Selected projects.

A multi-tenant platform for stables: horses, health records, feeding, calendars, tasks, finance and payments. The backend is a set of Spring Boot services behind a gateway that handles routing, request signing and bot protection, with a Spring Cloud Config server holding configuration out of the images.

My work runs from architecture decisions to the code that implements them: service boundaries, the tenant and subscription model, notifications over e-mail, push and WebSocket, S3-backed storage with image processing, and the platform upgrades that keep it current — most recently onto Java 25 and Spring Boot 4.1.

E-invoicing is becoming mandatory for Belgian companies, and the access points in between mostly charge for it. Let’s Peppol builds the proxy, the dashboard and the KYC component needed to let a company on the network for free, and runs no analytics on what its users send.

The hard part is proving a legal entity is who it claims to be without charging for the privilege — solved here with Belgian eID cards, a qualified electronic signature and a registry check. My contributions run front to back: hardening the OAuth2 implementation, the accountant registration and customer-linking flow, the login path, and the upgrade to Java 25 and Spring Boot 4.1.

A window-cleaning firm with a Webflow site that shipped full-size photos to phones, lazy-loaded the one image its largest-contentful-paint was measured on, and published the owner’s private phone number in structured data where scrapers read it first.

Rebuilt as a static Astro site: images resized and re-encoded at build time with a srcset per breakpoint, a contact form posting to a Lambda Function URL with a honeypot instead of a third-party captcha, accurate schema.org markup, and a two-pass S3 sync that caches fingerprinted assets forever while keeping HTML revalidating. It now costs cents a month to run.

TODO — a paragraph on the work: what the system does, what you own, what it runs on.