Darius Achilles
bartis — Darius AchillesSystems Architect
26 years
near Brunswick, Germany

I build systems that scale,
end to end.

Infrastructure, security, backend, frontend.
Distributed by design, delivered end to end.

Featured project
Dylarisin development
~130k LOC · 2 reposdylaris.com

Minecraft server hosting platform, self-hosted or multi-tenant. MC servers and proxies that stay invisible.
The gateway handles every packet, every file, every connection.

Portless NodesGame nodes expose zero public ports — every connection arrives through edge gateways over persistent TLS tunnels
Beam File RelayServer files, world data, backups all flow through the gateway too. No exposed SFTP, no direct disk access
Yamux MultiplexingOne persistent TLS tunnel per edge–node link carries N concurrent player sessions with 256KB stream windows
Transparent FailoverSplice sidecars survive edge restarts. Player connections persist through gateway rollouts and updates
Kernel DDoS DropeBPF/XDP firewall at the edge — malicious packets die in kernel space, never reach userspace
Built-in ToolingBackups to S3/R2, Modrinth browser + modpack builder, live server migration between nodes, per-server RBAC, file browser, multi-node clustering. Docker-native throughout
BYONBring Your Own Node. Customers run the game node on their own hardware while Dylaris hosts the control plane, DDoS-protected edges and billing. Multi-tenant by owner, single-use enroll tokens, WireGuard bridge for nodes behind NAT. Sold and provisioned through the dylaris.com store.
Backend
Go 1.26gRPCCilium eBPFYamuxWireGuard
Frontend
Next.js 16React 19TypeScriptTailwind v4
Infra
Docker SwarmTimescaleDBValkey / RedisXFS quotasNPM Proxy
flip for architecture
ArchitectureDylaris
back
Traffic Flow
Player / Beam clientOnly point of contact with the internet. Reaches the gateway tier on game ports, HTTP/HTTPS, or the Beam file-transfer listener
EdgePublic-facing ingress. XDP firewall drops malicious packets in kernel space, then SNI / MC protocol parsing routes the rest into the tunnel
Yamux / TLS tunnelOne persistent encrypted tunnel per edge–node pair, multiplexed into N concurrent streams. 256KB stream windows for high throughput
Link → ContainerLink demuxes streams on the node host and forwards them via Docker overlay net. The node host itself never exposes a public port
Control plane (out of band)Core ↔ Node via gRPC for container lifecycle. Hub coordinates Edges through a Redis lease-based leader election
Communication Layers
Public ingressTCP, UDP, Minecraft 774, HTTP/HTTPS, Beam
Edge ↔ NodeTLS 1.3 + Yamux multiplexing, one tunnel per pair
Control planegRPC (Core ↔ Node), Redis pub/sub (Hub ↔ Edges)
NAT bridgeWireGuard (Warp) terminates home / off-site nodes
HA leaderRedis lease (30s TTL) + race-free BLMove queue
Data planePostgreSQL (TimescaleDB), Valkey (Redis-compat)
Data Layer
PostgreSQLTimescaleDBValkey / Redis
Topology & Security
Edge-only public surface, nothing else talks to the internetNode hosts run Docker overlay net, zero exposed ports, no public SSHTLS-tunneled inter-tier links + JWT-authenticated Beam clientsKernel-level XDP firewall as additional packet-drop layerBYON nodes tenant-isolated by owner; enroll tokens are single-use
~130k LOC·2 product repos·~10 services
dylaris.comcommercial layer
~9k LOC · own repo

The paid front for BYON. A customer subscribes here, then connects their own node into the hosted control plane. Stripe bills per node plus metered traffic; checkout and cancel events provision or suspend the tenant on the platform over a shared-secret API.

BillingStripe per-node subscriptions + metered traffic overage, webhook as source of truth
Account linkPasswordless store account links to a platform Core user via single-use token
ProvisioningCheckout / cancel drives activate · past_due · suspend on the tenant's node
Stack
GoFiberNext.js 16StripePostgreSQLGORMResendCMS-driven pricing
Background

I spent two years as an IT field technician, two more as a sysadmin. I ran Linux servers, built homelabs, and learned what happens when infrastructure fails at 2am.

