The backend for a UK marketplace that connects construction businesses with tradespeople.

I built the auth layer with admin 2FA, social and phone sign-in and rate limiting, and in a security review I closed an account-takeover path and an MFA bypass. On top of that: profiles with skills, accreditations and auto-geocoding, job posting and applications, a discovery search that ranks tradespeople by availability, distance, rating and budget, and Stripe subscriptions with webhooks.

I also set up the CI pipeline in GitHub Actions and the one-command deploy to an Ubuntu server with health checks.

Stack: NestJS, Prisma, PostgreSQL, Stripe, Firebase, Docker, GitHub Actions.