Full-Stack Engineer · Cloud-Native Architect · Open-Source Developer · 🇰🇭 Cambodia
I build production-grade developer tools and infrastructure software. OpenGate IAM is my flagship open-source project — a complete Identity & Access Management platform designed as a self-hostable alternative to Keycloak and Okta. I also run KhmerStack, an open-source org building practical tools for Khmer developers worldwide.
OpenGate IAM started as a personal project to deeply understand how enterprise-grade IAM systems like Keycloak work under the hood. Instead of a monolithic app, it was designed from day one as a true microservices architecture — each concern (authentication, user management, realms, RBAC, MFA, sessions) is its own independently deployable service.
The project uses Spring Authorization Server 1.3 for the full OAuth 2.1 / OIDC implementation, supports PKCE for public browser clients, provides a Spring Boot Starter for easy integration, and ships with a full Next.js Admin Console and documentation site.
Everything is open source under the MIT License. Pull requests, bug reports, and sponsorship are all welcome.
OpenGate IAM
Self-hosted Identity & Access Management
Full open-source IAM platform built as 11 Spring Boot 3 microservices. OAuth 2.1, OIDC, PKCE, MFA, RBAC, multi-realm tenancy — the Keycloak alternative you own.
AngkorSearch v2.3
Cambodia's open-source search engine
Fully self-hosted search engine built from scratch for Cambodia. Crawls the web, indexes Khmer & English content via PostgreSQL full-text + trigram fuzzy matching, served through a C++ REST API and Next.js frontend.
kForge
Multi-platform Docker image build CLI
Standalone binary and Docker CLI plugin (docker kforge) powered by BuildKit. Features 5 progress styles, declarative bake config (HCL/JSON), flexible caching, and registry auth. Inspired by Docker Buildx.
kforge-studio
Native Qt6/C++ GUI for kForge
Docker Desktop–style desktop app wrapping the kforge CLI. Live job cards with log streaming, BuildKit builder management, declarative bake builds, QEMU setup wizard, and a session dashboard.
Stack Forge
Visual DevOps pipeline builder
Drag tools onto a canvas, connect them, and generate production-ready install scripts instantly. Supports 71+ tools across 16 categories including Kubernetes, CI/CD, secret managers, and 8 cloud providers.
MekongTunnel
Local dev tunneling — Khmer-built
Simple, fast tunneling tool for exposing local development servers to the internet. Lightweight CLI with clean output, built by KhmerStack.
ClipVault
Fast offline clipboard manager
Global shortcut, instant search, pin & tag clips, multiple themes. Works 100% offline. Available on macOS via Homebrew, Windows, and Linux. Built with Electron + React + SQLite.
Backend
Frontend
Infrastructure
Security
OpenGate IAM v1.0.0
Launched OpenGate IAM — a full open-source IAM platform built as 11 Spring Boot 3 microservices.
KhmerStack
Founded KhmerStack — an open-source org building practical tools for Khmer developers and the world.
Cloud-Native Journey
Deep dived into Kubernetes, microservices, DevOps pipelines, and distributed systems architecture.
Full-Stack Engineering
Specialized in Spring Boot backends + React/Next.js frontends with a focus on developer experience.
OpenGate IAM and all KhmerStack projects are maintained in free time by a solo developer. If any of this work helps you, please consider sponsoring to support continued development.
Sponsor on GitHub