Find Linux System Administration Projects

We need a developer to diagnose and resolve a deployment issue with our Next.js application on Netlify. The site builds successfully but fails to deploy, and we need someone to identify the root cause and implement a working fix. You should be comfortable reviewing build logs, troubleshooting deployment errors, and ensuring the site deploys correctly. This is a short-term project for someone who can quickly assess the issue and provide a reliable solution.

I currently use ScreenConnect but I'm looking to change to another product because ScreenConnect is getting expensive on a yearly basis and I want to reduce costs.

What I need is reliable / secure remote access with some mechanism for multi-factor authentication that is secure but also has to be reasonable to implement. I currently have about 1000 machines that I can access unattended and need that capability but I don't want to worry about someone hacking and getting access into my remote unattended machine, that carries a high liability exposure. I also need easy one-off support that in not unattended but when I get a call I send someone to a code or to a site where they can enter a code to give me remote access for the single session, it has to be easy. I can use windows quick connect on these occasions in a pinch but would prefer something better.

I need to be able to segement pc's into groups, maybe name the group the company name so all those assets are under 1 company. I need to be able to configure access to groups or specific pc's or a combination of both keyed to 1 specific user login. I often give my clients access to their own company machines or to their own individual machine.

I'm used to screenconnect and being able to run tools, commands, do file transfers, etc. and need the same capabilities and good performance.

I've been looking at rustdesk but there are many others and I'm looking for someone that has in depth experience and can propose a solution that is secure.

Thank You !

STRICT RULES - READ BEFORE BIDDING

1. NO BEGINNERS & NO EXPERIMENTS:
If you are a beginner or looking to "experiment" and figure things out on the go, your bid will be REJECTED. You must have proven, hands-on experience with ALL of these specific devices:

Cudy P2 5G Router

DrayTek Vigor 2915 Router

Yeastar S20 PBX
We are a live production business, NOT a testing ground. If you have not actively worked with these exact models inside out, DO NOT BID.

2. THE CORE AUTOMATION GOAL (MANDATORY):
We demand a 100% seamless, automated experience for the end-user. Moving in and out of the KSA office must require ZERO manual network adjustments.

3. STRICTLY ANYDESK OR ULTRAVIEWER ONLY:
ALL work MUST be done remotely via AnyDesk or UltraViewer on my machine. No direct access, VPN credentials, SSH keys, or passwords will be handed over.

4. MANDATORY BACKUPS & ROLLBACK:
You must take full configuration backups of all devices to my local PC before making a single change.

5. MILESTONES & 7-DAY GUARANTEE:
Payment will only be released after a 7-day stability testing period to ensure no VoIP drops, audio delays, or VPN disconnects occur.

6. THE "READ ME" TEST (MANDATORY TO BE HIRED):
To prove you are an expert, you MUST start your proposal by answering this exact question:
"Since our KSA router is behind a 5G CGNAT, how EXACTLY will you route both the HTTP signaling (Port 443) AND the UDP RTP media streams through the VPS/Caddy/WireGuard setup to successfully link with the remote Yeastar PBX without one-way audio issues?"
Proposals that do not start with a clear technical answer will be automatically IGNORED.

PROJECT DETAILS & TECHNICAL SCOPE

We need an expert to troubleshoot and optimize the Routing and Site-to-Site Link between Saudi Arabia (5G behind CGNAT) and Egypt.

Current Infrastructure:

KSA Site: DrayTek Vigor 2915 router cascaded behind a Cudy P2 5G router.

Egypt Site: Yeastar S20 PBX on stable Fiber. (NOTE: The Egypt connection is 100% stable. NO network modifications are needed on the Egypt side. The job is STRICTLY about fixing the routing/link from KSA to Egypt).

Cloud VPS (Contabo, Germany): Used as a relay to bypass the KSA 5G CGNAT. It runs Docker, Caddy (reverse proxy) with a No-IP DDNS.

Tunnels: WireGuard is ALREADY SET UP on the Contabo server for the site-to-site link.

The Exact Deliverables to Fix (via AnyDesk):

Zero-Touch Automation (VPN & Linkus): Both DrayTek Smart VPN and the Yeastar Linkus app must function automatically and flawlessly. They must transition seamlessly whether the user is inside the local office network or outside on external mobile networks, requiring ZERO manual switching or IP adjustments.

