Yasas Malavige

University of Vocational Technology Official Website

Web Team Lead | Read the Case Study | uovt.ac.lk

The university's previous WordPress website was outdated and expensive, so we rebuilt it from the ground up to improve performance and reduce costs. The hardest challenge was architecting a zero-downtime deployment pipeline and a resilient 3-2-1-1-0 backup strategy, solving this resulted in a highly scalable platform that cut the university's server costs by over 80%.

• Platform Architecture: Built a high-performance, multilingual (English/Sinhala/Tamil) web platform using a Next.js frontend for fast rendering under peak traffic, and a Spring Boot backend with JWT auth and Flyway migrations.
• Containerized Topology: Architected a two-tier staging and production topology on Ubuntu, containerizing the entire app stack using Docker Compose behind Nginx reverse proxies, and protected by Cloudflare WAF at the edge.
• CI/CD Automation: Designed a GitHub Actions pipeline with environment-mapped triggers - staging auto-deploys for QA validation, production gated on linting and build checks before release.
• Security & Reliability: Hardened the server using UFW, Fail2Ban, and key-only SSH, while setting up a PLG (Prometheus, Loki, Grafana) monitoring stack with alerting metrics for host/container health. Implemented a 3-2-1-1-0 backup strategy targeting Cloudflare R2 via write-only API tokens to mitigate ransomware risks.
• CMS Workflows & Cache Revalidation: Built a custom role-based admin panel allowing non-technical staff to manage website content without developer involvement, with every change versioned in PostgreSQL for instant rollback, which triggers an on-demand Next.js webhook to revalidate the page cache without rebuilding.
• Configuration as Code: Wrote Ansible playbooks to automate staging server provisioning, this ensured the staging env remained identical to production, making it easy to test upgrades, configurations, and recovery steps safely.

Docura — Multi-Tenant RAG Engine (Production Cloud Deployment)

Personal Project | Read the Case Study | GitHub

• Architected and deployed a 5-service Docker Compose stack on AWS EC2 - designing Nginx reverse proxy routing, TLS termination, and port exposure rules to deliver a production-grade multi-tenant RAG app accessible over HTTPS.
• Engineered end-to-end observability for the 5-service production stack using Prometheus and custom Grafana dashboards.
• Designed a layered security model including JWT authentication, bcrypt password hashing, per-tenant rate limiting, and restricted service exposure - aligning the deployment with production security standards.
• Configured Nginx tuning and Spring Boot Actuator health endpoints to support stable production traffic handling and zero-downtime operational checks during iterative releases.