hugo@superuser:~/projects $ less index.md

Some projects are simpler than others. This one sits on the right end of the complexity spectrum—not because a PKI issuing qualified certificates is inherently unwieldy (it isn’t).

In an era dominated by cloud computing, where systems can be deployed without leaving the office, operating an on-premises infrastructure may seem antiquated. Yet a qualified PKI demands physical isolation in a secure facility with no external network access—a constraint that is difficult to appreciate without firsthand experience in such environments.

As infrastructure engineer, I navigated the constraints of secure-room deployment—balancing stringent physical security requirements with operational maintainability in an isolated, eIDAS-compliant PKI environment, ensuring continuous availability for national identity document issuance.