Uninterrupted GUI Access: Configure the Reverse Proxy (Caddy/VPS) and routing to guarantee stable, remote web access to the admin pages of the Cudy Router, DrayTek Router, and Yeastar PBX, without causing Port 443 conflicts with the DrayTek SSL VPN or Linkus signaling.

MTU Optimization: Calculate and adjust the exact MTU/MSS values across the network to completely eliminate voice drops, packet fragmentation, and ensure absolute connection stability over the 5G CGNAT.

Codec Optimization: Adjust and enforce the optimal audio codecs on the Yeastar PBX to guarantee zero voice delay (latency) across the site-to-site link.

WireGuard Routing Efficiency: Restructure and optimize the WireGuard routing tables to deliver the highest possible bandwidth efficiency, lowest overhead, and smoothest traffic flow between KSA and Egypt.

We need a freelancer to perform a trial test for DNS-related email security configurations. The work includes setting up SPF, DKIM, and DMARC records, verifying the changes, and confirming that the setup is working correctly. You should be able to test the configuration, identify any issues, and provide clear documentation of the steps taken and results. This is a short-term project for someone with experience in DNS and email security testing.

Are you our New ServerAdmin?
— Long-Term | Linux / Plesk / Docker / OpenVPN / Proxmox Mail Gateway

ABOUT US
We are a small, lean international business — multiple brands, a global team of freelancers, no corporate structure, no bureaucracy. We run a live PrestaShop shop, several WordPress sites, and a growing automation stack.

Let’s be completely honest from the start: We have worked with several system administrators in the past who made big promises but couldn't deliver.
We are completely done with these and looking for somebody who really know what he do and help us to run a stabile business in a longerm, fair and respectful enviroment.

We are looking for a true ServerAdmin
A genuine expert who actually knows their stuff inside out, holds their word, and takes full ownership.
We need a reliable long-term partner who closes the loops, secures the infrastructure, and lets us sleep soundly at night.

OUR INFRASTRUCTURE
-- VPS 30 #1: Plesk, WordPress sites, email
-- VPS 30 #2: PrestaShop live shop (High priority, zero tolerance for downtime)
-- VPS 20: Docker stack (n8n, Nextcloud, Vikunja, Uptime Kuma), OpenVPN gateway, Proxmox Mail Gateway
-- Interserver: Backup server
-- Cloudflare: DNS and WAF

WHAT MATTERS TO US
-- You think ahead: You don’t wait for fires or expired SSL certificates; you prevent them.
-- You hold your word: If you say you can do it, you do it. If you say you have controll something - you have done it - No excuses.
-- You communicate directly: No silence, no surprises, no sudden disappearances.
-- You respect ownership: Significant changes always require my final call.
-- You document everything: Before and after, cleanly and transparently.
-- Emergency availability: You are reachable when something breaks, including weekends.

YOU KNOW YOUR STUFF INSIDE OUT
We are not looking for someone who "has heard of" these tools.
You must have expert-level, hands-on experience in all of the following:

-- Linux (Ubuntu and Debian)
-- Plesk (Email, domains, SSL management)
-- Docker (Containers, reliable backup/restore strategies)
-- OpenVPN (Centralized gateway, secure certificate routing for multiple servers)
-- Proxmox Mail Gateway (Full production config, including DKIM, SPF, and tight spam/quarantine management)
-- Cloudflare (DNS, WAF, SSL rules)
-- Backup Architecture (Automated verification, retention, and quick recovery)

TO APPLY — ANSWER THESE DIRECTLY:
Generic, automated, or AI-generated copy-paste applications will be instantly declined.
Prove to us that you are the expert we need.
Please include in your application:
1. Your hands-on experience with Plesk, Proxmox Mail Gateway, and Debian/Ubuntu
2. Your weekend / emergency availability
3. Your hourly rate

Your are the right fit?
Great . than we’d love to hear from you.

Hey if you're someone who genuinely enjoys owning infrastructure and solving real production problems, this might be a good fit.

