Projects
CarWash Control
Live · operator trial
Monitoring and analytics for self-service car washes in Uzbekistan. Each business sees
its own bays, programs, tariffs, payments and reports; wash controllers report over MQTT.
- Tenant isolation enforced in the database with PostgreSQL row-level security and same-tenant foreign keys.
- ESP32 controllers publish over MQTT; events are validated and idempotent, and failed processing rolls back.
- Collected money and button usage are tracked separately, so revenue is never double counted.
- Uzbek, Russian and English interface; role restrictions, login rate limiting and an audit trail.
Stack Python · FastAPI · SQLAlchemy · PostgreSQL · MQTT · Redis · Vue 3 · TypeScript
Private business app: accounts are issued by the operator, so visitors see the sign-in page.
Open carwash.xosilov.com (CarWash Control)
DevSecOps Academy
Live · open to everyone
An interactive course, DevSecOps: Zero to Hero: 46 modules in six phases, from how
computers and Linux work to securing pipelines, with progress that follows you.
- Quizzes graded on the server and lab checks that verify real work, not just a click.
- Visual simulators for CIDR, DNS, TCP and firewalls embedded in the lessons.
- Production stack: nginx with a strict CSP, two API replicas, PostgreSQL and daily backups.
Stack Vue 3 · TypeScript · FastAPI · PostgreSQL · nginx · Docker
The course outline is public; a free account saves progress.
Open dso.xosilov.com (DevSecOps Academy)
Forge — Backend & AI Engineering Academy
Live · free account
A learning platform that takes Python developers from foundations to PostgreSQL, FastAPI
services, workers, message brokers, RAG and AI evaluation, and measures skill by evidence
rather than pages read.
- 195 lessons across 23 tracks, each with prediction and debugging checkpoints.
- 390 scenario exercises graded on the server, plus spaced review driven by your mistakes.
- Python and SQL labs with isolated tests; beginner, intermediate and advanced evaluations.
- Skill scores, weak areas and a personal study plan built from saved evidence.
Stack Next.js · React · TypeScript · FastAPI · PostgreSQL · Docker
Create a free account to start; your study history stays private.
Open eng.xosilov.com (Forge)
How they run
All three apps share one server that I operate. A single Caddy proxy handles HTTPS with
automatic certificates and reaches each app over its own private Docker network, so the
apps cannot see each other. Prometheus and Grafana watch the server and every site.