Network Security Administrator at JorahOne Networks — I build and self-host the infrastructure that keeps small businesses secure, connected, and automated.
This is the org profile repository for JorahOne Networks. It is not an application — it is the front page that describes who I am, how I work, and the self-hosted infrastructure behind the tools in this org.
Every project here follows the same philosophy: nothing public that doesn't have to be, nothing manual that can be scripted. Exposure is Tailscale-only by default, CLI is preferred over GUI, self-hosted over SaaS, and everything is MIT-licensed.
NAME Jhonattan L. Jimenez ("JorahOne")
ROLE Network Security Administrator — JorahOne Networks
SIDE Founder, JorahOne LLC — solo MSP for SMBs (AD, network security, M365)
LOCATION St. Thomas, U.S. Virgin Islands
STACK Windows Server · Active Directory · Docker · PowerShell · self-hosted everything
PHILOSOPHY Tailscale-only exposure · CLI over GUI · self-hosted over SaaS · MIT-licensed
flowchart LR
subgraph Hub["ollama-vm — HUB"]
A[llama.cpp + LiteLLM Router]
B[Honcho — Persistent Memory]
C[Qdrant — Vector Store]
D[Nightly RAG Pipeline]
end
subgraph Satellites["Satellite Nodes"]
E[GPU VM — Private AI Core RTX 3060 12GB]
F[Asterisk PBX / ARI]
G[Telegram Bot]
H[j1-biographer]
end
subgraph Reporting["Approval & Reporting"]
I[Telegram Approval Loop]
end
A <--> B
A <--> C
D --> C
E <--> A
F <--> A
G <--> A
H <--> A
A --> I
style Hub fill:#0d0d0c,stroke:#FFB300,color:#FFB300
style Satellites fill:#0d0d0c,stroke:#FFB300,color:#FFB300
style Reporting fill:#0d0d0c,stroke:#FFB300,color:#FFB300
Archipelago metaphor, on purpose: every node self-hosted, every link Tailscale-only, every deploy MIT-licensed.
| Node | Purpose | State |
|---|---|---|
ollama-vm |
Main Hermes inference node — llama.cpp + LiteLLM | operational |
gpu-satellite |
Private AI core — Ornith-1.0-9B on RTX 3060 12 GB | operational |
voice.jorahone.com |
Asterisk PBX stack with PJSIP + Snom endpoints | operational |
j1-biographer |
Voice AI memoir agent | in development |
CIPHER |
AI-driven SOC — Suricata, Zeek, Wazuh, OpenVAS | in development |
|
Hermes AI Infrastructure
Hub-and-satellite multi-agent system. |
Enterprise Network Operations
Enterprise AD replication monitoring, animated NOC topology dashboards, Aruba switch SNMP dashboards, and DHCP/AD subnet discovery tooling across distributed multi-site Windows environments.
|
|
Self-Hosted VoIP
Asterisk PBX with PJSIP/ARI, over Tailscale, Cloudflare Tunnel for external SIP under the JorahOne Networks brand — no public port exposure.
|
j1-biographer
Voice AI biographer agent merging Asterisk ARI + Telegram inputs into a shared Hermes brain for memoir-quality, memory-augmented life storytelling.
|
|
CIPHER — AI-Driven SOC
FastAPI backend integrating Suricata, Zeek, Wazuh, and OpenVAS for enterprise threat detection and response.
|
TRANKILO
Streetclothing brand with a self-hosted social media agent — Postiz, ComfyUI, Umami, n8n, Honcho, Telegram approval loop. Brand voice: calm as strength.
|
|
AI-powered chat interface — multi-model support (OpenAI, Anthropic, Ollama), real-time WebSocket streaming |
Unified AI infrastructure stack — Docker Compose deployment for Ollama, Qdrant, LiteLLM, Honcho + Caddy |
|
Automated benchmarking platform for local LLMs on Ollama — auto-discover, test, rank, and visualize |
Enterprise NOC platform — unified monitoring for AD, NTP, DNS, PBX, helpdesk, and AI-powered alerting |
|
Self-hosted phone AI assistant — real-time voice conversations over telephone via STT › LLM › TTS |
AI agent operations dashboard — real-time monitoring, task management, fleet visibility for Hermes agents |
|
Self-hosted RTSP NVR dashboard — live monitoring, recording, and timeline review for IP cameras |
Self-hosted AI helpdesk agent — multi-platform ticketing, email-to-ticket, AI auto-response |
|
Network backup and asset management dashboard — device inventory, backup scheduling, snapshot restore |
Active Directory DC monitoring dashboard — real-time health, replication status, and alerting |
|
Windows 10/11 provisioning and debloat utility for MSP technicians — one-click setup |
Self-service Active Directory password reset portal — LDAPS-pinned, workflow-driven, fully audited |
"Every satellite reports to the hub. Every hub answers to Tailscale.
Nothing public that doesn't have to be. Nothing manual that can be scripted."
| View | |
|---|---|
|
 |
 |
 |
Fork, branch, and open a pull request — see CONTRIBUTING.md. Open an issue for bugs or ideas.
MIT — see LICENSE.