Dante Bertolutti

Okanagan College — BCIS, graduating April 2026

Major projects from my degree.

Bachelor of Computer Information Systems coursework focused on full-stack architecture, databases, systems analysis, object-oriented programming, algorithms, computer networks, and iOS development. These two projects pushed the work the furthest.

COSC 471

Project Maverick — MarketSight

Machine-learning stock prediction platform combining a FastAPI backend, XGBoost models, and a React/TypeScript frontend with real-time charts.

My Contributions

Added prediction confidence scores in the inference API, built the predictions page, aligned frontend types with backend schemas, parameterized SQL date queries to reduce injection risk, fixed CI lint and type-check issues, authored Streamlit acceptance-test docs and final project documentation.

FastAPIXGBoostReactTypeScriptPostgreSQLViteRechartsDockeruvpytestruffmypy
Project Maverick stock chart and prediction dashboard
Project Maverick architecture diagram showing frontend, API, model inference, and data persistence layers
Project Maverick architecture — frontend, API, model inference, and persistence.

COSC 416

Canada-wide DBMS Cybersecurity Monitoring

Group 5 Cybersecurity project building an Oracle-backed monitoring system for Canada-wide DBMS traffic — schema, performance tuning, stress testing, backup/recovery, and a Flask web dashboard surfacing traffic analysis, threat intelligence, and infrastructure metrics.

My Contributions

Designed and tuned the Oracle schema (tables, indexes, views, grants, verification queries) and built the Flask dashboard with a tabbed UI for Traffic Analysis, Threat Intel, Performance Tuning, and Infrastructure. Wrote Oracle data export, JSON builder, deploy and refresh scripts, plus performance tuning docs and a DBML schema diagram.

OraclePL/SQLPythonFlaskHTMLCSSShell
COSC 416 cybersecurity DBMS monitoring dashboard

Personal Infrastructure

Self-hosted infrastructure I designed and operate.

Networking, storage, DNS, VPN, and reverse-proxied applications — built from the ground up and operated as a long-running production environment.

Personal Project — 2025–Present

Self-Hosted Home Infrastructure

Enterprise-grade network and self-hosted services stack

Designed, deployed, and operate a full enterprise-grade network and self-hosted infrastructure stack from the ground up. Ubiquiti UniFi networking, a 60TB Synology RAID 6 array, a Linux Mint application server, Cloudflare-managed DNS with API-driven DDNS, WireGuard VPN, and Nginx-proxied web apps — designed so non-technical operators can run it without me on-site.

Engineering Highlights

  • Layer-2/3 design across UDMP, dual USW Pro Max distribution switches, a USW Flex 2.5G edge switch, 5× U6 Mesh APs, and a 10G SFP+ backbone with seamless roaming.
  • 60TB Btrfs RAID 6 array on a Synology DS1525+ — chose RAID 6 over RAID 5 for two-drive fault tolerance on the long-life storage tier.
  • STP root-bridge priority intentionally assigned with explicit tiers across distribution and edge switches for deterministic failover.
  • Cloudflare API-token DDNS against the zone directly — eliminated reliance on third-party DDNS providers.
  • Nginx reverse proxy fronting multiple self-built web apps (GolfTracker, TrainingQuest, TodoList) with a catch-all default_server returning 444 to harden against unintended host headers.
  • WireGuard VPN with per-user configs, QR-code provisioning, and multi-user access — migrated from OpenVPN for better cellular performance and lower overhead.
  • DNS-level filtering via AdGuard Home (Docker on Synology) with Quad9 + Cloudflare DoH upstream; 2FA on Ubiquiti and DSM admin; UPnP disabled; hardened SSH.
  • Roadmap: VLAN segmentation (Trusted / IoT / Camera) with inter-VLAN firewall rules, UniFi Protect camera deployment, 10GbE direct NAS-to-workstation link, multi-site VPN to a secondary BC↔Mexico property.
UniFiUbiquitiSynologyBtrfsRAID 6Linux MintNginxCloudflareWireGuardDockerAdGuardSFP+10GbE
Home infrastructure collage — UniFi networking, Synology NAS, and self-hosted services