root@vectraarch.live:~/$ cd ~/

§ Systems Engineering · Trainer · Coach · Mentor · Author · Sculptor

Vectra Arch

Forge the System.
Sculpt the World.
Write the Story.
Build the Future.
A constellation of studios.
Infrastructure, writing, and the discipline of
building tech things that last. Technological art.
IdentityConstellation of Studios
Core FocusSystems & Technology & Art
EnvironmentLinux / Open Systems
StatusOperational / Operational Since 2026
Studios ↓ Press
§ Studios · Information
§ Studios · Authentication
§ Studios · Access Manager
§ Studios · Editing and Publishing
§ Studios · App Node Studios
§ Schalk Johan Koen · Root Identity
No redactions
25+
Years on
Linux
age 18 → now · zero downtime
13
Times Near
Exit
stress-tested · still running
04
Total
Rebuilds
from zero each time
03
Children
Single Father
the reason all of it runs
schalk@vectraarch:~ $
whoami
Schalk Johan Koen · Systems Engineering · Trainer · Coach · Mentor · Author · Sculptor · Father
uptime --human
running since 1984 · origin: Keetmanskoop, Namibia · current: South Africa · uptime: 42 years
cat /proc/resilience
total_rebuilds: 4 · near_exits: 13 · current_status: operational
ls -F /home/schalk/
lab/  studio/  forge/  compass/  children/  vectraarch/
cat /home/schalk/children/README
# This is why the system keeps running.
# Three children. Single father. All systems load-bearing.
§ Human Systems · The Compass
NLPPractitioner
Neuro-Linguistic Programming

NLP at practitioner level — the study of how language shapes cognition and how cognitive patterns can be deliberately restructured. The same systems thinking that governs infrastructure governs behaviour. Input, processing, output. The architecture is identical. The material is human.

CoachingMastery
High-Drive Mentorship & Life Strategy

Certified life coach, coaching manager, and wealth coach. I apply structured thinking to how people make decisions, set goals, and allocate resources. While businesses may pivot, the framework of human optimization is permanent. I mentor those operating at high-load capacity.

PhilosophyCore
Information and Value Flow Between People.

Vectra Arch is about how things move — information, intent, value, trust. The same way a well-configured network routes packets efficiently and without loss, good mentorship routes people toward clarity without distortion. The channel matters. The protocol matters. The signal must arrive intact.

Origin1984
Born in Namibia. Raised in South Africa.

I did not choose the environment I was initialised in. But I learned early that the environment is not the constraint — the architecture of how you respond to it is. Namibia gave me a starting point. South Africa gave me the conditions. What I built from those conditions is entirely my own.

Linux2002
Linux Administrator at 18. Every Layer Since.

At 18 I was handed a terminal and a responsibility. I have not put either down since. From onsite support technician to remote helpdesk, from Linux administrator to Linux engineer, from senior Linux engineer to DevOps engineer, to senior systems engineer — now Principal Engineer.

Twenty-four years. Not a career path — a compounding architecture. Each role was a deeper understanding of how systems hold together under load, and how they fail. I have experienced both intimately.

Resilience×4
Four Total Rebuilds. Thirteen Near Exits.

I have lost everything four times. Not metaphorically — materially, structurally, completely. Each time the stack was wiped and the rebuild began from zero. No snapshots. No rollback. Just the discipline of knowing how to lay foundations when the ground beneath you is unstable.

Thirteen times I came close to not being here. I am not going to make that sound heroic. It is not heroic — it is a fact of a life lived at the edge of its own load tolerance. What I can say is this: each time, the system came back online. More hardened. More deliberate. Better instrumented.

Writing2013
Thirteen Years of Literary Development.

I started writing in 2013 because the alternative was silence. I had things to say that had no other format. The stories I carry — the people I have lost, the systems that failed, the ones that held — needed to exist somewhere outside of me.

Following the 2024 completion of Human Exposure and the lessons of a 2025 self-publishing attempt, the focus has shifted to the Book Forge. The infrastructure for storytelling is now as robust as the systems I engineer. The work is finding its readers. That is what this architecture is for.

