Project Portfolio

Full-stack applications built with .NET, Go, and React — self-hosted on a production VPS with Nginx, systemd, and Let's Encrypt.

Click any tile to view full technical details and screenshots. Every public project is live — try them out yourself!

Church Management Platform

Public

Multi-tenant SaaS with white-label branding, 40 REST controllers, granular RBAC, Stripe/PayPal payments, Twilio SMS, thermal printer kiosk check-in, and a React Native mobile app.

ASP.NET Core React / React Native PostgreSQL Stripe Twilio EF Core

Texas Hold'em Poker

Public

Go backend with goroutine-per-table game engine, WebSocket real-time play, 3-strategy AI bots with aggro tracking, and crypto/rand provably fair shuffle.

Go WebSocket Expo / React Native PostgreSQL Redis crypto/rand

OHPM Website

Public

Installable PWA replacing WordPress — works offline or on spotty internet, JSON-driven content, 1.2 GB self-hosted media, and Workbox caching with stale-cache auto-recovery.

React TypeScript PWA / Workbox Tailwind CSS Apache

OHPM Financials

Private

Subset-sum bank reconciliation engine replacing Excel + Access — multi-source import (BofA, PayPal API, ADP), fuzzy name matching, and seasonal board reporting.

ASP.NET Core React PostgreSQL PayPal API ClosedXML

VPS Monitor

Public

Dual-auth monitoring dashboard — API-key ingestion from bash watchdog, JWT dashboard access, cooldown-based alerting, and time-series visualization.

ASP.NET Core React Recharts PostgreSQL Bash / cron

Bible Memory

Public

First-letter memorization algorithm with server-side web scraping, print-optimized dual-page layout, and cross-project API consumption.

ASP.NET Core React AngleSharp Tailwind CSS

Church Management Platform

Try it live Public

Multi-tenant church management platform replacing legacy systems like Planning Center and Church Community Builder. A unified system that consolidates people, families, groups, events, check-ins, services/worship planning, giving/donations, communications, and user accounts into a single interface — simpler than Planning Center's fragmented per-module apps. Isolated per-client databases deliver a more responsive experience than Church Community Builder's shared-infrastructure model. White-label branding system allows per-church customization of name, logo, colors, and contact info with zero code changes.

Includes 3 interactive demo accounts (Member, Staff, Admin) with guided walkthrough guides so users can test-drive the full platform with role-appropriate permissions.

ASP.NET Core 9.0 React 19 TypeScript Vite React Native (Expo SDK 54) PostgreSQL EF Core Stripe Payment Intents PayPal Orders v2 Twilio SMS Gmail SMTP Mailchimp API JWT Auth Google OAuth Apple Sign-In Nginx systemd

Architecture & Data

  • 40 REST controllers covering auth, people, families, events, groups, check-ins, giving, services, forms, reports, and 3rd-party integrations
  • Granular RBAC: 12 roles, 48 permissions across 10 modules with [RequireModule] attribute-based backend gating
  • JSONB archival system — 71% data reduction (61,927 checkins into 105 JSONB rows) with event-date-based retention and VACUUM FULL post-archival via weekly cron
  • Two-tier audit framework — Tier 1: automatic field-level change tracking via EF Core SaveChangesInterceptor on 11 entities. Tier 2: explicit admin action logging with IP address capture
  • 12-feature modular flag system (7 included + 5 add-on) with [RequireModule] backend gating, ModuleRoute frontend gating, and 5-minute TTL cache

Payments & Communications

  • Stripe (one-time + recurring subscriptions via Payment Intents API) & PayPal (Orders v2) with cover-fees calculation (2.9%+$0.30 card, 0.8% ACH capped at $5)
  • Twilio SMS — phone verification, toll-free messaging, SMS-to-Give webhook with keyword triggers ("CONNECT"/"HI"/"HELLO")
  • HMAC-signed visitor Connection Cards — self-validating tokens (Base64Url + HMAC-SHA256) with 24-hour expiry, fuzzy email matching via Levenshtein distance with 20+ domain typo corrections
  • Email broadcasts via Gmail SMTP, Mailchimp audience sync integration

