Apps & Control Planes / Built / deployed
Fimi Access
Browser infrastructure workspace built from a pinned Termix base with a custom Fimi brand layer, reproducible patch set, SSH agent integration and gateway access.
OVERVIEW
What I built.
Browser infrastructure workspace built from a pinned Termix base with a custom Fimi brand layer, reproducible patch set, SSH agent integration and gateway access.
Created a reproducible branded browser infrastructure workspace from a pinned Termix upstream release.
Maintained the branding and behavior changes as a reviewable patch/overlay instead of an untraceable fork.
Integrated SSH-agent based access, gateway routing and Tailscale-reachable target hosts.
SYSTEM ARCHITECTURE
How the system is divided.
Browser -> Cloudflare/Caddy service gate -> Fimi Access application -> SSH agent socket -> target host.
Upstream engine remains pinned and attributed; user-facing identity and selected behavior are changed by the Fimi patch layer.
Runtime keys, sessions and secrets remain outside Git.
NETWORK / DATA FLOW
What talks to what.
TECHNOLOGY STACK
The technical surface.
IMPLEMENTATION
How it works in practice.
- 01
Browser -> Cloudflare/Caddy service gate -> Fimi Access application -> SSH agent socket -> target host.
- 02
Upstream engine remains pinned and attributed; user-facing identity and selected behavior are changed by the Fimi patch layer.
- 03
Runtime keys, sessions and secrets remain outside Git.
TESTING & VALIDATION
How I know it works.
Pinned upstream commit verification
Patch/overlay reproducible build
Image build and scan
SSH-agent authentication
Gateway/Tailscale target reachability
Metrics compatibility patch validation
EXTERNAL SERVICES & DEPENDENCIES
What sits outside the core.
ENGINEERING EVIDENCE
Artifacts behind the claims.
BOUNDARIES / CONSTRAINTS
What the project does not pretend to solve.
—Derived from Termix 2.7.1; upstream authorship is preserved
—Runtime keys/sessions remain outside Git
—Internal protocol/schema names intentionally remain compatible
RESULT / CURRENT STATE
What this produced.
A browser-based SSH/infrastructure workspace with a reproducible customization layer and preserved upstream attribution.