// LINUX SYSTEMS ENGINEER & FULL-STACK DEVELOPER

MANUJA MEDHANKARA

Linux systems engineer and full-stack web developer focused on Linux infrastructure, modern web applications, and security-hardened software.

Initiate Contact All Projects Resume

GitHub LinkedIn

DOMAINS: Linux Systems / Server Infrastructure / Full-Stack Web Dev / Security & Hardening

// PROFILE & SPECIFICATIONS

Engineering resilient Linux systems and high-speed web software.

I'm Manuja Medhankara, a Linux systems administrator and full-stack web engineer based in Kegalle, Sri Lanka. I design reproducible Linux environments across Arch Linux, NixOS, Debian, and Ubuntu, and build fast, accessible web applications using TypeScript, Astro, Svelte, and Tailwind CSS.

Alongside infrastructure and web development, I engineer low-overhead desktop and system utilities in Rust and Tauri, backed by practical CIS Linux hardening and OWASP web security baselines.

System Specifications

ROLE: Linux Systems Engineer & Full-Stack Developer
PRIMARY OS: Arch Linux & NixOS / Debian & Ubuntu
LINUX & INFRA: Kernel Tuning, systemd, Docker, Nginx, Bash
WEB STACK: Next.js, Astro, React, Svelte, TypeScript, Tailwind
SYSTEMS & APPS: Rust, Tauri v2, Python, PostgreSQL/Supabase, SQLite
SECURITY: Linux Hardening (CIS) & Web AppSec (OWASP)

// CAPABILITIES & ENGINEERING DOMAINS

[ SYS.01 ]

Linux Systems Engineering

System administration, kernel sysctl tuning, service orchestration, custom workstation environments, and automated shell workflows.

Scope: Arch · NixOS · Debian · Ubuntu · Flakes · systemd · Bash

[ INF.02 ]

Server Infrastructure & Ops

Linux server provisioning, containerization, reverse proxy routing, networking, and automated CI/CD deployment pipelines.

Scope: Docker · Nginx · OpenVPN · GitHub Actions · Linux Net

[ WEB.03 ]

Full-Stack Web Development

Architecting high-performance static and dynamic web applications, responsive interfaces, and clean backend APIs.

Scope: Next.js · Astro · React · Svelte · TypeScript · Supabase

[ DEV.04 ]

Rust & Desktop Tooling

Engineering ultra-low-RAM cross-platform desktop applications, native system daemons, and embedded database utilities.

Scope: Rust · Tauri v2 · WebView2 · SQLite WAL · Python

[ SEC.05 ]

Linux Hardening & Baselines

Defensive infrastructure posture, strict privilege models, firewall configuration, and automated compliance scripts.

Scope: CIS Benchmarks · nftables/iptables · SSH · AppArmor

[ SEC.06 ]

Web Application Security

Practical web security auditing, HTTP security header hygiene, SSL/TLS posture evaluation, and OWASP Top 10 mitigation.

Scope: OWASP Top 10 · CSP & Headers · SSL/TLS · API Hygiene

// FEATURED PROJECTS

View All Projects (13)

G-Helper Linux

LINUX & SYSTEMS

ACTIVE Source ↗

Zero-dependency native Rust hardware control utility (GTK4, Libadwaita, and Cairo GUI + CLI) for ASUS TUF Gaming & ROG laptops on Linux, reverse-engineered from Windows G-Helper WMI specifications without requiring asusctl or supergfxctl.

― Single ~590 KB Rust binary linking directly to GTK4, Libadwaita, and Cairo via C FFI with zero external crates

― Interactive 8-point Cairo fan curve editor, thermal profile switching, and hardware MUX / GPU Eco mode orchestration

― Direct asus-nb-wmi sysfs control for CPU PL1/PL2 power limits, NVIDIA Dynamic Boost, TUF RGB, and battery charge thresholds

― WMI method IDs and 16-byte fan curve presets reverse-engineered from GHelper.dll via Ghidra and .NET static analysis

Rust Linux GTK4 / Libadwaita Kernel WMI / sysfs Reverse Engineering

Zenith Habit Tracker

WEB & APPS

ACTIVE Source ↗

Open-source, self-hostable terminal-inspired habit tracker and behavioral addiction weaning engine. Built for users to independently deploy and own their data, with 0ms optimistic updates and Vim navigation.

― Self-hostable architecture: 1-step Supabase SQL schema setup with zero-cost deployment on Vercel, Railway, or VPS

― Dual DO/DON'T routine engine with expanding-interval scientific behavioral fading

― 0ms optimistic UI backed by Next.js 16 Server Actions and Supabase PostgreSQL

― Sovereign privacy: 6-digit Scrypt PIN hashing, database-backed lockout, cross-tab sync, and offline PWA

Self-Hostable Next.js 16 React 19 TypeScript Tailwind v4 Supabase

VulnRadar Security Scanner

CYBERSECURITY

v1.5.2 RELEASED Source ↗

Desktop security workstation and non-intrusive web vulnerability auditor built with Rust, Tauri v2, and Svelte 5 for evaluating HTTP headers, TLS posture, and web attack surfaces.

― Sub-second passive audits for SSL/TLS, DMARC/SPF, and HTTP security header hygiene

― RCE risk heuristics detecting parameter abuse (?cmd=, ?tpl=) & server CVE correlation

― AI-powered 1-click prompt generator for automated remediation blueprints

― Continuous background watchdog daemon with native OS alerts upon grade degradation

Rust Tauri v2 Svelte 5 Tailwind v4 SQLite WAL

Linux Hardening & Configs Suite

LINUX & SYSTEMS

UPCOMING Source ↗

Declarative NixOS Flakes configurations and automated bare-metal Arch Linux Hyprland workstation rice with 1-line cloud bootstrap, zram swap tuning, and snapshot rollback.

― Declarative NixOS Flakes & Home Manager modules for reproducible system state

― 1-line cloud TTY bootstrap for Arch Linux with Hyprland, Waybar, SDDM, and GRUB themes

― Automated bootloader recovery, zram swap tuning, and snapshot rollback engine

Arch Linux NixOS Flakes Hyprland Bash systemd zram

Showing 4 featured works across Linux, Web Development, Cybersecurity, and AI.

Explore Full Project Archive (13)