Sculpture2015
Clay. Precision. A Different Kind of Engineering.

In 2015 I picked up clay. What followed was over a decade of working at the intersection of patience and exactness. Sculpting is engineering for people who need to feel the resistance of the material. You cannot automate it. You cannot abstract it. Every millimetre is a decision.

From anatomically precise human skulls to the philosophy of the Studio, the discipline remains the same: the same mindset that keeps a Linux environment stable keeps the anatomy accurate. Measure twice. Commit once.

FamilyAlways
Single Father. Three Children. The Only Load That Matters.

Everything above is context. The reason the system keeps running is this: three children who need a father who does not stop. I am a single parent. Every line of code, every page written, every sculpture completed, every system engineered — it all runs because of them. Not for legacy. For now. For them, today.

This is not a legacy project. This is an active obligation. The infrastructure I maintain most carefully is the one they live inside.

§ Fabric · Technical Infrastructure
root@vectraarch.live:~$ cat /proc/stack
OSUbuntu 24 LTS · Self-hosted VPS
WebNginx · Single config · SSL via Certbot
RuntimeNode.js · PM2 · PostgreSQL 16
AutomationAnsible · Bash · Custom playbooks
Current roleSenior Infrastructure Engineer
Since2002 · Age 18
25+
Years on
Linux
zero career downtime
05
PM2
Processes
all online · all persistent
01
Nginx
Config
vectraarch.live · all locations
01
PostgreSQL
Database
bookforge · multi-user
01 Technical Progression · 2002 → 2026
Origin2002
Linux at 18. Every Layer Since.

Started as an onsite Linux support technician at 18. From there: remote helpdesk, Linux administrator, Linux engineer, senior Linux engineer, DevOps engineer, senior systems engineer — now Senior Infrastructure Engineer. Twenty-five years of compounding depth, not breadth for its own sake.

AutomationActive
Ansible · Bash · Infrastructure as Code

Ansible playbooks for automated software and configuration management, full environment provisioning, and OS hardening. Manual repetition is a failure mode, not a workflow. Every repeatable task has a playbook. Every playbook has been tested under load.

MonitoringActive
Custom Discovery · DB · VPN Monitoring

Bespoke monitoring with custom discovery rules for database and VPN monitoring. Not templates — alerting logic built around real failure modes encountered in production. The difference between a dashboard and an early-warning system is the person who wrote the discovery rules.

HardeningAlways
Ubuntu Hardening as a Discipline.

Ubuntu hardening is not a checklist. Understand the attack surface, reduce exposure, monitor what remains. Rate limiting on all public endpoints. Tokens server-side only. SSL on every subdomain. Security headers on every response. The philosophy of securing a server and the philosophy of structuring a life are not as different as they sound.

02 Live Infrastructure · What's Actually Running
NginxLive
Single Config · All Locations · Certbot SSL

Nginx running a single unified config — vectraarch.live — managing all site locations from one file. Each path has its own location block, SSL certificate via Let's Encrypt Certbot, HSTS headers, and server_tokens off. Static sites serve directly from web root. Node.js applications proxy through internal ports. Rate limiting applied at the nginx layer for all public form endpoints.

PM25 Processes
VectraArchForge · VectraArchConduit · VectraArchContact · VectraArchIdentity · VectraArchLegacy

Five Node.js processes managed by PM2 with startup persistence and fork mode. All running as root, all online. VectraArchForge is the full writing management application. VectraArchConduit is the automation and social dashboard. VectraArchContact handles all Telegram contact form submissions server-side. VectraArchIdentity is the Identity Bridge API. VectraArchLegacy runs the lifestyle management application.