That background is why I write backend code the way I do – I understand what runs underneath it. For the past three years I've been building tools and analysing architectures. For the last year, working on large-scale systems like Dylaris.

I work with AI as a force multiplier – not a replacement for engineering judgment.

Built in Go. Efficient by design, not by coincidence.
Stack & capabilities
Backend & APIs
GoFiberChigRPCGORM
Frontend
TypeScriptNext.jsReactTailwind v4
Data & Auth
PostgreSQLSQLiteRedisSupabase (self-hosted)JWTOAuth2
Payments & Services
StripeMetered billingResend
Security & Infra
Argon2idTOTP 2FACloudflare TurnstileDocker SwarmTraefikGitHub Actions CIeBPF / XDPWireGuardRedis StreamsSSE / WebSocketS3WailsDistributed SystemsLinux
MobileSmaller apps I build myself in React Native; polished mobile UX/UI and full native iOS / Android come via @isthaltdave. Full end-to-end delivery including mobile is possible.
All projects
LabExtend
in production
GoReact 19TypeScriptSQLiteWebSocketArgon2idDockerVite

Self-hosted homelab dashboard for power users who want enterprise-grade tooling without the SaaS dependency. A single Go binary with an embedded React frontend ships seven native modules — Dashboard, DDNS, Wake-on-LAN, Secrets Vault, Docs, Notes, Stats — behind HTTPS multiplexed on one port. The Secrets Vault is zero-knowledge: Argon2id + AES-GCM happen in the browser, only encrypted blobs ever leave. Cloudflare DDNS automation, WebSocket-streamed healthchecks, full install walkthrough on github.com/Bartis-Dev/LabExtend.

Full SaaS product platform – storefront, hardware-bound license management, Stripe payments, documentation engine, and infrastructure admin. HWID-based licensing with session tracking, 2FA, RBAC, Cloudflare DNS sync, and a complete admin dashboard. Go/Fiber API backend with Next.js frontend. No off-the-shelf CMS – everything custom.

bartis.dev
in production
GoFiberNext.jsPostgreSQLRedisStripe
Unnamed
in developmentname in progress
GoChiNext.jsPostgreSQLStripeOAuth2

Verified creator statistics platform. Connects YouTube, Twitch and TikTok to generate authenticated media kits with live data. Agency marketplace with magic link sharing, password-protected profiles, and Stripe-based subscriptions. Go backend with background workers for automated stat sync, Next.js frontend with drag-and-drop.

Prototypes & experiments
Bartis-Xside project

Solana trading terminal. Real-time token feed via WebSocket + polling hybrid, AES-256 encrypted wallet vault with PBKDF2, multi-wallet management, Jito MEV protection. Wails desktop app — Go backend with React frontend.

GoWailsSolana SDKSQLiteReactWebSocket
GeoBingoside project

Multiplayer geo-guessing game. Players locate search terms on Google Maps Street View in timed rounds, then vote on results. Real-time room sync via SSE, embedded Next.js frontend in Go binary.

GoNext.jsSQLiteSSEGoogle Maps API
Client microservices stackside projectvia current employer

Production microservices monorepo running multiple B2B marketing and e-learning sites behind a single CI/CD pipeline. Path-filtered GitHub Actions rebuild only the changed services into GHCR; Portainer orchestrates the Docker Compose stack on a Strato VPS behind Nginx Proxy Manager. Mixed Next.js frontends, a Go mailer service, per-service environment isolation, webhook-driven deploys.

DockerGitHub ActionsGHCRPortainerNext.jsGoNPM
Work together

Got a project that needs solid backend work – or a complete product built end to end?

Backend systems, distributed architecture, full product delivery – or a tool that just needs to actually perform. Let's talk.

bartis · Darius Achilles
ContactImprintPrivacyTerms