Initial CV-aligned infrastructure portfolio

Rework portfolio around Linux operations, Zabbix monitoring, migration validation, and ELK/Grafana log observability.

Add AAP-style LVM resize workflow, Zabbix server/proxy/agent automation assets, Linux/AIX monitoring templates, and updated validation CI.

docs/architecture.md

@@ -0,0 +1,64 @@
+# Architecture Overview
+
+## Portfolio Shape
+
+This repository is organized around professional infrastructure work that maps to the CV:
+
+```text
+professional-infra/
+  linux-operations-automation/
+  zabbix-monitoring-incident-response/
+  migration-validation-framework/
+  log-observability-elk-grafana/
+
+devops-labs/
+  future side projects only when ready
+```
+
+## Project Roles
+
+### Linux Operations Automation
+
+Operational automation for Linux server work:
+
+- provisioning and baseline configuration,
+- patching and hardening,
+- service/failure simulation,
+- AAP-style LVM filesystem resize workflow with before/after evidence.
+
+### Zabbix Monitoring + Incident Response
+
+Simple checks and OS monitoring:
+
+- Zabbix server/proxy/agent automation structure,
+- active and passive proxy design,
+- Linux and AIX monitoring templates,
+- maintenance and incident response runbooks.
+
+### Migration Validation Framework
+
+Evidence tooling for platform/storage migrations:
+
+- before/after snapshot collection,
+- drift detection,
+- risk assessment,
+- JSON and HTML reports.
+
+### Log Observability ELK/Grafana
+
+Log monitoring and incident evidence:
+
+- Filebeat ingestion,
+- Logstash parsing,
+- Elasticsearch storage,
+- Kibana/Grafana review surfaces,
+- incident log simulation.
+
+## Design Principles
+
+- Keep implemented work separate from roadmap ideas.
+- Prefer reviewable automation and evidence over overbuilt local labs.
+- Make every project independently validatable.
+- Treat Zabbix and ELK/Grafana as complementary monitoring tools:
+  - Zabbix for simple checks and OS health,
+  - ELK/Grafana for logs and observability evidence.

docs/runbooks.md

@@ -0,0 +1,92 @@
+# Portfolio Runbooks
+
+These runbooks are scoped to the portfolio version of the projects. They favor fast validation and reviewable evidence over full production operations.
+
+## Linux Operations Automation
+
+Validate the implemented Ansible core:
+
+```bash
+cd professional-infra/linux-operations-automation
+make test
+```
+
+Run a safe failure simulation without live SSH hosts:
+
+```bash
+make demo
+```
+
+Review the AAP-style LVM workflow:
+
+```bash
+ansible-playbook -i inventory/hosts.ini playbooks/lvm_resize.yml --syntax-check
+cat docs/aap_lvm_resize_workflow.md
+```
+
+Run playbooks against your own lab hosts after updating `inventory/hosts.ini`:
+
+```bash
+make run
+make patch
+make harden
+make decommission
+```
+
+## Zabbix Monitoring + Incident Response
+
+Validate Zabbix playbooks and templates:
+
+```bash
+cd professional-infra/zabbix-monitoring-incident-response
+make test
+```
+
+Review proxy and OS monitoring operations:
+
+```bash
+cat docs/proxy-design.md
+cat docs/maintenance-runbook.md
+cat docs/incident-response-runbook.md
+```
+
+Linux and AIX checks are represented as templates and sample data. AIX is not run locally.
+
+## Migration Validation Framework
+
+Validate code and parser/report behavior:
+
+```bash
+cd professional-infra/migration-validation-framework
+make test
+```
+
+Run the included before/after comparison:
+
+```bash
+make demo
+```
+
+The demo intentionally reports `FAIL` to show a high-risk migration finding.
+
+## Log Observability ELK/Grafana
+
+Validate Docker Compose and required bind-mounted configs:
+
+```bash
+cd professional-infra/log-observability-elk-grafana
+make test
+```
+
+Generate sample incident logs without starting the full stack:
+
+```bash
+make demo
+```
+
+Start the full local demo stack with Docker:
+
+```bash
+make run
+make down
+```