PostgreSQL16
bookforge Database · Multi-Table · Multi-App

PostgreSQL 16 running locally. Single database — bookforge — with tables for users, books, entries, and conduit_log. The users table handles both Google OAuth identities and manual credential accounts with role-based access. The books table drives both the Book Forge application and the Press static catalogue rebuild. The conduit_log table records every automation trigger fired through the Conduit Hub dashboard.

root@vectraarch.live:~$
pm2 list
┌────┬───────────────────────┬─────────┬────────┬───────────┬──────────┬──────────┐
│ id │ name │ version │ uptime │ status │ cpu │ mem │
├────┼───────────────────────┼─────────┼────────┼───────────┼──────────┼──────────┤
│ 9 │ VectraArchConduit │ 1.0.0 │ 12h │ online │ 0% │ 90.4mb │
│ 11 │ VectraArchContact │ N/A │ 18h │ online │ 0% │ 76.3mb │
│ 8 │ VectraArchForge │ 1.0.0 │ 19h │ online │ 0% │ 111.4mb │
│ 12 │ VectraArchIdentity │ 1.0.0 │ 12h │ online │ 0% │ 80.3mb │
│ 10 │ VectraArchLegacy │ 1.0.0 │ 12h │ online │ 0% │ 87.0mb │
└────┴───────────────────────┴─────────┴────────┴───────────┴──────────┴──────────┘
ls /etc/nginx/sites-enabled/
vectraarch.live
psql -d bookforge -c "\dt"
books     conduit_log   entries    users
certbot certificates | grep Domains
certificates valid · auto-renew enabled · managed via vectraarch.live config
03 Security Layer · What's Hardened
01 · Transport
SSL / HSTS
Let's Encrypt · Certbot · Auto-renew

All paths served over HTTPS. SSL certificates managed by Certbot with automatic renewal. HSTS headers enforce HTTPS with one-year max-age. Managed within the single vectraarch.live Nginx config.

02 · Tokens
Server-Side Credentials
VectraArchContact · Never Client-Side

All API tokens and credentials — Telegram bot, DB passwords, session secrets — are held server-side only. VectraArchContact handles all external API calls. No secrets in any HTML source, ever.

03 · Rate Limiting
Nginx Rate Zones
contact zone · global zone · burst control

Two rate limit zones defined at the Nginx http level. Contact endpoints limited to 5 requests per minute per IP with burst of 3. Global zone applied to Forge and any authenticated interfaces.

04 · Auth
2FA · Google OAuth
TOTP via otplib · Passport.js

VectraArchForge supports TOTP-based 2FA for manual accounts and Google OAuth for federated identity. Session-based auth with secure, HttpOnly, SameSite cookies. Role-based access control enforced at every route.

05 · Headers
Security Headers
X-Frame-Options · X-Content-Type · Referrer

X-Frame-Options SAMEORIGIN, X-Content-Type-Options nosniff, Referrer-Policy strict-origin-when-cross-origin, and server_tokens off applied across all Nginx location blocks. No version disclosure.

06 · OS
Ubuntu Hardening
Ubuntu 24 LTS · Ansible-managed

Ubuntu 24 LTS with Ansible-managed configuration. Automated OS and package updates. Minimal attack surface — only necessary services running. Nginx is the only public-facing listener.

§ Keystone · Architecture & Constellation
root@vectraarch.live:~$ cat architecture.md
VPSUbuntu 24 LTS · Single server
Processes5 PM2 apps · VectraArch* namespace
DatabasePostgreSQL 16 · bookforge
NginxSingle config · vectraarch.live
Security2FA · SSL · Certbot · server-side tokens
01 Constellation Map · All Sites
vectraarch.live
Home
Static HTML · va.css · Nginx

Central hub. Personal bio, human systems content, studio grid linking all sites. Serves the global stylesheet at /shared/va.css used by every path. Contact form routes through VectraArchContact.

vectraarch.live/#fabric
Fabric
Static HTML · Infrastructure portfolio

Technical infrastructure documentation. Career progression, live stack, security layer, and full constellation map. References the real PM2 processes and PostgreSQL tables running on this server.

forge.vectraarch.live
Book Forge
VectraArchForge · Node.js · Express · PostgreSQL · PM2

Full-stack writing management application proxied by Nginx. Multi-user, multi-book. Google OAuth + manual auth + TOTP 2FA. Publishes books to /press by writing static HTML to the press web root.

