SecureLearn LMS · Interactive learning management for secrets management
A Next.js 16 learning management system that teaches developers secrets management through structured modules, hands-on terminal-based labs, quizzes, and verifiable certificates. Built with HeroUI, TypeScript, Tailwind, and Docker. Created for a Full Sail University course.Developers need to learn secrets management
Developers routinely hardcode secrets, share credentials, and misuse environment variables — mistakes that have led to real-world security breaches. There was a need for a structured, interactive curriculum that takes developers from the basics of hardcoded secrets all the way to enterprise-grade solutions, with hands-on labs and verifiable completion certificates.
What I built
SecureLearn is an interactive Learning Management System built with Next.js 16 and HeroUI. It provides a structured curriculum with modules and lessons, hands-on terminal-based labs, quizzes after each lesson, and verifiable certificates with unique verification numbers. Role-based dashboards serve students, instructors, and admins. The curriculum covers everything from hardcoded secrets to enterprise-grade solutions, with a best practices guide based on HashiCorp's 5 principles of secrets management and real-world examples drawn from security breaches.
Curriculum & labs
- Structured modules and lessons with progressive difficulty
- Hands-on terminal-based labs for practical learning
- Quizzes after each lesson to reinforce concepts
- Verifiable certificates with unique verification numbers
- Comprehensive coverage from hardcoded secrets to enterprise-grade solutions
- Best practices guide based on HashiCorp's 5 principles of secrets management
Platform features
- Role-based dashboards: student, instructor, and admin
- Demo repos: hardcoded-demo, shared-demo, env-demo (intentionally insecure)
- Real-world examples from security breaches
- Navigation, footer, breadcrumb, and tutorial progress components
- Code block component for syntax-highlighted examples
- GitHub Pages deployment with static export
What I did
- Solo developer — designed and built the entire LMS
- Created structured curriculum covering secrets management from basics to enterprise solutions
- Built interactive terminal-based labs and quiz system
- Implemented role-based dashboards for students, instructors, and admins
- Created verifiable certificate system with unique verification numbers
- Authored best practices guide based on HashiCorp's 5 principles
- Configured static export deployment to GitHub Pages
- Built intentionally insecure demo repos to show what NOT to do
Real artifacts you can verify
- GitHub repo: github.com/BradleyMatera/EthicsFrontEndDemo
- Live demo: bradleymatera.github.io/EthicsFrontEndDemo
- Commits: 47 commits on the main branch
- Build:
bun run build:pagesfor GitHub Pages static export - Repo structure:
src/app/(page.tsx, demos/hardcoded, demos/shared-secrets, demos/environment-variables, best-practices),src/components/(navigation, footer, Breadcrumb, TutorialProgress, providers, ui/code-block) - Demo repos referenced: hardcoded-demo, shared-demo, env-demo
- Created for: Full Sail University course
- Honest limitations: Some early text came from AI drafts, but building the project myself gave me a much better understanding of security basics. The demo repos (hardcoded-demo, shared-demo, env-demo) are intentionally insecure — they show what NOT to do.