Automation / SecOps

Security automation

Form → JSONL → n8n → Telegram + operator email copy.

research YEAR: 2026

PROBLEM

The same checklist is clicked by hand, with no log and no rollback.

PODEJŚCIE

A set of small automations with a runbook, including lead intake on this site.

ARCHITECTURE

  • local script or webhook
  • n8n (lead intake → Telegram + email copy via docker-mailserver)

IMPLEMENTATION

  • `/api/lead` on the site
  • n8n workflow under ops/n8n/ (imported on container start)
  • more scripts only when the procedure is written down

RESULT

  • JSONL lead store plus qualification
  • operator notify on Telegram and email

LESSONS

  • automation without a procedure repeats the error

Goal

Automation in this portfolio means concrete loops, not “AI ops”. The first visible piece: contact form → /api/lead → JSONL + n8n → Telegram and an operator email copy.

Two problems I solved

1. Leads with no trail and no owner

Inquiries vanished in an inbox or a chat. There was no log, no qualification and no certainty the operator was notified.

What I gained: JSONL storage, topic qualification from the page, and dual notify (Telegram + email from hello@tomek.st). I have a path from form submit to operator — with a honeypot and an API rate limit.

2. Shortcut automation without a procedure

I wanted “a script right away”. Without a written manual step, automations repeated errors or kept secrets in the wrong place.

What I gained: the rule: procedure first (input, success, rollback), then a small workflow under ops/n8n/ or a script. Bearer on the webhook, no secrets in the repo. Every automation has an owner.

What runs today

  1. POST /api/lead with validation and rate limiting.
  2. Local write plus n8n workflow import on container start.
  3. Operator notify; visitor autoresponder on a separate SMTP path.

Repo: tomstencel/tomek-st.

Boundaries

Not an enterprise RPA platform, not “AI will run the company”, and not a claim of hours saved in a client SOC.

Status

active on the lead path. More scripts only when the procedure is written down.

Want a similar setup?

This is a lab / concrete loop, not a slide. Tell me what you have on the table.

I usually reply within 1 business day. The inquiry is stored on the server; you get a confirmation from hello@tomek.st. Sending does not commit you to a contract.