conduit.vectraarch.live
Conduit Hub
VectraArchConduit · Node.js · PostgreSQL · PM2

Automation and social dashboard. Queries bookforge DB directly. Shows published volumes, fires Telegram announcements per book, logs all trigger events to the conduit_log table.

vectraarch.live/press
Press
Static HTML · Generated by VectraArchForge

Public publishing catalogue. Not a CMS — a static HTML file written by VectraArchForge's rebuildPressIndex() on every publish/unpublish event. No server-side logic required to serve it.

vectraarch.live/#foundation
Foundation
Static HTML · Central auth routing

Central login hub for the constellation. Routes to the correct auth endpoint per service — VectraArchForge manual login, Google OAuth. Single point of entry for all authenticated services.

vectraarch.live/#kinetic
Kinetic
Static HTML · Visual portfolio

Visual work hub. Sculpture portfolio, Bo7 coaching platform, Press catalogue, Book Forge. Connects the visual and creative output of the constellation.

vectraarch.live/volition
Volition
Static HTML · Builder's log

Process journal. The ongoing written record of building this ecosystem — decisions, failures, rebuilds, lessons. Distinct from Press (published fiction) and Kinetic (visual work).

vectraarch.live/bo7
Bo7
Static HTML · Booking via VectraArchContact

CoD Black Ops 7 coaching platform for ZenithB_Actual. Coaching packages, Discord integration, booking form routing through /api/booking on VectraArchContact.

legacy.vectraarch.live
Legacy
VectraArchLegacy · Node.js · PM2

Full-stack lifestyle management application. Financial tracking, integrated calendar, multi-user with secure authentication, collaborative data sharing. Runs over HTTPS exclusively.

vectraarch.live/api
Identity API
VectraArchIdentity · Node.js · PM2

VectraArch Identity Bridge. Authentication coordination across the constellation. All external API tokens held server-side only.

vectraarch.live/#keystone
Keystone
Static HTML · Architecture docs

The central locking piece — full technical architecture of the VectraArch constellation documented in one place.

02 VectraArchForge · Application Architecture
StackNode.js
Express · PostgreSQL · EJS · Passport · otplib · Multer

Node.js and Express backend proxied by Nginx. PostgreSQL 16 database via the pg driver. EJS server-side rendering for all views. Passport.js handling both Google OAuth 2.0 and manual credential authentication. TOTP-based 2FA via otplib with QR code setup flow. Multer handling cover image uploads to the public/uploads directory.

SchemaMulti-Table
users · books · entries · conduit_log

The users table stores both Google OAuth identities and manual accounts (prefixed m_) with name, email, type, role, status, login count, and TOTP secret. The books table links to users via owner_id, stores title, cover_url, and published flag. The entries table holds all manuscript content, characters, factions, geography, research, science, world rules, items, and timeline entries — all keyed by book_id and category. The conduit_log table records every announcement trigger fired from VectraArchConduit.

PublishingStatic Gen
rebuildPressIndex() — No CMS Required

When any book is published or unpublished, VectraArchForge calls rebuildPressIndex() — a function that queries all published books with author details and manuscript entry previews, groups them by author, and writes a fully self-contained HTML file to the press web root. No build pipeline. No CMS. No external dependencies. PostgreSQL query → Node.js template → file write. Press is always current.

Export5 Formats
DOCX · PDF · EPUB · Markdown · Plain Text

VectraArchForge exports any volume in five formats. DOCX via the docx library with proper heading levels and paragraph styling. PDF via PDFKit with A4 layout and justified text. EPUB via epub-gen-memory with chapter structure. Markdown with section dividers. Plain text with ASCII formatting. All generated on-demand, streamed directly to the browser — nothing written to disk.

