Hardened self-hosted infrastructure with automated TLSTanveer Ahmed
Getting off a hosted service and onto infrastructure you own, without publishing your servers to the internet in the process.
An edge server fronting your machines over an encrypted tunnel, virtualisation and separated service containers behind it, a reverse proxy doing automated TLS renewal, firewall policy, an intrusion-prevention layer that filters forwarded traffic rather than only local traffic, capped logging, and backups that get restored as part of the job rather than merely scheduled.
Proxmox, VMware, LXC and Docker, Traefik or NGINX, Debian and Ubuntu.
Deliverables
Hypervisor and up to 5 services, built and hardened
Reverse proxy with automated TLS
Firewall and intrusion-prevention policy
Tested restore procedure, and the runbook for it
Starting at$1,100
Duration8 days
Tags
Bash
Docker
Git
Linux
Nginx
Service provided by
Tanveer Ahmed Dhaka, Bangladesh
- 1
- Followers
Hardened self-hosted infrastructure with automated TLSTanveer Ahmed
Starting at$1,100
Duration8 days
Tags
Bash
Docker
Git
Linux
Nginx
Getting off a hosted service and onto infrastructure you own, without publishing your servers to the internet in the process.
An edge server fronting your machines over an encrypted tunnel, virtualisation and separated service containers behind it, a reverse proxy doing automated TLS renewal, firewall policy, an intrusion-prevention layer that filters forwarded traffic rather than only local traffic, capped logging, and backups that get restored as part of the job rather than merely scheduled.
Proxmox, VMware, LXC and Docker, Traefik or NGINX, Debian and Ubuntu.
Deliverables
Hypervisor and up to 5 services, built and hardened
Reverse proxy with automated TLS
Firewall and intrusion-prevention policy
Tested restore procedure, and the runbook for it
$1,100