Project Roulette / Projects

Frontend, Backend, Full-stack, DevOps & Cloud, Embedded & IoT and Security projects

18 of 30 projects. Each has a stack, five features to ship, a difficulty, a time estimate, and a bonus challenge.

Frontend · Intermediate · 2 weeks

Accessible Design System & Component Library

A themeable library of accessible UI components (dialog, combobox, tabs, data table, toast) published to npm, with a documentation site where people can try every component live.

  • React
  • TypeScript
  • Storybook
  • Vitest
  • Testing Library
  • axe-core

Features

  1. 8–10 components with full keyboard support and correct ARIA roles
  2. Light and dark theming driven by design tokens
  3. Docs site with a live props playground for each component
  4. Automated accessibility tests that run in CI on every pull request
  5. Versioned releases to npm with a generated changelog

Bonus: Visual regression testing with Playwright screenshots that block a PR if any component changes unexpectedly.

Frontend · Intermediate · 1–2 weeks

Git Repo Time-Lapse Visualizer

Paste any public GitHub repository and watch its file tree grow over time as an animated treemap, with contributor activity and the files that change most often.

  • TypeScript
  • Vite
  • D3.js
  • GitHub REST API
  • Web Workers

Features

  1. Fetch and cache commit history with pagination and rate-limit handling
  2. Animated treemap playback with a timeline scrubber
  3. Contributor timeline and a churn heatmap of hot-spot files
  4. Heavy parsing moved into a Web Worker to keep animation smooth
  5. Shareable URLs that encode the repo and timestamp

Bonus: Export the playback as a WebM or GIF that people can drop straight into their own README.

Frontend · Intermediate · 2 weeks

Browser Logic Circuit Simulator

Drag gates, wires, clocks, and LEDs onto a canvas and watch signals propagate in real time. Build anything from a half adder to a tiny CPU in the browser.

  • TypeScript
  • Canvas 2D or SVG
  • Vite
  • Web Workers
  • Vitest

Features

  1. Drag-and-drop gates, switches, clocks, LEDs, and seven-segment displays
  2. Event-driven simulation with propagation delay
  3. Truth-table generator for any selected circuit
  4. Reusable custom components built from sub-circuits
  5. Save, load, and share circuits by link

Bonus: A waveform timing-diagram viewer that works like a logic analyzer for any wire you probe.

Backend · Advanced · 2–3 weeks

Distributed Background Job Queue

A Redis-backed job system with multiple workers, retries, scheduled jobs, and a dead-letter queue, plus a small dashboard showing what's running and what failed.

  • Go
  • Redis
  • PostgreSQL
  • Docker Compose
  • Prometheus

Features

  1. Enqueue API with priorities and delayed jobs
  2. Exponential-backoff retries and a dead-letter queue
  3. Horizontally scalable workers with graceful shutdown
  4. Idempotency keys that prevent duplicate processing
  5. Metrics endpoint for throughput, latency, and failure rate

Bonus: A chaos test script that kills workers mid-job and proves, with logs, that no job is ever lost.

Backend · Intermediate · 1–2 weeks

Webhook Relay & Replay Service

Receives webhooks from services like Stripe or GitHub, verifies their signatures, stores them, and forwards them reliably to your apps with retries and one-click replay.

  • Node.js
  • TypeScript
  • Fastify
  • PostgreSQL
  • BullMQ
  • OpenAPI

Features

  1. Per-source HMAC signature verification
  2. Durable storage with a searchable delivery log
  3. Retries with backoff and a per-endpoint circuit breaker
  4. Replay any stored event to any endpoint
  5. OpenAPI spec with generated API docs

Bonus: A small CLI that tunnels live events to localhost so developers can test webhooks on their own machine.

Backend · Advanced · 2 weeks

API Gateway with Rate Limiting

A reverse proxy that sits in front of your services and handles authentication, rate limiting, caching, and request logging so the services don't have to.