Integrations & Mobile

  • Bidirectional Planning Center sync — IAsyncEnumerable pagination with SemaphoreSlim rate limiting (90 req/min), HMAC-SHA256 webhook verification, remote_id bidirectional lookup
  • React Native mobile app (iOS App Store + Android) — giving, check-in, small groups, watch sermons (YouTube), church info, biometric auth, multi-church selector, encrypted JWT via expo-secure-store
  • Thermal printer integration — 4"x2" ZD421 labels (child, parent pickup, volunteer) with shared family security codes and auto-print on kiosk check-in
  • Hierarchical group-based event auto-resolution — walks parent_group_id ancestor chain so children in nested groups auto-match department-level events
  • Service plan builder with song library, chord charts with transposition, team scheduling, volunteer blockouts, and digital Music Stand module
  • Two-tier profanity filter as global action filter — evasion-resistant regex with gap-matching, leetspeak detection, and 70+ word whitelist
Church Management Platform admin dashboard showing module cards for kiosk, events, people, services, forms, and more

Texas Hold'em Poker

Try it live Public

Real-time multiplayer Texas Hold'em with 9-seat tables and AI opponents. The Go backend runs the entire game engine as a single goroutine per table with a full state machine (WAITING → PRE_FLOP → FLOP → TURN → RIVER → SHOWDOWN → HAND_OVER). The frontend is a React Native (Expo) app with Skia canvas rendering on mobile and View-based web overrides, featuring a WSOP-style UI with adaptive racetrack table geometry and forced landscape rotation on mobile.

Three bot AI strategies (Passive, Aggressive, Balanced) with position-aware play, pot odds calculation, bluff-catching (15-30% hero-call rate for pair+), and an aggro tracker that boosts bluff-catch probability by up to +15% against players who raise >40% of actions. The shuffle uses crypto/rand Fisher-Yates with rejection sampling — verifiably fair via 10K-hand chi-squared statistical tests (from the lobby, click "RNG Stats" top-right to see live card frequency and hand distribution data, or see screenshots below).

Go 1.23 goroutines WebSocket crypto/rand React Native (Expo) TypeScript Zustand React Native Skia PostgreSQL Redis JWT Auth Docker Nginx systemd

Game Engine

  • Single goroutine per table — all game mutations serialized on one goroutine; bots use the same action channel as humans
  • Full state machine: WAITING → STARTING → PRE_FLOP → FLOP → TURN → RIVER → SHOWDOWN → HAND_OVER
  • Side pot engine with correct all-in splitting — no spurious pots when bets are equal
  • crypto/rand Fisher-Yates shuffle with rejection sampling — chi-squared validated across 10K hands
  • Hand history persistence — hands, hand_players, hand_actions tables with retroactive evaluation for folded players
  • 15-second auto-fold timer with pre-action queue bypass

Bot AI

  • Three strategies: Passive (calls, folds to pressure), Aggressive (raises frequently, ~15% bluff rate), Balanced (position-aware, pot odds)
  • AggroTracker — per-human raise frequency tracking; >40% raise rate (min 5 samples) triggers +15% bluff-catch boost
  • Calibrated postFlopStrength rank map: HighCard=0.05 through RoyalFlush=1.0 with facingPressure fold thresholds
  • Dynamic bot lifecycle — batch refill (15-50 hand lifespan), humans kick bots, 10s refill delay to prevent race conditions

Frontend & UX

  • WSOP-style UI — adaptive racetrack geometry (2.2:1 aspect ratio), angular card placement per seat, bet badges on felt with gold chip icons
  • Forced landscape rotation on mobile via CSS transform + useLandscapeDimensions hook
  • Pre-action system — FOLD, CHECK, CALL ANY queueable during opponent turns, auto-fired with 300ms delay
  • Expo web static export with cache-busting post-export scripts and service worker kill-switch
  • Auto-auth (silent guest registration) + auto-sit + fixed shareable table IDs (/table/1, /table/micro, /table/high)
  • Fully functional on mobile phone browsers — forced landscape rotation and adaptive geometry ensure playable UI on any screen size
  • RNG stats dashboard — card frequency heat maps and hand rank distribution charts read directly from PostgreSQL
Texas Hold'em 9-seat WSOP-style table with AI opponents, bet slider, and action indicators RNG card frequency heat map showing statistical distribution across all cards Hand rank distribution chart from persisted hand history

OHPM Website

Visit site Public

Installable Progressive Web App for Only Hope Prison Ministries (501(c)(3) nonprofit), replacing a legacy WordPress site with zero backend dependencies. Installable to a device home screen and fully functional offline or on spotty internet — ideal for ministry volunteers in areas with unreliable connectivity. All content — PDFs, MP3s, images, JSON data — is self-hosted (~1.2 GB) on shared hosting with no external CMS. Workbox service worker provides tiered caching strategies: precached app shell, cache-first for fonts/images, stale-while-revalidate for JSON data, and network-only for large media files.

