I build the tools your business runs on.

IT and software generalist in Surrey, BC. Internal tools and automations that take repeat work off people's plates, plus websites, apps and managed IT.

Ripan Mann

Things I built that keep running when nobody is watching.

Most of my work sits behind the counter: label printers, listing screens, quote requests, product catalogs. It is built to work without anyone babysitting it.

Virsa

Business software I designed and built on my own, set up for each company that uses it, with n8n automations doing the routine work. It reached alpha in June 2026 and has one paying customer. I haven't marketed it yet. virsa.app

alpha

Virsa SEO

A self hosted SEO tool under the Virsa name, built on the open source OpenSEO project. It covers keyword research, rank tracking, backlinks and site audits, and AI agents can use it directly. I host it myself on Cloudflare.

running

Live MLS display

A screen for Coastal Realty that pulls live MLS listings and runs all day on its own. Built in 2025.

running

Wire station

Warehouse software for a BC electrical distributor that runs the wire cutting and labelling workflow. It drives a label printer over USB over Ethernet, and a companion app handles printer setup.

in use

RFQ app

An internal app for the same distributor that handles requests for quote.

internal

Online forms

A custom form filler for the same distributor, built to replace PDFfiller for its customer forms. It is finished and goes live once the company's own server is set up.

An AI-assisted test suite of 120+ database security and behaviour checks, plus Playwright end-to-end tests, runs on every change and has to pass before code is merged.

rolling out

Job tracker and applier

My own job search dashboard on Cloudflare. It scans job boards, scores each listing against my skills and pay, and tracks every application from shortlist to offer. An automated applier sends only the applications I approve, with a daily cap.

running

Self hosted home server Personal project

Turned a leftover 1U business server into a private file server and app host for personal and business use, reachable securely from anywhere with zero open ports.

Separate ZFS pools keep personal and business files apart, each user has their own permissions and quotas, and Tailscale access rules let each device reach only what it needs. Remote desktop runs on my own RustDesk servers.

Security monitoring with Wazuh

I deployed Wazuh, an open source security monitoring platform (SIEM/XDR), on the server as a three container stack: the Wazuh manager, indexer and dashboard. It runs as a custom Docker Compose app inside TrueNAS, with storage on its own dataset. My laptop runs the Wazuh agent and reports back to the server over Tailscale, so monitoring works from anywhere without exposing anything to the internet.

What it gives me:

  • Security event monitoring for logins, failed logins, and system and policy changes
  • Vulnerability detection for installed software, flagged by severity
  • CIS benchmark configuration checks with specific hardening fixes
  • One dashboard for every connected device

Getting it running meant:

  • Tuning a kernel setting the search indexer requires
  • Generating TLS certificates so the three components talk to each other securely
  • Adapting the official Docker Compose deployment for TrueNAS, with absolute storage paths and the dashboard moved off a port TrueNAS already uses
  • Cutting exposed ports so only agent traffic and the dashboard are reachable, while internal services stay private between containers
  • Tracking down a YAML import error caused by a lost comment marker

What's next

  • Encrypted offsite backups
  • A mirrored data pool
  • Immich for photos
  • Replace all default credentials
  • Set an index retention policy
  • Real time alerts to my phone for high severity events
  • Extend agents to more devices

TrueNAS · ZFS · Tailscale · RustDesk · Docker · Wazuh · SIEM

personal

What I can run for you.

If your business is growing and doesn't have an IT department yet, I can be it. I work with small and mid sized companies up to about $30M in revenue, from the software on everyone's screen to the firewall and phones in the back room.

  1. Custom software and automation

    Internal tools built around how your team already works, and automations that move data between systems so nobody retypes it.

    MERN · Supabase · n8n · Cloudflare Workers and Pages · AI automation

  2. Websites and search

    Company websites and Shopify stores, plus the SEO and Google Business Profile work that helps people find you.

    Shopify · SEO · Google Business Profile

  3. Accounts, devices and cloud

    Microsoft 365 and Google Workspace set up and run properly, including email migrations. Users and devices managed through Entra ID, Intune and Active Directory, where I've completed Microsoft training. Cloud hosting on AWS, Azure or GCP when a workload needs it.

    Microsoft 365 · Google Workspace · Entra ID · Intune · Active Directory · AWS · Azure · GCP

  4. Network and security

    Routers, WiFi, switches, VPN and DNS behind a proper firewall, with MFA, antivirus, backups and Cloudflare Access on top. NAS and file servers for shared storage.

    Ubiquiti · Fortinet · pfSense · Synology · TrueNAS · Cloudflare Access

  5. Support and hardware

    Remote help for Windows and Mac users, plus the office hardware: VoIP and business phone systems, printers, scanners, POS, CCTV installs and video conferencing.

    TeamViewer · AnyDesk · Splashtop · RustDesk

  6. Operations

    I read electrical drawings when building quotes, and I run an ERP system day to day.

    Quotes · ERP

  7. AI-assisted testing

    Before an app ships, I use AI to help write and maintain automated test suites that run on every change: unit tests, end-to-end flows with Playwright, and security checks against the database like row-level security, auth sessions and rate limits.

    Playwright · Supabase RLS · unit and E2E · AI-assisted

Bachelor of Technology, Information Technology, Kwantlen Polytechnic University, 2014 to 2021.