CDTCyber Duct Tape Request support ↗

Open-source infrastructure software

Software and support for the systems you can't afford to break.

Cyber Duct Tape builds MIT-licensed tools for hosting, email migration and Linux desktops, and helps teams recover, migrate and stabilize production when it counts.

Explore the tools ↓ Get hands-on help ↗

Lakewood, ColoradoDenver metro + remoteReply within one business day

StePanel · hosting operations dashboard
StePanel dashboard showing server health, migration jobs and audit activity
3 toolsOpen source on GitHub
MIT licensedFree to use, read and fork
Rust & GoNative software, no Electron
Built for LinuxMade by an operator, for operators

The toolbox

Three tools. One standard: no surprises in production.

Every tool here was built to solve a job I kept doing by hand. They validate before they change anything, keep a record of what happened, and put you in control of the risky step.

Hosting control plane · Go

Leave cPanel without leaving your data to chance.

StePanel is an open-source server management platform built around safety and clarity. Bring cPanel archives across through a validated, staged migration, watch every job in the dashboard, and run it on the web server and database you actually want.

  • Validated cPanel migrations. Archives are checked and staged before anything is restored.
  • Async restore jobs with tracking, plus a dashboard with health monitoring, metrics and audit logging.
  • Your stack, your choice: Caddy (default), Apache or OpenLiteSpeed; MySQL, MariaDB or PostgreSQL.
  • Secure by default: bcrypt credentials, CSRF protection and TOTP MFA in the shared-hosting beta.
  • Ships properly: Docker or release binaries for amd64 and arm64, with checksums and supply-chain attestation.
Get StePanel ↗ View source

Honest scope: the shared-hosting feature is a constrained beta with explicit operator boundaries. Read the docs before putting customers on it.

stepanel · dashboard
StePanel dashboard with health monitoring, job tracking and audit log

Mailbox migration · Rust

Migrate mailboxes in bulk. Then prove every one.

MailSwiftSync is a local-first control plane for planning, running, verifying and auditing IMAP migrations. Load your mailbox list, dry-run everything, go live only when you say so, and export the evidence that it worked.

  • Two proven engines: native Dovecot doveadm sync or imapsync as the fallback.
  • Batch from a spreadsheet. Import CSV, XLS or XLSX and run 1 to 16 workers in parallel.
  • Safety gates built in: dry runs, explicit live confirmation and redacted command previews.
  • Survives interruptions: a durable SQLite ledger and operator journal recover state after a restart.
  • Modern auth: OAuth 2.0 token refresh and optional OS-keyring password storage.
  • Desktop app and headless CLI for automation and recovery work.
Get MailSwiftSync ↗ Hire me to run it

Early 0.1 release. Stable for Dovecot and imapsync planning and execution; unattended production runs and message-level reconciliation are still experimental. See the repository ↗

Migration workflowLedger-backed
  1. PlanImport mailboxes from CSV or spreadsheet and choose your engine.
  2. PreflightValidate source and destination before a byte moves.
  3. Dry runSee exactly what would happen, with secrets redacted.
  4. Live syncRuns only after explicit confirmation, 1 to 16 workers.
  5. VerifyAggregate matching against the source, recorded in the ledger.
  6. Export proofHand the client evidence, not a promise.

Text expansion · Rust · Wayland

Text expansion that finally works on Wayland.

Type a short trigger and get the full snippet, template or command output. WayExpand is a native Wayland tool with a real snippet editor, and it tells you plainly which backends your compositor supports instead of failing silently.

  • Native Wayland. input-method-v2, wlroots virtual-keyboard and libei/EIS backends.
  • Snippets that think: date, username and cursor placement, plus command-backed dynamic content.
  • Smart matching: trie-based suffix matching, word-boundary mode and case propagation.
  • Password-field protection. Matching pauses in sensitive fields.
  • Switching from Espanso? Import your YAML and it converts to TOML for you.
  • Honest diagnostics: wayexpand doctor reports what your compositor can do.
Get WayExpand ↗ Releases

Install: Ubuntu/Debian PPA, an Arch PKGBUILD preview, or ./scripts/install-user.sh on any distro. Core engine is stable; backend support varies by compositor, so run wayexpand doctor first.

~/wayexpand
# what can my compositor do?
$ wayexpand doctor

# try a trigger against your snippets
$ wayexpand test ';;hello' expansions.toml

# open the snippet editor
$ wayexpand-gui

You type ;;hello. It becomes the full snippet you saved.

Illustration of trigger → expansion

More open source: Support-DoKtor FPM Lens Fail2ban installer Ansible collection All repositories on GitHub ↗

Hands-on support

Prefer a human? Bring me the problem.

The same care that goes into the tools goes into client work: understand the impact first, change things safely, and leave a written handoff.

01 · Production issue now Quick Fix One focused hour for a contained hosting, email, DNS or Linux problem. Start a Quick Fix ↗ 02 · Cause is unclear Diagnostics A time-boxed investigation with written findings and a remediation plan. Request Diagnostics ↗ 03 · Planning a change Project support Migrations, audits, recovery work, automation and infrastructure changes. Discuss a project ↗

  • Linux & server recovery

    Outages, disk pressure, service failures, access problems and performance issues.

  • Email, DNS & deliverability

    Mail routing, SPF, DKIM, DMARC, queues and the DNS behind reliable delivery.

  • Migrations & backups

    Move environments safely, verify recovery points and make the next incident less surprising.

  • Automation & tooling

    Turn recurring operational work into inspectable scripts, reports and workflows.

How I work

Impact first. Verification last.

  1. Reduce risk first

    Understand impact before intervention.

  2. Recover with confidence

    Verify backups and restoration paths.

  3. Make change legible

    Document what changed and why.

  4. Leave a better system

    Handoff notes and next actions included.

Knowledge base

Practical guides for problems that keep recurring.

Understand the issue, prepare for a change, or decide when it's time to bring in help.

DNSDNS outage checklist for small businessesRead the guide ↗ MigrationThe cPanel migration checklistRead the guide ↗ SecurityHow to tell if WordPress is hackedRead the guide ↗

The engineer

Built, run and supported by one person who answers the phone.

Cyber Duct Tape is the practice of Stephan Loesevitz, a Linux Systems and Infrastructure Engineer. The software above is the same tooling I use on real client work: Linux hosts, web servers, PHP-FPM, databases, email, DNS, backups and migrations.

Meet the engineer Read case studies
  • Based inLakewood, Colorado
  • WorksDenver metro + remote
  • ResponseWithin one business day
  • Open sourcegithub.com/itchyitchy123

For builders

Star it, try it, break it, tell me what you find.

All three tools are free and MIT licensed. Issues and pull requests are welcome.

Browse on GitHub ↗

For teams in a jam

Tell me what the system is doing and what the business needs.

Use the structured intake to share impact, timeline and access constraints. Never send passwords or private keys through the form.

Request support ↗