CN=Sagar Sorathiya,OU=System Administration,OU=Open Source,DC=on,DC=prem

Internal tools that run on your own servers.

I'm a system administrator with more than ten years in IT infrastructure. Along the way I have built more than 40 utilities and enterprise solutions for my organisation and for friends who needed them. Five of those are now open source, and more are on the way.

10+years in IT infrastructure
40+utilities and solutions built
CEHcertified ethical hacker
5open-sourced so far, MIT
Deployment topologyintranet only
Employee browserdomain PC · Windows account
IIS reverse proxyHTTPS 443 · HSTS · Windows SSO
Five portals on Node.jsbound to 127.0.0.1 · run as Windows services
formflowconferencehubpassword-resetbulk-mailertask-tracker
Active DirectoryLDAPS 636
PostgreSQLTCP 5432
SMTP relayport 25
No cloud services, CDNs or external calls at runtime.
How I build

Written by the person who has to deploy it

On-premises first

Everything works on an isolated intranet and installs on a single Windows Server. Nothing calls home.

Directory sign-in

People log in with the Windows account they already have. Roles come from AD groups, with single sign-on behind IIS.

Everything audited

Sign-ins, approvals, sends and admin actions are logged with user and client IP, so there is an answer to who did what.

Secure by default

Least-privilege service accounts, encrypted secrets, rate limiting, and startup checks that refuse unsafe configuration.

Open-source projects

Five of the 40+, published for anyone to use

These are the first five I have cleaned up, made generic and released under the MIT license. Each one removed a paper or email process. The small screens are sketches of each portal's main view, drawn for this page with example data.

sagarsorathiya/formflowTypeScript

FormFlow

Replaces paper request forms and signature chasing

Department admins build a form by drag and drop, attach a visual approval workflow and publish it to a company, department or designation. A workflow engine routes each submission through its approvers with reminders and escalation, and produces a printable PDF with the full approval trail.

Next.js 14PrismaPostgreSQLBullMQ + RedisReact Flowdnd-kitpdf-lib
Open repository →
  • Form builder with 25+ field types, conditional visibility and multi-page forms
  • Approval, decision and notify nodes; parallel or any-one approval; delegation
  • Approval inbox with return, cancel and resubmit
  • Reports with CSV and Excel export and per-field answer breakdown
sagarsorathiya/smartroom-bookingTypeScript

ConferenceHub

Replaces the email chain behind every room booking

An employee picks a room and time on a live calendar. The server checks conflicts inside one transaction, so a slot can never be booked twice. Video-conference, AV, food and stationery requests become tasks for the IT and Administration queues, and everyone gets a calendar invite that updates in place.

React 19ViteExpress 5PrismaPostgreSQLJWTICS invites
Open repository →
  • One-click Google Meet or Webex links from the IT queue
  • Recurring bookings, early close and extend, room-level access restrictions
  • Five roles, and an audit log with 27 action types and IP tracking
  • Utilisation reports with 6 KPI cards and 8 chart panels
sagarsorathiya/Ad_Self_Password_ResetJavaScript

AD Self-Service Password Reset

Replaces help-desk calls for forgotten passwords

An intranet portal where Active Directory users change or reset their own password after proving who they are with security questions and an authenticator app. Passwords are never stored; every operation goes straight to AD over an encrypted connection. Help-desk staff get an admin panel for enrollment, locking and audit.

Node.jsExpress 5ldapjsPostgreSQLLDAPS / StartTLSWindows DPAPI
Open repository →
  • Answers hashed with bcrypt, TOTP secrets encrypted with AES-256-GCM
  • Rate limiting, account lockout, single-use 10-minute reset tokens, strict CSP
  • Refuses to start in production with a privileged bind account or weak secrets
  • 71 automated tests, no build step, no external requests
sagarsorathiya/bulk-mailerJavaScript

Bulk Mailer

Replaces sending hundreds of personal emails by hand

Upload an Excel sheet, write one email template, and the portal sends each person their own message with their own attachment, such as a Form 16. It uses the organisation's existing SMTP relay, so no document leaves the network through a third-party mail service.