We're BikeFixUp, a tech-driven two-wheeler service startup based in India. We're small, we move fast, and we're looking for a DevOps engineer we can actually trust with our production environment not just someone to restart services when things break.

What you'll be working with:
Ubuntu VPS · Caddy · Cloudflare · PostgreSQL · Redis · Laravel/PHP backend · Multiple live projects

What the role actually involves:

Keeping our servers hardened, patched and monitored
Managing Caddy routing, Cloudflare DNS/SSL and firewall rules
Deploying applications, handling rollbacks, managing queues and workers
Owning database health PostgreSQL primarily, some MySQL and Redis
Troubleshooting beyond the server app config, runtime errors, connectivity, permissions
Maintaining a clean infrastructure runbook so nothing lives only in one person's head
Responding to critical incidents when they matter most
Proactive monitoring catching issues before they become outages

You're probably a good fit if:

You have 4+ years of hands-on Linux/DevOps experience in production environments
PostgreSQL isn't scary backups, restores, permissions, performance
You've worked with Caddy or Nginx, Cloudflare and Redis before
You can explain a real incident you diagnosed and fixed root cause and all
You're comfortable with a long-term, stable retainer arrangement
You can respond to critical issues promptly when needed

What we're offering:

$35/month fixed retainer this is a startup budget and we're upfront about it
Direct access to the founding team no middlemen, no ticket queues
Real ownership of a live production environment across multiple projects
A stable, long-term engagement if the relationship works well
Honest communication and genuine respect for your expertise

A few practical notes:

An NDA is required before production access is granted
We follow least-privilege access you'll have what you need, nothing unnecessary
Docker may be used case-by-case where it makes sense

To apply, start your message with: TRUSTED DEVOPS

Then tell us:

Your years of DevOps/Linux experience
Your familiarity with our stack (Ubuntu, PostgreSQL, Redis, Caddy/Nginx, Cloudflare)
One real production incident you diagnosed and resolved
Your backup and disaster recovery experience
Your typical response time for critical incidents
Confirmation you're okay signing an NDA

We're not looking for a vendor. We're looking for a technical partner who wants to grow with us.

Bonus (not required): Familiarity with PHP / Laravel — our main project runs on it, so if you've worked with it before, that's a plus when troubleshooting application-level issues.

Part-Time | Long-Term Monthly Retainer | NDA Required

We are looking for a reliable DevOps/Linux engineer to manage, secure, monitor and troubleshoot our production infrastructure.

This is a hands-on role for someone who can investigate problems across the full stack, identify the root cause, apply safe fixes and document important changes.

Our Environment:
Ubuntu VPS
Caddy
Cloudflare
PostgreSQL
Redis
Production APIs and backend services
Multiple applications and environments

Docker is not our default production approach, but may be used when technically appropriate and approved.

Main Responsibilities:
Server Administration & Security
Manage and harden Ubuntu production servers
Configure firewalls and secure SSH access
Apply security updates and patches
Monitor CPU, RAM, disk space, network and services
Investigate suspicious activity and unauthorized access
Minimize unnecessary public exposure
Manage credentials, keys and secrets securely
Caddy & Cloudflare
Configure reverse proxy routing
Manage domains, DNS and SSL/TLS
Maintain Cloudflare proxy and security settings
Protect origin servers from unnecessary direct access
Troubleshoot routing, DNS and certificate issues
Deployments & Production Operations
Deploy and maintain applications
Manage Git/GitHub-based releases
Configure environments and services
Handle rollbacks and service recovery
Manage workers, queues and scheduled jobs
Verify deployments and document production changes
Databases & Redis

Strong PostgreSQL experience is required.

You should also be comfortable with:

PostgreSQL backups, restores, permissions and troubleshooting
MySQL/MariaDB administration
Basic MongoDB troubleshooting
Redis administration and connectivity issues
Queue and worker failures
Database performance and connection problems
Application-Level Troubleshooting

You must be able to troubleshoot beyond the server itself.

Problems may involve:

Application configuration
PHP or Node.js runtime
Database connectivity
Redis or queues
File permissions
Caddy
Firewall
DNS or Cloudflare
Server resources
Deployment configuration

We need someone who finds the root cause—not someone who simply restarts services and hopes the issue disappears.

