Ali Alkhiami — Fullstack & AI engineer

Kassel, Germany · ali@alkhiami.de · github.com/alialkhiame · Download CV (PDF)

Software engineer at LWV Hessen in Kassel: Jakarta EE with JAX-RS and CDI, Angular 17, architecture work, code reviews and the Linux deployments. Alongside that I run 63 services of my own on one VPS and a Raspberry Pi — the auth server, the deploys and the backups included.

How I got here

1. 2015 — Abitur, Syria. Final grade 1.8
2. 2016 — German to C1. Arrived in Germany and learned the language
3. 2018 — Informatik. First serious code
4. 2020 — B.Sc. Wirtschaftsinformatik. Hochschule Fulda, to 2025. Thesis: a UX evaluation model built around the eDok application at LWV Hessen
5. 2023 — LWV Hessen. Software engineer. Jakarta EE with JAX-RS and CDI, Angular 17, architecture, code reviews, Linux deployments
6. 2025 — M.Sc. Praktische Informatik. FernUniversität in Hagen. AI, IT security, cloud infrastructure, operating systems

Projects that are live

My own OIDC provider — myownauth.alkhiami.de

Authorization code flow with PKCE and a local JWKS endpoint. Every other app here is a registered client. Written instead of installed, because that was the only way to learn it.

Agent console — agent.alkhiami.de

Drive coding agents from a browser. Node, WebSocket, node-pty over tmux so sessions outlive the tab, OIDC with PKCE, a second factor, reachable only over the VPN.

applai — applai.alkhiami.de

A paid product, not a demo. Node and Express, the Groq LLM API, Stripe for billing, Google OAuth, SQLite underneath.

Thirteen learning apps — math.alkhiami.de

One shared single-page template, thirteen subjects, and a pipeline that runs overnight to write new lessons with an LLM.

Games platform — games.alkhiami.de

Rust with Axum behind SvelteKit, PostgreSQL, JWT verified against a local JWKS endpoint. Deploys fifteen seconds after a merge.

GameBot — gamebot.alkhiami.de

A self-play DQN written in plain NumPy, no framework, paired with a local one-billion-parameter model that commentates the match. CPU only, because that is all the box has.

picedit — picedit.alkhiami.de

Photo editing on the Gemini image API, with OIDC in front and Apache reverse-proxying the Node service.

Shop — shop.alkhiami.de

Angular 17 and Spring Boot 3, PostgreSQL, JWT, packaged with Docker and run on Kubernetes. The one where I learned what deployment actually costs.

What I reach for

Identity

OAuth 2.0 · OpenID Connect · PKCE · JWT · JWKS · Keycloak

Building

Java · Spring Boot · Jakarta EE · Angular 17 · TypeScript · React · Node.js · Rust · Python

AI in the loop

Groq · Google Gemini · llama.cpp · prompt design · rate limiting and cost control · NumPy reinforcement learning

Running it

Linux · Apache2 · Docker · Kubernetes · Forgejo Actions · health-checked deploys with rollback · PostgreSQL · SQLite

Languages. Arabic C2 · German C1 · English C1

Off the keyboard

Bouldering

Problems that come with a colour grade. You fall off, you read it again, you go back up.

Swimming

Lanes. The one place with nothing to read and nothing to fix.

Guitar

Six strings and no audience. Still the best hour of most weeks.

Football

With a team, which is the entire point of it.

Gym

The discipline everything else here borrows from.

Every service on the island

All of them sign in through myownauth.alkhiami.de. In the world each one is a tower with this written on it.

Identity

• connect.alkhiami.de — Hands out VPN profiles. Admin gated.
• keycloak.alkhiami.de — Keycloak, kept alongside the provider I wrote.
• learnoauth.alkhiami.de — OAuth Academy. OAuth 2.0 and OpenID Connect, explained.
• oauth2.alkhiami.de — OAuth 2.0 endpoints.
• oAuthEasy.alkhiami.de — A simpler way into OAuth.