03 Data Flow · How the Systems Connect
root@vectraarch.live:~$
cat data_flow.md
 
CONTACT FORM
vectraarch.live → POST /api/contact → VectraArchContact → Telegram API
vectraarch.live/bo7 → POST /api/booking → VectraArchContact → Telegram API
 
AUTHENTICATION
vectraarch.live/#foundation → https://forge.vectraarch.live/auth/manual → bookforge.users
vectraarch.live/#foundation → https://forge.vectraarch.live/auth/google → Google OAuth → bookforge.users
 
PUBLISHING PIPELINE
VectraArchForge → POST /book/:id/publish → bookforge.books → rebuildPressIndex()
rebuildPressIndex() → bookforge query → HTML template → /var/www/vectraarch.live/press/index.html
 
ANNOUNCEMENTS
VectraArchConduit → POST /announce → Telegram API → conduit_log INSERT
 
SHARED ASSETS
all paths → GET vectraarch.live/shared/va.css → Nginx static serve
§ Foundation · Auth & Access
IdentityCentral
Central Authentication Hub · Choose Your Service

Foundation is the single point of entry for all authenticated services in the VectraArch constellation. Identity management, 2FA, and Google OAuth are coordinated here — without exposing credentials at the client layer. Authorised entry only.

Book Forge
Write · Publish
Manual auth · Google OAuth · 2FA

Full-stack writing management. Access via Foundation for manual credentials or Google OAuth.

→ Authenticate via Google
Conduit
Management
Manual auth · Admin only

Automation and social dashboard. Manual credentials required.

→ Authenticate
Legacy
Lifestyle App
Own authentication system

Lifestyle management application with its own authentication layer.

→ Go to Legacy
Forge · Manual Auth
Username & Password
Manual credentials · 2FA

Sign in with a manual account and TOTP-based two-factor authentication.

→ Manual Login
§ Kinetic · Visual Work
root@vectraarch.live:~$ ls -la visual/
DisciplineSculpture · Master Level
MediumClay · Anatomical · Figurative
Since2015 · 10 Years
GamingBo7 · Call of Duty · Coaching
10+
Years
Sculpting
Master
Skill
Level
Clay
Primary
Medium
01 Sculpture
Catalogue being built
Clay2015
Clay. Precision. A Different Kind of Engineering.

In 2015 I walked into an art studio after work and picked up clay. What followed was ten years of working at the intersection of patience and exactness. Sculpting is engineering for people who need to feel the resistance of the material. You cannot automate it. You cannot abstract it. Every millimetre is a decision.

Most recent work: an exact-scale human skull — hand-sculpted, anatomically precise. The same discipline that keeps a Linux environment stable keeps the anatomy accurate. Measure twice. Commit once.

02 Legacy · Lifestyle App
Legacy
§ Studio · VectraArchLegacy · Node.js · Self-Hosted
LegacyLifestyle

A full-stack lifestyle management application.
Financial tracking, integrated calendar, multi-user authentication.
Collaborative data sharing. Built on Linux. Runs over HTTPS exclusively.

Open Legacy
03 Gaming · Bo7 Coaching
Bo7
§ Studio · Call of Duty · Black Ops 7 · Coaching
Bo7Coaching

ZenithB_Actual · CoD Black Ops 7 coaching platform.
Coaching packages, Discord integration, booking via VectraArchContact.
Operated by the next generation.

Visit Bo7
04 Published Work · Press
Press
§ Studio · Author Publishing Platform
PressCatalogue

The public publishing arm of Vectra Arch.
Volumes across fiction, thriller, horror, and speculative work.
Forged in VectraArchForge. Released to the world.

Browse Catalogue
05 Book Forge · Writing Management
Forge
§ Studio · Self-Hosted · Node.js · PostgreSQL
BookForge

A full-stack writing management system built from scratch.
Multi-user, multi-book. Manuscript, characters, factions, geography,
research, timeline — every layer of a novel, structured and owned.

Open Forge
§ Volition · The Builder's Log
root@vectraarch.live:~$ cat builder.log
What this isProcess journal · Builder's log
Not thisFiction (→ Press) · Visual (→ Kinetic)
FrequencyWhen something worth writing happens
AudienceAnyone building something real
§ What This Space Is For
PurposeOngoing
The Builder's Log. Not a Blog. Not a Brand.

