Hi, I'm Angga. I build secure, passwordless identity platforms.
Deep in identity, authentication, and applied cryptography — Keycloak, Verifiable Credentials, WebAuthn, post-quantum — and broad across the stack, from frontend to cloud-native. Building open-source tools like awswaste and writing about it here.
That's me.
I care about secure, well-built systems. By day I develop VIA's self-hosted Keycloak identity platform; by night I ship open-source tools like awswaste and write about identity, security, and cloud-native engineering here.
More about me →Currently working on
Micro-SaaS
A small open-source DevOps tool — currently in exploration.
Tech blog
One post a week — engineering retros, not generic tutorials.
Open-source
Contributing to Ghost. Aiming for a PR every two weeks.
Mobile app
Subscription-based product, parked until SaaS validates.
Latest posts
View all →- What it actually takes to deploy your app on EKSThe checklist looks short: network, cluster, nodes, ECR, deploy. Each line hides a day of work. A field guide from taking a real app to an EKS cluster — nine subnets, Pod Identity, managed services, and the manifest that finally ships it.
- Building awswaste: finding AWS waste from the terminalAn open-source Go CLI that scans an AWS account for idle and orphaned resources and estimates the monthly cost — the Trusted Advisor checks you shouldn't need a Support plan for. Here's the origin story.
- Observability on one EC2 box: the Grafana stackSelf-hosting traces, logs, and metrics on a single EC2 instance with Grafana, Alloy, Tempo, and Loki — how the pieces fit, the push-vs-pull split that trips people up, wiring it for a Go backend, and the caveats nobody mentions.