Sysadmin

Build NTP configs for chrony, ntpd, systemd-timesyncd, and Cisco devices with source parsing, access checks, fallback warnings, and copy-ready output.

Turn key-value rows into reviewed .env and .env.example files with quote safety checks, duplicate-key warnings, and masked secret previews.

Generate an Apache .htaccess draft from presets and ordered rule sections, then review warnings, counts, and saved JSON before staging changes.

Generate a static Ansible INI inventory from host rows, group variables, and parent groups, with validation warnings and a host ledger.

Generate an Apache vhost draft for static, PHP-FPM, or proxy sites, with TLS settings, required modules, warnings, and activation checks.

Generate BGP prefix-list configuration from CIDR rows, with Cisco, Arista, FRR, SONiC, and Junos syntax plus shadowing checks.

Plan backup repository capacity from data size, retention, change rate, copy tiers, reserves, raw overhead, and budget runway checks.

Estimate backup restore time from logical size, compression, tested throughput, fixed recovery phases, and RTO margin checks.

Plan a GFS backup rotation from full and incremental sizes, then compare net storage, raw capacity, retention horizon, and audit warnings.

Build a capacity upgrade brief from utilization growth, threshold timing, lead time, and ranked options with charts and approval-ready notes.

Estimate Ceph usable capacity from node sizes, replica or erasure-code protection, failure-domain reserve, nearfull policy, and PG hints.

Generate Cisco IPv4 ACL commands from flow rows with wildcard conversion, sequence planning, safety review tables, and platform syntax checks.

Generate Cisco interface config for routed, access, or trunk ports with VLAN checks, syntax profiles, command audit, and copy-ready output.

Audit cloud inventory tags, find resources missing required keys or allowed values, and export coverage, gap ledgers, charts, and cleanup queues.

Build cloud-init version 2 network-config YAML for static VM interfaces with CIDR addresses, routes, DNS, MAC matching, and validation warnings.

Compare intended and observed config text, spot changed, missing, extra, and priority drift, and build an exportable remediation ledger.

Estimate container image pull time from size, cache coverage, bandwidth, pull lanes, unpack speed, retries, and rollout optimization levers.

Build crontab entries for user or system files from presets, pasted lines, or manual fields, with syntax checks, warnings, and install notes.

Plan a DHCP scope from subnet, pool, exclusions, reservations, growth, lease time, and utilization headroom before clients run short.

Look up DNS records for a domain, host, or IP through Google or Cloudflare DoH with TTL charts, DNSSEC flags, and raw responses.

Build a disaster recovery runbook from RTO, RPO, owners, dependencies, recovery steps, validation evidence, and readiness gates for review.

Check Docker Compose healthchecks for missing probes, weak timing, readiness blockers, restart gaps, and role-based coverage before handoff.

Generate a Filebeat Grok pattern from one sample log line, with ECS field mapping, sample-match coverage, and optional ingest pipeline JSON.

Estimate GlusterFS usable capacity from brick sizes, replica or dispersed layout, arbiter sizing, stranded space, and recovery headroom.

Audit HA pair rows in your browser for active/standby drift, VIP mismatches, stale sync, heartbeat gaps, and priority conflicts with clear failover findings.

Audit hostnames, URLs, and CSV rows for DNS-safe syntax, naming regex drift, lowercase policy, required suffixes, and duplicates.

Convert storage IOPS, MB/s, Mbps, and GB/day from block size and active hours, then compare ceiling headroom, block pressure, and cloud disk fit.

Plan IPv4 subnets from a parent CIDR, size host requirements, spot alignment gaps, and review fit, headroom, and charts before rollout.

Plan IPv4 renumbering waves from host mappings, prefix checks, DNS and DHCP timing, with readiness findings, rollback steps, and exportable runbooks.

Plan IPv4 subnet allocations from a parent CIDR, size VLSM child networks from host demand, and review gaps, headroom, gateways, and overflow.

Convert one IPv6 value between compressed and expanded forms, with hextet, binary, reverse-DNS, prefix, zone, and dotted-tail checks.

Plan an IPv6 subnet from an address or CIDR, with canonical ranges, child-prefix counts, reverse-DNS alignment, and EUI-64 samples.