React 19 TypeScript Vite 7 Tailwind CSS 4 React Router 7 PWA / Workbox Apache / .htaccess SiteGround
  • JSON-driven content architecture — 6 data files decouple content from code, enabling updates without redeploys
  • ~1.2 GB self-hosted media served directly (no CDN), with SiteGround Nginx proxy cache + PURGE on deploy
  • Tiered .htaccess cache headers: no-cache for HTML/SW, 1-year hashed assets, 1-week PDFs, 1-year MP3s
  • ErrorBoundary with stale-cache auto-recovery — detects chunk loading failures, performs one hard refresh + SW unregistration, prevents infinite loops via sessionStorage flag
  • Embedded media player — YouTube embed conversion with timestamp parsing, inline MP3 playback, video lightbox modal
  • Non-profit payment strategy — Stripe Payment Links (zero backend), ACH at 0.5% capped $5, Zelle zero-fee option
  • Photo slideshow with lightbox navigation, keyboard controls, image preloading
  • Responsive fluid typography with CSS clamp() and mobile-first sticky nav with scroll lock handling
  • App-installable with web manifest, maskable icons, and standalone display mode
  • Smart data sorting — pinned items (no date) first, then reverse-chronological dated items
  • Fully functional on mobile phone browsers — responsive design with mobile hamburger nav and touch-optimized media playback
OHPM Website homepage with hero section and navigation OHPM Website ministry newsletters page with photo grid

OHPM Financials

Private
This application manages real financial data for a nonprofit organization and is not publicly accessible.

Full-stack financial reconciliation platform for a nonprofit prison ministry, replacing a decades-old Excel + Access workflow. Handles 700+ donors/payees, 15 years of historical data (2011–2026), and ~$800K/year in transaction volume with automated bank reconciliation, donor tracking, expense management, and board-level financial reporting. Three role-based views serve distinct user needs:

Role-Based Access

  • Donor — View personal giving history, print end-of-year tax giving statements, and update contact information via Google OAuth login
  • Viewer — Read-only access to donations, expenses, ledger (checkbook), and people data. Month-over-month and year-over-year financial trend reporting with interactive charts
  • Admin — Full write access including auto-import from PayPal REST API, copy/paste BofA bank data for automatic record creation and reconciliation, person merge, expense management, and bulk donor statement mailing
ASP.NET Core 9.0 React 19 TypeScript Vite PostgreSQL EF Core ClosedXML PayPal REST API JWT Auth Google OAuth Gmail SMTP

Reconciliation Engine

  • Subset-sum matching algorithm — FindSubsetByAmount, FindSubsetByFeeFormula, FindSubsetByNetAmount for penny-perfect multi-transfer PayPal batch matching
  • 7-tier hierarchical name matching — alias lookup, exact match, fuzzy partial first/last, middle initial/nickname handling, and per-donor pattern scoring
  • BofA web paste parser with type inference — classifies Credit, Debit Card, Zelle, ACH, Check from pasted bank data using keyword + fallback regex
  • PayPal batch grouping by bank transfer events (not UTC dates) with estimated BofA posting dates (+1 business day) and cross-day date correction
  • Auto-reconciliation with 3-level confidence — exact/alias person match creates DB records tagged [auto-reconcile] with green AUTO badge
  • BofA check duplicate prevention via HashSet tracking of matched donation IDs during reconciliation pass

Reporting & Analysis

  • Excel export via ClosedXML: 10-sheet Ledger, 6-year Board Report, Checkbook Register, Large Donors ($5K+) — matching original OHPM format exactly
  • Board financial report with 3-year seasonal estimation — actual monthly weights replace linear extrapolation, with growth caps and ADP 3-pay-period anomaly handling
  • Interleaved checkbook register — PostgreSQL ledger view merges donations and expenses chronologically with running balance from starting balance
  • Per-donor historical pattern scoring — day-of-month statistical distributions (mean, stddev, z-score) across 3 years with ACH ±2 day / check ±5 day tolerance bands
  • ADP payroll PDF parser with biweekly 3-pay-period detection, employer liability separation, and medical withholding income netting
  • Fiscal year awareness throughout — every report endpoint accepts ?fiscalYear=N, 6-year range (actuals + estimate + projection)

Operations

  • Gmail SMTP bulk mailing of annual donor giving statements with 2-second throttle, BCC tracking, and resume-capable statement_sends table
  • 15-year historical data migration from Access VBA & Excel sources, 65 legacy payees consolidated into unified people table
  • Person merge UI with field-level override and duplicate detection — atomically reassigns all donations/expenses/users to target
  • Multi-category vendor detection with auto-created "Pending" expense for inline breakdown that atomically replaces placeholder on submit
  • Fully functional on mobile phone browsers — responsive top nav with hamburger menu and touch-friendly data entry

VPS Monitor

Public

Self-hosted monitoring dashboard providing real-time visibility into .NET and Go services running across production VPS infrastructure. Replaces manual log-file inspection with a web UI featuring live status cards, historical time-series charts, a paginated event log, and configurable email alerting with cooldown-based deduplication.

