# YMRTECH

> YMRTECH is a Linux systems and cloud security engineering practice run by Yannick M. Richard, and the operator of a consumer VPN service: a WireGuard tunnel from your devices to gateways in Montreal and Mexico, with three DNS postures, no activity logs, and unlimited fair use.

The client-facing guides live at https://ymrtech.com/vpn/docs/. Each one is short and task-shaped; the claims behind the service are stated, with what can be checked, on the pages linked below.

## Guides

- [Choosing a tier](https://ymrtech.com/vpn/docs/tiers/): The three tiers differ in DNS only — pipe leaves your resolver alone, privacy resolves inside the tunnel, security adds ad and tracker blocking.
- [DNS ad and tracker blocking](https://ymrtech.com/vpn/docs/dns-blocking/): How the security tier's filtering resolver works — what it blocks, what DNS filtering cannot see, and why nothing about your queries is stored.
- [Requesting a whitelist entry](https://ymrtech.com/vpn/docs/whitelisting/): How to ask for a blocked domain to be allowed on the security tier — what the request becomes, what gets approved, and what stays blocked on purpose.


## Site

- [Services](https://ymrtech.com/services/): the disciplines YMRTECH takes on, each section linking its own page.
- [Infrastructure as Code & DevOps](https://ymrtech.com/services/devops/): NixOS, Ansible and Terraform as code, CI/CD, containers, health-gated delivery.
- [Cloud infrastructure](https://ymrtech.com/services/cloud/): architecture, portability, cost and recovery.
- [Security engineering](https://ymrtech.com/services/security/): offense (recon, penetration testing) and defense (monitoring, SOC).
- [Monitoring & observability](https://ymrtech.com/services/monitoring/): the metrics, logs, dashboards and alerting stack.
- [Email infrastructure](https://ymrtech.com/services/email/): submission, authentication, filtering and deliverability.
- [VPN & encrypted networks](https://ymrtech.com/services/vpn/): running client operations over an encrypted mesh.
- [Consulting & audit](https://ymrtech.com/services/audit/): a scoped engagement against a standard, with a written report.
- [VPN service](https://ymrtech.com/vpn/): the whole service in one read — what the tunnel does and does not do, who runs it, the tiers and the price.
- [VPN technical dossier](https://ymrtech.com/vpn/technical/): who runs the tunnel, how the tiers work, what is and is not logged, and how to verify each claim.
- [Infrastructure](https://ymrtech.com/infra/): how the fleet is built — declarative NixOS, two flake repositories, a health-gated deploy pipeline and the recovery plan behind both.
- [What we log](https://ymrtech.com/logging/): the exact list of records, with retention.
- [Infrastructure audit](https://ymrtech.com/audit/): the signed report that tests the logging posture instead of asserting it.
- [Client portal](https://ymrtech.com/account): sign in, add a device, choose a tier, run the DNS leak test.
- [Client setup guide](https://ymrtech.com/vpn/docs/): WireGuard on each platform.
- [Notes](https://ymrtech.com/notes/): engineering notes, including the DNS and filtering material behind the guides.

## Optional

- [Service status](https://uptime.ymrtech.com/status/ymrtech): the live checks for the portal, both tier tunnels, both tier resolvers, the website, the forge and mail.