Turn incident action rows into an owner follow-up ledger with due-date states, blocker warnings, missing-field checks, and charted workload.

Calculate IPv4 CIDR ranges, usable hosts, masks, wildcard masks, capacity fit, and VLSM splits with special-use range warnings.

Split an IPv4 parent block into equal CIDR child subnets, then compare host capacity, gateway slots, special-use ranges, and forecast charts.

Plan Kafka topic partitions from throughput, event rate, consumer parallelism, replication footprint, and rounded broker capacity checks.

Generate a Keepalived VRRP config with VIP rows, peer transport, health checks, directive audit, and failover timing before copying.

Plan a Kubernetes replica ceiling from node allocatable resources, pod requests, surge, PDB, failure drills, zone loss, and pod IP limits.

Generate Kubernetes Deployment YAML with Service routing, probes, resources, security context, rollout policy, and HPA or PDB review warnings.

Find Kubernetes manifests that use APIs removed by a target version, with upgrade blockers, migration queue rows, and replacement snippets.

Analyze Kubernetes event output in your browser, grouping Warning reasons, object hot spots, repeat counts, and timeline bursts from kubectl text or JSON.

Build Kubernetes NetworkPolicy YAML from pod selectors and ingress or egress allow rows, with peer checks, rollout commands, and a flow map.

Check Kubernetes workload YAML for risky securityContext settings, inherited pod defaults, Pod Security blockers, and remediation patch cues.

Check Kubernetes manifests for missing CPU, memory, and storage requests, invalid limits, QoS clues, and scheduler footprint gaps.

Check Kubernetes version skew before a minor upgrade, including API server HA windows, node lag, kubectl fit, staged hops, and blockers.

Check change schedules for overlapping maintenance windows, blackout hits, owner collisions, and concurrency spikes with review-ready ledgers.

Generate Netplan YAML for a static Ubuntu interface with routes, DNS, MAC matching, MTU options, and validation warnings before host changes.

Build a network change plan with readiness gates, rollback checks, run order, residual risk, and a cutover profile for review-ready tickets.

Estimate network throughput and transfer time from link speed, RTT, packet loss, TCP windows, streams, and packet-rate limits with bottleneck checks.

Generate an NGINX server block for static, PHP-FPM, or proxy hosting with TLS redirects, upstream options, warnings, and deployment checks.

Build an OpenVPN client profile from endpoint, routing, authentication, cipher, TLS, and certificate choices with review warnings before import.

Generate PXELINUX, iPXE, and GRUB boot menus from CSV-style boot rows, with default checks, fallback entries, and validation review.

Plan PoE switch capacity from device rows, port count, reserve policy, cable loss, IEEE ceilings, and shedding warnings before a rollout.

Estimate Prometheus retention storage from active series or samples/sec, with WAL/head reserve, disk headroom checks, and retention.size guidance.

Generate a Prometheus scrape config from target rows, labels, timing, limits, and overrides, then review YAML, ledgers, and audit warnings.

Build a Bash PS1 prompt from ordered tokens, ANSI colors, imported strings, previews, warnings, and setup notes ready for shell testing.

Check proxy and CDN header evidence from pasted logs or a live request, trace forwarded IP chains, and flag spoofing or trust-hop risks.

Generate FreeRADIUS client blocks from NAS rows with local secret generation, address validation, hardening directives, and deployment review.

Estimate RADIUS request load from access events, accounting updates, retransmits, and server budgets, then compare active-pool and N-1 capacity.

Plan RAID usable capacity from drive count, layout, spares, overhead, and reserve with target-fit checks, alternatives, and capacity charts.

Estimate RAID safe IOPS and throughput from drive benchmarks, write mix, spares, controller caps, degraded behavior, and target margin.

Plan a RAID layout with usable capacity, workload headroom, rebuild and URE risk, growth runway, charts, and downloadable reports.

Estimate RAID MTTDL from AFR, rebuild time, URE rate, spares, and fleet size with loss probabilities, mitigation options, and tradeoff charts.

Calculate RAID and RAID-Z usable capacity with spares, fill headroom, chassis fit checks, drive-size ladders, charts, and rebuild risk estimates.

Plan rack power density from device watts, rack units, feed rules, growth, and power factor with headroom, heat load, failover, and density cues.