Uses a dual-authentication pattern: API keys (SHA-256 hashed, generated via RandomNumberGenerator) for script-based metric ingestion, and JWT tokens for interactive dashboard access. A bash watchdog script (cron, every 5 minutes) POSTs system and per-service metrics — all calls are fire-and-forget so monitoring never breaks if the dashboard is unavailable.

A separate HTTP health-check script (cron, every 5 minutes, offset from the resource monitor) curls each service's actual endpoint. If a service is unresponsive, it restarts it immediately, retries every 30 seconds up to 5 times with a second restart on retry 3, and logs as CRITICAL if still down after all attempts. Recovery events appear in the dashboard logs with reason http_health_check.

ASP.NET Core 9.0 React 19 TypeScript Vite Tailwind CSS 4 PostgreSQL EF Core Recharts JWT + API Key Auth Bash / cron Nginx Ubuntu 24.04
  • Clean Architecture (Core, Infrastructure, Shared, API layers) with DI throughout
  • Dual auth: SHA-256 API keys (32-byte RandomNumberGenerator) for ingestion, JWT for dashboard — isolated auth paths per use case
  • Cooldown-based alert deduplication — AlertConfig tracks LastFiredAt per event type with configurable cooldown windows to prevent alert spam
  • Auto-triggered alerts on service restarts, down detection, and high CPU steal
  • Gmail SMTP email delivery to managed recipient lists
  • Bash watchdog collects system metrics (CPU, memory, swap, load, steal) and per-service stats (CPU, RSS, PID) every 5 min via fire-and-forget POST
  • HTTP health checks — curls each service endpoint every 5 min, auto-restarts unresponsive services with graduated retry (5 attempts, 30s intervals, second restart at retry 3)
  • Self-monitoring: included in its own watchdog and nightly recycle rotation
  • Composite indexed columns with descending order for efficient time-range queries — (server_id, recorded_at DESC)
  • EF Core bulk update via ExecuteUpdateAsync() for non-materialized operations
  • Multi-server ready with unique API keys per VPS and aggregate dashboard view
  • Fully functional on mobile phone browsers — responsive dashboard with touch-friendly charts and status cards
VPS Monitor Dashboard showing server health metrics, CPU usage, memory, and service status cards VPS Monitor time-series charts for CPU and memory usage VPS Monitor event log and alert configuration

Bible Memory

Try it live Public

Web application that generates printable first-letter memorization sheets for any Bible chapter. Each word is reduced to its initial letter (with punctuation, quotes, and footnote markers preserved), producing a two-sided document: memorization format on front, full text on back. Content is fetched and parsed from a public Bible website via server-side AngleSharp HTML scraping with dynamic book abbreviation detection via regex on CSS classes.

The first-letter algorithm was ported from an original Go implementation to TypeScript with exact parity — handling edge cases like apostrophe-words ("Peter's" → "P's"), leading quotes/parentheses, footnote markers ([a]), and Unicode normalization (curly quotes/dashes to ASCII). The API is designed for cross-project consumption with CORS configured for reuse by other apps.

ASP.NET Core 9.0 React 19 TypeScript Vite Tailwind CSS 4 AngleSharp Nginx
  • First-letter memorization algorithm with full edge-case handling: apostrophes, footnotes, leading quotes, Unicode normalization
  • Server-side web scraping via AngleSharp with dynamic book abbreviation detection and robust footnote/cross-reference removal
  • 10 Bible versions (CSB, ESV, LEB, LSB, NASB, NIV, NKJV, NLT, NRSV, RSV) with per-book chapter count validation
  • Print-optimized dual-page layout — Aptos Serif 11pt, 60pt row heights, light blue (#BDD7EE) every 5th verse, matching original Excel formatting
  • Special Psalm 119 acrostic heading support with verse association and section breaks
  • In-memory caching with 24-hour TTL and typed response models
  • Reusable public API endpoints with CORS for cross-project consumption
  • Print CSS with page breaks, print-color-adjust: exact for background colors, and hidden UI controls
Bible Memory book and chapter selection interface Bible Memory Ephesians 1 first-letter memorization sheet with full text