  • Go
  • Redis
  • JWT
  • Docker
  • k6

Features

  1. Config-driven routing to multiple upstream services
  2. Token-bucket rate limiting per API key, shared across instances through Redis
  3. JWT validation and API key management
  4. Response caching with TTLs and manual invalidation
  5. Structured access logs and latency metrics

Bonus: k6 load tests that publish p50, p95, and p99 latency with and without the gateway in front.

Full-stack · Advanced · 2–3 weeks

Real-time Collaborative Whiteboard

A multiplayer canvas where several people draw, add sticky notes, and see each other's cursors live, with edits that never conflict.

  • React
  • TypeScript
  • Yjs (CRDT)
  • WebSockets
  • Node.js
  • PostgreSQL

Features

  1. Shapes, freehand drawing, and sticky notes
  2. Live cursors and presence indicators
  3. Conflict-free merging of simultaneous edits using CRDTs
  4. Shareable boards with view-only and edit links
  5. Persistent boards with version history

Bonus: Offline editing that merges cleanly with everyone else's changes when you reconnect.

Full-stack · Advanced · 2–3 weeks

Live Coding Interview Room

Create a room, share a link, and code together in a shared editor. Code runs in sandboxed containers and both people see the output.

  • Next.js
  • Monaco Editor
  • WebSockets
  • Docker
  • Redis

Features

  1. Shared editor with synced cursors and selections
  2. Run Python, JavaScript, or C++ in isolated containers with CPU, memory, and time limits
  3. Private notes panel only the interviewer can see
  4. Session playback of the whole interview
  5. Rooms that expire and clean up automatically

Bonus: Hidden test cases that grade the candidate's solution automatically and show a pass/fail report.

Full-stack · Intermediate · 2 weeks

Uptime Monitor & Public Status Page

Monitors websites and APIs every minute, detects outages, opens incidents, and publishes a clean public status page with uptime history.

  • Next.js
  • TypeScript
  • PostgreSQL
  • Node.js worker
  • Email or Discord webhooks

Features

  1. HTTP, TCP, and keyword checks run on a schedule by a worker
  2. Incident detection that confirms with retries to avoid false alarms
  3. 90-day uptime bars and response-time charts
  4. Email and Discord alerts when something goes down
  5. Admin page for posting incident updates

Bonus: Checks from two regions that only open an incident when both agree the service is down.

DevOps & Cloud · Advanced · 2–3 weeks

GitOps Kubernetes Home Lab

A fully automated Kubernetes cluster where pushing to Git builds, scans, and deploys your apps, with monitoring and alerts built in.

  • Terraform
  • k3s
  • Argo CD
  • Helm
  • Prometheus
  • Grafana
  • GitHub Actions

Features

  1. Infrastructure as code for all VMs or cloud instances
  2. CI pipeline that builds, scans, and pushes container images
  3. Argo CD auto-sync from a Git repository
  4. Grafana dashboards and alert rules
  5. Secrets managed safely with Sealed Secrets

Bonus: Canary rollouts that roll back automatically when the error rate spikes.

DevOps & Cloud · Intermediate · 1–2 weeks

Distributed Tracing Playground

Three small microservices instrumented end to end, so you can follow a single request across every service with linked logs, metrics, and traces.

  • OpenTelemetry
  • Docker Compose
  • Jaeger or Tempo
  • Prometheus
  • Grafana
  • Loki

Features

  1. Three services in two languages, instrumented with OpenTelemetry
  2. Trace context carried through HTTP calls and a message queue
  3. Dashboards for rate, errors, and duration
  4. Logs linked to their trace IDs
  5. SLOs with burn-rate alerts

Bonus: A fault-injection switch that adds latency or errors so viewers can see exactly how problems show up.

DevOps & Cloud · Intermediate · 1–2 weeks

Serverless Media Pipeline on AWS

Upload an image or video and an event-driven pipeline resizes, transcodes, and tags it automatically. All infrastructure is defined in code.

  • AWS S3, Lambda, SQS, DynamoDB
  • AWS CDK or Terraform
  • TypeScript or Python
  • GitHub Actions

Features

  1. Direct uploads using presigned URLs
  2. S3 events feeding SQS and Lambda, with retries and a dead-letter queue
  3. Thumbnails and metadata stored in DynamoDB
  4. Least-privilege IAM roles for every function
  5. CI/CD that deploys separate dev and prod stages on merge

Bonus: A cost report in the README showing the real cost per 1,000 uploads.