Volition is where I write about the process of building the VectraArch constellation — the decisions I made, the ones I got wrong, what I learned from both. This is distinct from Press, which publishes finished fiction, and from Kinetic, which showcases visual work. This is the working document. The commit history of a life under construction.

It is not optimised for an audience. It is not a content strategy. It is a record — because the discipline of writing down what you built and why is the same discipline as building it in the first place. Systems need documentation. This is mine.

ScopeEverything
Infrastructure. Writing. Sculpture. Fatherhood. Failure.

The scope is the whole system. Why I built Book Forge instead of using an existing tool. What broke when I migrated the database. How I approached the Nginx single-config setup. What it costs to rebuild from zero four times and keep going anyway. The architecture of a life is not separate from the architecture of the systems it runs on. Both belong here.

01 Log Entries · Chronological
Most recent first
Mapping What Was Already Built

The constellation had been running for weeks before I actually drew what it was. Five PM2 processes. One Nginx config. One database. SSL on everything. All of it live, all of it working — and none of it mapped anywhere a person could look at and understand in one read.

So I drew it. A full architecture diagram: the VPS as the outer container, Nginx routing at the top, the split between static HTML paths and PM2-managed Node.js processes, PostgreSQL sitting in the middle feeding both VectraArchForge and VectraArchConduit, the auto-generation pipeline that writes Press into existence on every publish. Every path. Every process. Every connection.

Then I updated Fabric. The infrastructure portfolio had the stack documented — career progression, live processes, security layer — but it was missing the thing that makes the stack legible: the full picture of every site and how they relate. New section §03 maps all paths, all five Node.js apps with their real process names and memory footprints, Press called out as a generated output not a running process. The shared foundation layer written out clearly.

The reason for the update is the same reason documentation always gets updated: the system had outgrown its description. When you build fast, the code gets ahead of the record. This entry is the record catching up. The diagram exists. Fabric reflects reality. Both are better for it.

Building the Constellation

Five PM2 processes. One Nginx config. One PostgreSQL database. SSL on everything via Certbot. A contact proxy so credentials never touch the client. A publishing pipeline that writes static HTML on every book release. A dashboard that fires Telegram announcements and logs every trigger.

This is what VectraArch is technically. But the more honest description is this: it is what happens when a senior infrastructure engineer decides to build his own creative and commercial infrastructure the same way he would build anything else — properly, with documentation, with security, with the discipline of someone who has been doing this for 25 years.

The first entry in this log is the log itself. The constellation is live. Everything is documented. Now the work of filling it begins.

Why I Built Book Forge

I have been writing since 2013. For most of that time I used whatever was available — word processors, online tools, scattered files. None of it was designed for how I actually work. I needed something that understood the full structure of a novel: manuscript chapters, character codex, factions, geography, research, timeline, world rules. Not just a text editor.

So I built it. Node.js, Express, PostgreSQL, EJS. Multi-user so my son could have his own account. Multi-book because I have more than one manuscript. Export to DOCX, PDF, EPUB, Markdown, and plain text because I do not want to be locked into any format. Publish to Press with a single click because the pipeline between writing and publishing should not require a separate tool.

The infrastructure engineer and the author are not two different people. They are the same discipline applied to different materials.

Why I Built Legacy

Financial Tracking: Log income and expenses with ease. The application provides a detailed table view, a monthly budget calculator, and options to filter, search, and bulk-import transactions.

Integrated Calendar: A shared, interactive calendar that automatically displays financial entries and allows users to add custom personal events. Events are color-coded based on user preference.

User Management & Profiles: Supports multiple users with secure authentication. Users can customize their profiles with a picture, contact details, and a personal event color.

Collaborative Data Sharing: An admin user can grant view-only access to the financial and calendar data of other users, making it perfect for household management.

Secure Communication: The backend runs exclusively over HTTPS. Passwords are securely hashed. A full-stack, single-page web application for personal and collaborative life management.

§ Entry incoming · Being written
§ The log continues