinking',
statement: 'Higher-level cloud abstractions always rest on physical networks and kernels.',
explanation: 'Troubleshooting distributed microservices becomes effortless when you truly understand BGP routing, TCP handshake latency, Linux memory paging, and hardware constraints. Real-world reliability requires full-stack depth.',
icon: 'Layers'
},
{
title: 'Pragmatic & Sustainable Agility',
statement: 'Scrum exists to empower engineers, not to worship dogma.',
explanation: 'As a PSM II Scrum Master, I treat agility as a tool to protect team focus, foster psychological safety, align on clear goals, and eliminate friction so high-performing engineers can do their best work sustainably.',
icon: 'HeartHandshake'
}
]
export const socialLinks: SocialLink[] = [
{
platform: 'LinkedIn',
label: 'Connect on LinkedIn',
url: 'https://www.linkedin.com/in/moritz-graf-92abaa91/',
icon: 'Linkedin',
handle: 'moritz-graf-92abaa91'
},
{
platform: 'GitHub',
label: 'Follow on GitHub',
url: 'https://github.com/iptizer',
icon: 'Github',
handle: 'iptizer'
},
{
platform: 'Email',
label: 'Email Moritz',
url: 'mailto:contact-moritz@moritzgraf.de',
icon: 'Mail',
handle: 'contact-moritz@moritzgraf.de'
}
]