Mathieu TairiMATSYS

Founder of MATSYS22 years old

Mathieu Tairi

  • Systems & Network Technician
  • Web Developer
  • AI Automation

Passionate about server infrastructure, network deployment and building tailor-made web solutions.

Skills map

The whole technical chain, from the network cable to the web application.

My name is Mathieu Tairi and I'm 22. I work at every link in the chain: from hardware and local networks to containerised Linux servers and the web applications they host.

As the founder of MATSYS, a French micro-enterprise, I put these skills to work in IT support, network deployment and website creation.

Name
Mathieu Tairi
Age
22
Roles
Systems & Networks · Web Development · AI Automation
Company
MATSYS, micro-enterprise
Domain
matsys.fr
Homelab
Ugreen DXP2800 NAS · Intel N100 · RAID 1

Technical skills

The technologies I use to design, deploy and maintain my projects.

Infrastructure & Servers

Containerising, exposing and securing self-hosted services.

  • Linux (Ubuntu)
  • Docker
  • Docker Compose
  • Nginx Proxy Manager
  • Cloudflare Tunnels
  • NAS (UGOS Pro)

Web Development

Full-stack applications with authentication, databases and third-party APIs.

  • Next.js 14
  • React
  • Prisma
  • NextAuth
  • REST API (Google Calendar)

Networks & Hardware

From custom-built PCs to local networks, all the way to domain name management.

  • Hardware maintenance (custom PCs)
  • Local networks
  • Domain names (OVH, Zimbra)

Featured projects

A focus on architecture: how each building block fits together, from the visitor all the way to the server.

eth0Infrastructure · Self-hosting

Homelab & Hosting Infrastructure

Deployment of a home server on a Ugreen DXP2800 NAS (Intel N100, RAID 1). Multiple services containerised with Docker (Jellyfin, Mail Archiver, PufferPanel), with external access secured through Nginx Proxy Manager and Cloudflare Tunnels.

  • Ugreen DXP2800
  • Intel N100
  • RAID 1
  • Docker
  • Nginx Proxy Manager
  • Cloudflare Tunnels

This site is hosted on this infrastructure

ArchitecturePath of a request
  1. InternetVisitors
  2. Cloudflare TunnelsSecure external access
  3. Nginx Proxy ManagerReverse proxy
  4. Docker containers
    • Jellyfin
    • Mail Archiver
    • PufferPanel
  5. Ugreen DXP2800 NASIntel N100 · RAID 1

eth1Full-stack · Booking

“Agenda” Web App Zen by K'

Full-stack development of a complete booking system for a massage salon. Stack: Next.js 14, NextAuth for authentication, Prisma for the database, and Google Calendar API integration. Everything is deployed with Docker.

  • Next.js 14
  • NextAuth
  • Prisma
  • Google Calendar API
  • Docker
ArchitecturePath of a booking
  1. ClientsBrowser · mobile
  2. CloudflareHTTPS · anti‑DDoS · encrypted tunnel
  3. Ugreen NASDocker · no open ports
  4. Next.js 14
    • UI & API
    • NextAuth (Google, email)
  5. Data & services
    • PostgreSQL 16 · private network
    • Google Calendar API
    • Emails (SMTP)

Security

  • Encrypted all the way to the NAS
  • No open ports on the router
  • Database not exposed
  • Hashed passwords (bcrypt)
  • Email verification
  • Brute-force protection
  • Session-protected pages
  • CSP & HSTS headers

eth2Self-hosting · Docker

Game Servers PufferPanel · Docker

Dedicated game servers hosted on my NAS: modded Minecraft “All The Mods 6” and a GTA V Roleplay server running on FiveM. Each server runs in its own Docker container, managed from PufferPanel, with its own dedicated network ports and a whitelist: only approved players can join. The admin panel goes through a Cloudflare tunnel protected by Cloudflare Access: only I can reach it.

  • PufferPanel
  • Docker
  • Cloudflare Tunnel
  • Cloudflare Access
  • Whitelist
  • All The Mods 6
  • FiveM
ArchitectureTwo separate paths

Administration — restricted to me

  1. AdministratorMe, from anywhere
  2. Cloudflare AccessAuthentication · restricted access
  3. Cloudflare TunnelEncrypted · no open ports
  4. PufferPanelDocker container on the NAS
  5. Game serversConsole · files · whitelist

Players

  1. PlayersMinecraft / FiveM client
  2. Dedicated game portsOne port per server
  3. WhitelistApproved players only
  4. Game servers
    • Minecraft · All The Mods 6
    • GTA V Roleplay · FiveM
  5. Ugreen NASIsolated containers · RAID 1

Security

  • Restricted panel (Cloudflare Access)
  • Player whitelist
  • Administration with no open ports
  • One isolated container per server
  • Data on RAID 1 on the NAS

eth3Entrepreneurship

MATSYS Micro-enterprise · matsys.fr

I founded my own micro-enterprise, specialising in IT support, network deployment and website creation.

  • IT supportDiagnosis & repair
  • Network deploymentInstallation & configuration
  • Website creationTailor-made

A project, a breakdown, a network to deploy?

IT support, network deployment or website creation: tell me what you need by email.

Protocol
Email
Services
IT support · Networking · Websites
Send an email