Server Management
Rock-solid infrastructure, optimized for performance and security. I set up, secure, and maintain servers so you never have to worry about downtime.
What I Manage
Provisioning, hardening, tuning, and day-two operations: the full lifecycle of a production server.
VPS Setup & Configuration
Full server provisioning on Hetzner, GCP, AWS, and DigitalOcean. OS installation, initial hardening, and application stack deployment.
cPanel/WHM Administration
Account management, resource allocation, PHP version control, email configuration, and troubleshooting.
Plesk Server Management
Plesk installation, extension management, domain administration, and WordPress toolkit configuration.
Nginx & Apache Configuration
Web server tuning, virtual host setup, reverse proxy, load balancing, and HTTP/2 optimization.
DNS & Cloudflare Management
DNS zone management, DNSSEC, Cloudflare CDN, page rules, WAF, and DDoS protection.
SSL/TLS Certificate Management
Let's Encrypt automation, commercial certificates, mixed content fixes, and HSTS.
Security Hardening
Firewall (UFW/iptables), fail2ban, SSH key-only auth, malware scanning, and rootkit detection.
Email Server Configuration
Split delivery setup between Zoho and Google Workspace, SPF/DKIM/DMARC configuration.
Performance & Monitoring
Resource monitoring, log analysis, bottleneck identification, caching (Redis, Varnish, OPcache).
Backup & Disaster Recovery
Automated backup systems, offsite storage (Backblaze B2, S3), and tested restoration procedures.
Server Migrations
Zero-downtime migrations between hosts. File transfer, database migration, and DNS cutover.
Docker & Containerization
Docker deployment, container orchestration, Docker Compose, and self-hosted application management.
Platforms & Tools
Security First
Every server I manage ships hardened by default, not as an afterthought.
Firewall Configuration
UFW and iptables rules with default-deny policies. Only essential ports open with rate limiting.
Fail2Ban Protection
Automatic IP banning after failed login attempts. Custom jails for WordPress, cPanel, and SSH.
SSH Key-Only Auth
Password authentication disabled. ED25519 keys with passphrase protection and custom port.
Malware Scanning
Scheduled ClamAV and ImunifyAV scans. Real-time file monitoring with automated quarantine.
Security Headers
CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy configured.
Automated Updates
Unattended security updates for OS packages. Scheduled maintenance with rollback plans.
Need a server that just works?
Let me handle the infrastructure so you can focus on your business.