Calculate Redis maxmemory and host RAM in your browser, including key overhead, TTL metadata, replicas, buffers, and RSS headroom.

Plan RAID usable capacity from disk sizes, layout, spares, overhead, fill target, and rebuild risk with topology and matchup checks.

Estimate replication backlog catch-up time from write rate, current backlog, usable capacity, compression, and target headroom for recovery planning.

Calculate SLA availability from downtime and maintenance rules, then compare remaining budget, burn rate, breach risk, and period checkpoints.

Plan SSD endurance from DWPD or TBW, workload writes, reserve, derating, SMART counters, and growth scenarios for replacement timing.

Generate OpenSSH Host blocks from CSV host rows, apply defaults and ProxyJump paths, then review identity, host-key, and alias warnings.

Edit an SSH client config in your browser, reorganize Host blocks, test wildcard matches, and review lint, security, and diff reports.

Convert one SSH public key between OpenSSH, SSH2, and PEM in the browser, then compare SHA-256 fingerprints, comments, and warnings.

Extract an SSH public key in your browser from private-key text or public lines, then check fingerprints and build authorized_keys entries.

Estimate snapshot reserve capacity from dataset churn, retention, reduction ratio, and headroom, then compare current reserve gaps and stress cases.

Turn route rows into static route add, replace, and delete commands for host and network CLIs with CIDR checks and rollback review.

Plan IPv4 child subnets from a parent CIDR with reserve-aware host fit, ordered demand packing, prefix charts, address math, and exports.

Build access or trunk switchport CLI for Cisco IOS, NX-OS, or Arista EOS with VLAN-list validation, command notes, and paste-safety warnings.

Analyze syslog and application log samples by severity, error+ share, and noisy emitters with PRI, word, and threshold checks.

Size searchable syslog storage from EPS, message size, retention, compression, index overhead, searchable copies, reserve, and disk headroom checks.

Convert TB, TiB, GB, and GiB through exact bytes, compare drive labels with binary readouts, and copy report-ready capacity notes.

Estimate UPS battery runtime from load, watt-hours, efficiency, reserve, and battery health, with shutdown margin and rating checks.

Plan VLAN ID capacity from reserved and existing ranges, then test new segment demand, subnet host fit, allocation order, and warnings.

Check switch VLAN evidence against trunk policy and spot native VLAN drift, missing allowed IDs, inactive VLANs, and VLAN 1 exposure.

Plan VLAN port migrations from pasted rows, split ports into timed waves, flag trunk and native VLAN risks, and export runbook tables.

Estimate VM migration time from memory, disk payload, bandwidth, dirty-page churn, and cutover limits with downtime and convergence checks.

Size VM datastore capacity across thin disks, snapshots, swap, growth, reserves, and raw protection overhead with runway checks.

Plan safe VM capacity for a virtualization cluster with CPU, memory, N+ failover, maintenance reserve, growth runway, and large-VM checks.

Plan IPv4 subnet layouts by splitting and joining CIDR leaf blocks, then check host ranges, broadcast values, and size maps before handoff.

Estimate WAN round-trip latency from route distance, fiber speed, hops, queues, jitter, and app round trips with target headroom.

Lookup WWN and NAA values from SAN paths or logs, normalize the hex, decode NAA family and OUI hints, and flag fragments before use.

Check a public URL's visible web server, CDN, or proxy using HTTP headers, redirect hops, confidence scores, and origin-hint clues.

Generate WireGuard server and client configs with peer route checks, a topology preview, placeholder-key warnings, and CSV or DOCX exports.

Plan ZFS usable capacity for pool builds from vdev layout, disk size, RAID-Z padding, OpenZFS slop, reserve, and target-fit paths.

Build chmod modes and shell commands from octal or symbolic permissions, compare baselines, and catch recursive, world-write, and special-bit risks.

Generate a dnsmasq DHCP scope config with pool validation, router and DNS options, static reservations, PXE/TFTP lines, and audit exports.

Build iptables or ip6tables commands from CIDRs, ports, chains, backend choices, and strict review checks before firewall changes.

Draft a systemd service unit from command, user, restart, dependency, and hardening choices with review notes and host install checks.