Backups, Monitoring & Recovery
Maintain automated backups
Verify backups and test restores
Monitor server, application, database, Redis, SSL and queues
Create recovery and rollback procedures
Respond to critical production incidents
Documentation Requirement

You must maintain a clear infrastructure runbook covering:

Servers and services
Ports and dependencies
Caddy and Cloudflare configuration
Deployment and rollback procedures
Database and Redis setup
Backup and restore procedures
Security configuration
Common troubleshooting steps
Disaster recovery

A new engineer should be able to understand and recover the environment without relying on one person’s memory.

Security & Confidentiality

An NDA is required before production access.

You must:

Use individual accounts where possible
Follow least-privilege access
Never share credentials or production data unnecessarily
Never commit secrets to Git
Never create undocumented access
Never expose internal services without approval
Report security incidents immediately

All infrastructure, source code, credentials and business information belong to BikeFixUp and must remain confidential.

Requirements
4+ years of practical DevOps/Linux experience preferred
Strong Ubuntu production experience
Strong PostgreSQL experience
Redis experience
Caddy or Nginx experience
Cloudflare experience
Production deployment and troubleshooting experience
Server security and backup/restore knowledge
Ability to explain real production incidents you have resolved
Comfortable with long-term monthly retainer work
Available for critical production issues when needed
About the Engagement

This is a part-time, long-term retainer with a small startup and a limited monthly budget.

We currently have a small team and around four active projects. In return, you will receive:

Real production infrastructure experience
Ownership and responsibility
Exposure to multiple projects and technologies
Direct communication with the founding team
Opportunity to grow with the company
Potential for a long-term professional relationship

We are looking for a trusted technical partner—not someone interested only in a one-time setup.

To Apply

Please include:

Years of DevOps/Linux experience
Experience with Ubuntu, PostgreSQL, Redis, Caddy/Nginx and Cloudflare
A real production incident you diagnosed and resolved
Your backup and disaster-recovery experience
Your availability and typical critical-incident response time
Your monthly expected fee
Confirmation that you are comfortable signing an NDA

Start your proposal with:

“TRUSTED DEVOPS”

We are not simply hiring someone to manage a server. We are looking for someone we can trust with our production infrastructure.

Critical Uptime, Security & Attack Response

The DevOps engineer must be proactively available to maintain maximum possible server uptime (target: 100%) and respond immediately to critical production incidents.

This includes:

Continuous monitoring of server health and critical services
Strong firewall configuration and port protection
SSH hardening and unauthorized-access prevention
Monitoring and responding to suspicious activity, brute-force attempts, DDoS/DoS attacks and other security threats
Protecting servers and databases from unauthorized public exposure.

Cloudflare security configuration and origin-server protection
Prompt investigation of malware, intrusion attempts or abnormal server activity
Immediate response to critical security incidents and service failures

Regular security updates, patching and server hardening
Proactive identification and prevention of vulnerabilities that could cause downtime

The goal is maximum uptime, strong cybersecurity and rapid incident response. The engineer should not wait for a service to go down before taking action proactive monitoring and prevention are expected.

Long-term: $40/month fixed.

We seek a detail-oriented technical professional to provide advanced support and system administration for our Linux infrastructure. In this role, you'll handle escalated tickets, troubleshoot complex technical issues, and manage user access and configurations within the Linux ecosystem. Responsibilities include resolving problems independently, maintaining system documentation, conducting user training, and collaborating with vendors and leadership on critical issues. You'll support both internal teams and external customers.

Requirements: 2+ years technical support or Linux administration experience, strong troubleshooting and problem-solving skills, excellent communication abilities, and Linux platform expertise or certification (RHEL, Ubuntu, or equivalent) preferred. CompTIA A+

We are looking for an experienced Linux/DevOps security specialist for a fixed-scope setup project, followed by ad-hoc (zero-hours) support.

