Skip to content
View khoirulyahya's full-sized avatar

Block or report khoirulyahya

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
khoirulyahya/README.md

Muhammad Khoirul Yahya

Backend, DevOps & Agentic Systems Engineer · Yogyakarta, Indonesia · Open to remote opportunities

🌐 Live Portfolio · 💼 LinkedIn · ✍️ Medium · 📧 Email

I build Laravel backends, manage Linux infrastructure, and architect Agentic AI workflows with custom tools, vector databases, and production gateways. My work bridges application code, production reliability, and autonomous AI systems.


🛠️ What I Work With

Backend & Architecture
Backend

Infrastructure & DevOps
DevOps

AI & Agentic Systems
AI Stack

Cursor GitHub Copilot Codex Antigravity Ollama Qdrant MCP

Frontend & Dashboard
Frontend


🚀 Production & Engineering Proof

  • Infrastructure: Migrated full application stacks between VPS providers (Vultr to Contabo) and reconfigured core services.
  • Storage & Cloud: Moved multi-cloud object storage across Vultr, AWS S3, and DigitalOcean Spaces using rclone with zero data loss. View notes
  • Agent Concurrency & Gateways: Built autonomous WhatsApp bridges with file-based mutex concurrency locks and automated FFmpeg media transcoding for AI agents.
  • AI Infrastructure & RAG: Deployed Qdrant Vector Database (qdrant.brofesional.id) with local Ollama embeddings for semantic knowledgebase retrieval.
  • Database & Backups: Automated containerized MySQL backups to Google Drive with log rotation and Telegram alert reporting. View project
  • Messaging: Set up FCM push notifications, transactional email infrastructure (Brevo, Mailketing), and automated DNS routing.
  • Delivery: Configured GitHub Actions CI/CD pipelines for automated testing, container builds, and deployment.

🧪 Selected Projects & Labs

  • Antigravity Session Manager: CLI session engine, SQLite database manager, and DX architecture RFC for Google Antigravity.
  • Hermes Local Agent Lab: Multi-provider LLM routing, Telegram/WhatsApp agent gateways, MCP Trello, and approval-based coding automation.
  • Laravel Backend Portfolio: OpsLedger API demo with JWT auth, RBAC, queues, sandbox payment webhooks, Docker Compose, and CI.
  • Laravel VPS Hardening Lab: Production-minded server hardening patterns for Laravel applications on Ubuntu (Nginx, PHP-FPM, SSL, Fail2Ban).
  • rclone S3 Operations Playbook: Practical workflows for copying, syncing, dry runs, ACLs, bucket policies, and safe IAM access revocation.
  • MySQL Docker Backup: Automated MySQL backups from Docker to Google Drive with rotation and Telegram reporting.
  • n8n Automation Workflow Lab: Self-hosted n8n automation pipelines, Telegram bot routing, Google Sheets logging, and webhook event processing.

💼 Experience & Currently

  • Backend & DevOps Engineer at Brofesional.id (March 2024 – Present). Working across Laravel APIs, Linux server maintenance, database architecture, and RAG vector search pipelines.
  • Frontend Web Developer on QezaCare, a healthcare dashboard for clinic branches, doctor schedules, reservations, payments, and promotions.
  • Currently exploring remote full-time opportunities in backend, DevOps, and AI systems engineering.

Pinned Loading

  1. mysql-docker-backup mysql-docker-backup Public

    Automated MySQL backup from Docker container with Google Drive upload, log rotation, and Telegram reporting

    Shell

  2. laravel-vps-hardening-lab laravel-vps-hardening-lab Public

    Sanitized Laravel VPS deployment and hardening lab with Nginx, PHP-FPM, MySQL, SSL, Fail2Ban, Docker reverse proxy, and backup automation.

    Shell

  3. rclone-s3-operations-playbook rclone-s3-operations-playbook Public

    Practical rclone playbook for S3-compatible object storage operations: copy, sync, dry-run, ACL, bucket policy, and IAM access revocation.

  4. ssh-socks5-access-lab ssh-socks5-access-lab Public

    Sanitized access-control lab using SSH SOCKS5 tunneling, Nginx IP whitelist, restricted Linux users, and safe SSH hardening notes.

  5. n8n-automation-workflow-lab n8n-automation-workflow-lab Public

    Self-hosted n8n automation workflow lab: Telegram bot, Google Sheets logging, JavaScript parsing, command routing, debugging notes, and AI parser roadmap.

    Mermaid

  6. hermes-local-agent-lab hermes-local-agent-lab Public

    An evidence-based journey of experimenting with Hermes Agent, multi-provider LLM routing, Telegram and WhatsApp gateways, MCP Trello, voice workflows, and approval-based coding automation.