Embedded & IoT · Intermediate · 1–2 weeks

ESP32 Air Quality Station

A connected sensor node that measures CO₂, PM2.5, temperature, and humidity, and streams readings over MQTT to a live dashboard.

  • ESP32
  • C++ (ESP-IDF or PlatformIO)
  • MQTT
  • InfluxDB
  • Grafana

Features

  1. Sensor drivers over I²C and UART with calibration
  2. Deep-sleep power management for battery use
  3. MQTT with reconnect and local buffering during outages
  4. Over-the-air firmware updates
  5. Dashboard with thresholds and alerts

Bonus: A custom PCB designed in KiCad and a 3D-printed enclosure, shown in photos in the README.

Embedded & IoT · Advanced · 2–3 weeks

PID Motor Controller on FreeRTOS

A closed-loop DC motor speed and position controller on an STM32, with a desktop app for live plotting and tuning.

  • STM32
  • C
  • FreeRTOS
  • Quadrature encoder
  • Python (PyQt, pyqtgraph)

Features

  1. Encoder reading using hardware timer peripherals
  2. PID loop running at a fixed rate in its own RTOS task
  3. Serial protocol with framing and checksums
  4. Desktop GUI with live plots and gain sliders
  5. Host-side unit tests for the control logic

Bonus: An auto-tuning routine (relay or Ziegler–Nichols) with a before/after step-response plot.

Embedded & IoT · Advanced · 2–3 weeks

FPGA Game Console with VGA Output

Pong or Breakout built entirely in hardware with Verilog, driving a VGA monitor straight from an FPGA board with no CPU at all.

  • Verilog or SystemVerilog
  • Vivado or Quartus
  • Basys 3 or DE10-Lite board
  • Verilator

Features

  1. VGA timing generator for 640×480 at 60 Hz
  2. Sprite drawing and collision logic in hardware
  3. Debounced button input and a score on the seven-segment display
  4. Testbenches with automated waveform checks
  5. Clean module hierarchy with resource and timing reports

Bonus: Sound effects generated in hardware through PWM audio output.

Security · Intermediate · 1–2 weeks

Git Secrets Scanner & GitHub Action

A CLI and GitHub Action that scans repositories, including full commit history, for leaked API keys, passwords, and private keys.

  • Go
  • Regex + entropy analysis
  • GitHub Actions
  • SARIF

Features

  1. Pattern and entropy-based secret detection
  2. Fast scanning of the full Git history
  3. Allowlist file to suppress false positives
  4. SARIF output that shows up in GitHub code scanning
  5. Pre-commit hook mode that blocks leaks before they happen

Bonus: A seeded test corpus that reports precision and recall, compared against an existing open-source scanner.

Security · Intermediate · 1–2 weeks

SSH Honeypot with Attack Dashboard

A fake SSH server on a cheap cloud VM that records the logins and commands real attackers try, shown on a live dashboard.

  • Python (asyncssh) or Go
  • Docker
  • PostgreSQL
  • Grafana
  • GeoLite2

Features

  1. Fake shell that imitates a Linux machine and logs every command
  2. Analytics on the most common passwords and commands
  3. World map of where attempts come from
  4. Strong isolation: its own VM, a container, and no outbound network
  5. Automatically generated weekly threat summary

Bonus: A write-up analyzing one week of real attack data, published alongside the repo.

Security · Advanced · 2 weeks

End-to-End Encrypted File Sharing

Share files by link, with encryption done in the browser so the server never sees file contents or keys.

  • TypeScript
  • Web Crypto API
  • Node.js or Go
  • S3-compatible storage

Features

  1. AES-GCM encryption in the browser, with the key kept only in the URL fragment
  2. Chunked streaming encryption for large files
  3. Links that expire or stop after a set number of downloads
  4. Optional password protection with proper key derivation
  5. A written threat model in the README

Bonus: A verification page that shows the stored ciphertext is unreadable without the link.