Scope & Deliverables
° Server provisioning, OS, hardening. Create production, development, and shared services projects
° Configure networking, VPCs, firewall rules, Cloud NAT, and IAM
° Terraform configuration (Vultr provider) covering: compute instances, firewall rules, reserved IP, object storage buckets, DNS records. Remote state stored in object storage with locking.
° A written architecture proposal covering: VPS sizing, whether PostgreSQL runs self-hosted in Docker or on Vultr Managed Database (with cost/benefit and AWS migration implications), Redis topology, region selection, and the reverse proxy choice (nginx vs Caddy).
° Docker images (Dockerfiles). CI/CD pipeline definition
° An ADR (architecture decision record) file per significant decision, committed to the repo.
° Secrets storage & rotation procedure
° Infrastructure monitoring & alerting
° Confirmed monthly infrastructure cost estimate.

Required skills
° PostgreSQL administration and backup strategies
° CI/CD pipeline implementation
° GitHub Actions or similar deployment automation tools
° Cloud networking and security fundamentals
° Portability to AWS

We're hiring a hands-on operations specialist to provide Monday/Tuesday coverage and surge backup for our email, CRM, and hosting stack. You'll maintain email deliverability, handle day-to-day system checks, triage alerts, provision infrastructure as needed, and support releases with light QA/PR review. This role is practical, fast-moving, and requires strong ownership.

Schedule / Coverage

- Primary coverage: Mondays and Tuesdays
- Additional: on-call style surge backup as needed (during high volume periods or incidents)
- Responsiveness targets:
- Critical incidents: acknowledge/act quickly; aim for resolution within ~12 hours
- Medium/low issues: resolve within ~24 hours

Core Responsibilities

Email Deliverability & Messaging Ops
- Monitor and maintain internal/external email delivery health
- Manage SMTP routing and sending infrastructure
- Ensure compliance with sending limits/quotas and best practices (e.g., Google Workspace, AWS SES)
- Investigate bounces, complaints, throttling, and deliverability drops; implement fixes
- Manage and update deliverability/security DNS records (SPF, DKIM, DMARC), plus routing records as needed

CRM Operations
- Maintain and troubleshoot CRM messaging workflows (transactional + lifecycle messaging)
- Implement and test workflow changes safely (staging/production)
- Support CRM feature requests with operational/config/build assistance (pipelines, UI improvements, lead workflows)

Systems / Hosting / Infrastructure
- Perform routine server and hosting maintenance checks (uptime, basic performance, disk, logs)
- Triage incidents and alerts; coordinate escalation when needed
- Provision and manage infrastructure for projects:
- VMs
- Docker containers
- Databases
- Manage DNS and routing beyond email when necessary (tokens/auth-related records, service routing)


Security / Access / Secrets
- Manage secrets and API keys across providers (secure storage, access control, rotation practices)
- Ensure minimal-access principles and safe operational handling

Release Support / Quality
- Support code delivery with light QA/acceptance checks
- Participate in PR review when needed (operational correctness, deployment readiness, acceptance rules)
- Maintain Git repo hygiene and basic versioning/release processes

Documentation & Runbooks
- Keep technical stack documentation accurate and current
- Maintain/extend runbooks for common incidents and repeatable procedures

Nice-to-Have Skills
- SRE/DevOps mindset: monitoring, incident response, reliability practices
- Familiarity with deliverability tooling and DNS debugging
- Comfort with Docker-based deployments and basic database operations
- Experience supporting teams with release coordination and operational QA

Requirements
- Proven experience in at least two of: email deliverability ops, CRM operations, systems administration, DevOps/SRE support
- Strong DNS fundamentals (especially for email authentication records)
- Ability to troubleshoot under pressure and communicate status clearly
- Reliable, proactive ownership during coverage days

What Success Looks Like
- Stable deliverability with fast detection and remediation of issues
- Alerts are triaged quickly and closed within target windows
- Systems are maintained with minimal downtime and clean operational hygiene
- Smooth support on Mon/Tue and dependable surge coverage when volume spikes
- Documentation and runbooks stay updated as the stack evolves

Part-Time | Long-Term Monthly Retainer | NDA Required

We are looking for a reliable DevOps/Linux engineer to manage, secure, monitor and troubleshoot our production infrastructure.

This is a hands-on role for someone who can investigate problems across the full stack, identify the root cause, apply safe fixes and document important changes.

Our Environment:
Ubuntu VPS
Caddy
Cloudflare
PostgreSQL
Redis
Production APIs and backend services
Multiple applications and environments

Docker is not our default production approach, but may be used when technically appropriate and approved.