Node.jsExpressPostgreSQLRedis + BullNodemailerPM2
Open repository →
  • Any Excel column becomes a {{placeholder}} in subject and body
  • Per-recipient attachments from a ZIP upload or network paths
  • Preview merged mails, then watch live progress from a background queue
  • Per-department allowlist of From addresses to prevent spoofing
sagarsorathiya/org-task-trackerTypeScript

Organization Activity Tracker

Replaces follow-ups tracked in spreadsheets and chat

A task and activity portal for a whole organisation. Managers assign work to one or many people, everyone sees the tasks in their own company and department scope, and a scheduler sends email and WhatsApp reminders before deadlines. An insights page shows workload, completion trends and overdue work.

Next.js 14PostgreSQLNextAuthSWRnode-scheduleWAHAshadcn/ui
Open repository →
  • Tasks with subtasks, comments, attachments and soft-delete with restore
  • Reminder rules by email, WhatsApp or both; outbox with retries and a dead-letter queue
  • Scoped visibility across multiple companies and departments
  • CSV and Excel import and export, signed database backups
More work

The rest of the 40+

Most of what I build is not public yet. It runs inside an organisation, was made for a friend's business, or is still being prepared for release. A selection:

AI

Organization AI

Self-hosted AI chat assistant for organisations, with Active Directory sign-in and multiple local models through Ollama.

IT assets

FloorView

Self-hosted portal that places IT assets on office floor plans.

Endpoints

ArgusIT

Endpoint health monitoring across a Windows fleet.

Security

SysmonForge

Sysmon log viewer and a central dashboard for many systems.

Security

EndGuard

Endpoint guardian for managed Windows machines.

Finance

Invoice automation

Turns an SAP sale-register export into tax invoices for a finance team.

Business

Billing and inventory

Billing, stock and GST system for small businesses, starting with apparel.

Workplace

Workplace operations

QR attendance, vehicle requests and canteen in one platform.

Utility

SheetSync

Keeps Excel files and Google Sheets in sync automatically.

Plus many smaller scripts and utilities for day-to-day administration. Ask me on LinkedIn if one of these would help you.

Shared foundations

The same building blocks across every project

Each portal is separate, but they are built to sit side by side on the same intranet and share one directory, one database engine and one mail relay.

ProjectAD / LDAP sign-inWindows SSOPostgreSQLAudit trailBackground jobsEmail
FormFlowYesIIS, NTLMYesAppend-only logBullMQ workerNotifications
ConferenceHubYesIIS, KerberosYes27 action typesNot neededICS invites
AD Password ResetYesNot applicableYesEvery attemptNot neededNot used
Bulk MailerYesNoYesSend logBull workerMail merge
Activity TrackerYesIIS headerYesTask and auth logsScheduler, outboxReminders
Mobile and platform work

Custom ROMs and pre-release testing

Alongside infrastructure work, I have spent years on the mobile side: getting Android builds running on devices they were not made for, and testing platforms before they reach the public.

Android

Custom ROM porting

Ported many custom ROMs to new devices.

Android

ROM development testing

Part of custom ROM development testing, checking builds and reporting bugs before release.

iOS

iOS developer beta programs

Ran iOS developer betas to try pre-release versions early.

Google

Google development research program

Took part in Google's development research program.

About

Sysadmin first, developer because the job needed it

I have spent more than ten years managing Windows endpoints, servers and Active Directory. Over that time I have built 40+ utilities and enterprise solutions, for my organisation and for friends who needed one. Each started as a real request: a form that needed four signatures, a room that got double-booked, a password reset at an awkward hour.

I build them the way I would want to receive them as an administrator, with a deployment guide, sane defaults and nothing that calls home. Five are published under the MIT license so far, so other IT teams can use them as they are or adapt them, and I plan to release more.

Background
  • 10+ years in IT infrastructureActive Directory, Windows Server, endpoint management
  • Certified Ethical Hacker (CEH)Security shapes how each portal handles credentials
  • Diploma in Cyber SecurityGFSU
  • Based in Gujarat, IndiaAhmedabad / Gandhinagar

Running an intranet with the same problems? The code is yours to use.