Products

• 2048.alkhiami.de — The sliding-tile game, rebuilt.
• agent.alkhiami.de — Run coding agents from the browser. tmux-backed, VPN only.
• alkhiami.de — My current personal site. This island is what replaces it.
• anmiePic.alkhiami.de — Turns a photo into anime.
• applai.alkhiami.de — AI cover-letter generator. Groq, Stripe, Google sign-in.
• authorinfo.alkhiami.de — An author information app.
• binGvir.alkhiami.de — An older experiment. Still up, still mine.
• book.alkhiami.de — A book platform. Rust, Axum and MongoDB.
• btcpay.alkhiami.de — A BTCPay portal.
• calendar.alkhiami.de — A shared calendar with roles.
• chat.alkhiami.de — A chat server. Python, Gunicorn, SQLite.
• copy.alkhiami.de — CopyPaste. Move text from one machine to another.
• downloads.alkhiami.de — Download portal for my apps. myownauth gated.
• finance.alkhiami.de — A manual finance ledger. Admin gated.
• firstapp.alkhiami.de — An early one. Spring Boot behind Apache.
• gamebot.alkhiami.de — Self-play DQN in plain NumPy, with a local LLM commentating.
• games.alkhiami.de — Browser games hub. Rust and Axum behind SvelteKit.
• games-dev.alkhiami.de — The staging copy. Its backend is switched off on purpose.
• grammar.alkhiami.de — Make Text Better AI. Grammar correction.
• gym.alkhiami.de — GymPro. Angular on a Spring Boot backend.
• livewall.alkhiami.de — Live wallpapers.
• makemusic.alkhiami.de — MakeMusic Studio. Axum and SQLite.
• movetogermany.alkhiami.de — A guide for people moving to Germany, which I did.
• music.alkhiami.de — My music app. Spring Boot behind an Angular front end.
• news.alkhiami.de — A news reader, served by the games Axum backend.
• picedit.alkhiami.de — AI photo editor on the Gemini image API. Admin gated.
• restaurant.alkhiami.de — A restaurant site.
• review.alkhiami.de — A rate-me app. It taught me something about feedback.
• shop.alkhiami.de — E-commerce: Angular 17, Spring Boot 3, Docker, Kubernetes.
• surprise.alkhiami.de — Date Surprise. Picks something to do.
• travel.alkhiami.de — TravelScout. Flexible-date hotel and flight deals.
• vim.alkhiami.de — A Vim trainer. Angular.
• youtubeintro.alkhiami.de — Generates the animated intro for my videos.

Academies

• ai.alkhiami.de — AI Academy. Artificial intelligence and machine learning.
• architecture.alkhiami.de — Architecture Academy. Software architecture.
• chem.alkhiami.de — Chemistry Academy.
• code.alkhiami.de — Code Academy. Programming lessons and games.
• docker.alkhiami.de — Docker Academy. Docker and Kubernetes.
• history.alkhiami.de — History Academy. World history, lessons and games.
• jura.alkhiami.de — Jura-Akademie. Grundlagen des deutschen Rechts.
• learnclaude.alkhiami.de — Claude Academy. Claude AI and the Claude Code CLI.
• llm.alkhiami.de — LLM Academy. How large language models actually work.
• math.alkhiami.de — Math Academy. Linear algebra, lessons and games.
• physics.alkhiami.de — Physics Academy.
• quantum.alkhiami.de — Quantum Academy. Quantum mechanics and computing.
• security.alkhiami.de — Security Academy. Security and pentesting.

Infrastructure

• analytics.alkhiami.de — Apache traffic dashboard. Admin only.
• ci.alkhiami.de — The entry point for the Actions runners.
• confluence.alkhiami.de — A wiki.
• cv.alkhiami.de — The CV itself, rebuilt from LaTeX whenever I change it.
• domains.alkhiami.de — Every domain I hold, and where it points.
• estate.alkhiami.de — A dashboard over every machine and app. VPN only.
• git.alkhiami.de — Forgejo. Everything here is pushed to it. VPN only.
• monitor.alkhiami.de — System monitor.
• nextcloud.alkhiami.de — My own file sync.
• sites.alkhiami.de — An index of every site here, rebuilt every 15 minutes.
• webmail.alkhiami.de — Gmail and alkhiami.de in one inbox. Admin gated.

Built and hosted by me, on one of the machines in the city.