Main Responsibilities:
Server Administration & Security
Manage and harden Ubuntu production servers
Configure firewalls and secure SSH access
Apply security updates and patches
Monitor CPU, RAM, disk space, network and services
Investigate suspicious activity and unauthorized access
Minimize unnecessary public exposure
Manage credentials, keys and secrets securely
Caddy & Cloudflare
Configure reverse proxy routing
Manage domains, DNS and SSL/TLS
Maintain Cloudflare proxy and security settings
Protect origin servers from unnecessary direct access
Troubleshoot routing, DNS and certificate issues
Deployments & Production Operations
Deploy and maintain applications
Manage Git/GitHub-based releases
Configure environments and services
Handle rollbacks and service recovery
Manage workers, queues and scheduled jobs
Verify deployments and document production changes
Databases & Redis

Strong PostgreSQL experience is required.

You should also be comfortable with:

PostgreSQL backups, restores, permissions and troubleshooting
MySQL/MariaDB administration
Basic MongoDB troubleshooting
Redis administration and connectivity issues
Queue and worker failures
Database performance and connection problems
Application-Level Troubleshooting

You must be able to troubleshoot beyond the server itself.

Problems may involve:

Application configuration
PHP or Node.js runtime
Database connectivity
Redis or queues
File permissions
Caddy
Firewall
DNS or Cloudflare
Server resources
Deployment configuration

We need someone who finds the root cause—not someone who simply restarts services and hopes the issue disappears.

Backups, Monitoring & Recovery
Maintain automated backups
Verify backups and test restores
Monitor server, application, database, Redis, SSL and queues
Create recovery and rollback procedures
Respond to critical production incidents
Documentation Requirement

You must maintain a clear infrastructure runbook covering:

Servers and services
Ports and dependencies
Caddy and Cloudflare configuration
Deployment and rollback procedures
Database and Redis setup
Backup and restore procedures
Security configuration
Common troubleshooting steps
Disaster recovery

A new engineer should be able to understand and recover the environment without relying on one person’s memory.

Security & Confidentiality

An NDA is required before production access.

You must:

Use individual accounts where possible
Follow least-privilege access
Never share credentials or production data unnecessarily
Never commit secrets to Git
Never create undocumented access
Never expose internal services without approval
Report security incidents immediately

All infrastructure, source code, credentials and business information belong to BikeFixUp and must remain confidential.

Requirements
4+ years of practical DevOps/Linux experience preferred
Strong Ubuntu production experience
Strong PostgreSQL experience
Redis experience
Caddy or Nginx experience
Cloudflare experience
Production deployment and troubleshooting experience
Server security and backup/restore knowledge
Ability to explain real production incidents you have resolved
Comfortable with long-term monthly retainer work
Available for critical production issues when needed
About the Engagement

This is a part-time, long-term retainer with a small startup and a limited monthly budget.

We currently have a small team and around four active projects. In return, you will receive:

Real production infrastructure experience
Ownership and responsibility
Exposure to multiple projects and technologies
Direct communication with the founding team
Opportunity to grow with the company
Potential for a long-term professional relationship

We are looking for a trusted technical partner—not someone interested only in a one-time setup.

To Apply

Please include:

Years of DevOps/Linux experience
Experience with Ubuntu, PostgreSQL, Redis, Caddy/Nginx and Cloudflare
A real production incident you diagnosed and resolved
Your backup and disaster-recovery experience
Your availability and typical critical-incident response time
Your monthly expected fee
Confirmation that you are comfortable signing an NDA

Start your proposal with:

“TRUSTED DEVOPS”

We are not simply hiring someone to manage a server. We are looking for someone we can trust with our production infrastructure.

Critical Uptime, Security & Attack Response

The DevOps engineer must be proactively available to maintain maximum possible server uptime (target: 100%) and respond immediately to critical production incidents.

This includes:

Continuous monitoring of server health and critical services
Strong firewall configuration and port protection
SSH hardening and unauthorized-access prevention
Monitoring and responding to suspicious activity, brute-force attempts, DDoS/DoS attacks and other security threats
Protecting servers and databases from unauthorized public exposure.

Cloudflare security configuration and origin-server protection
Prompt investigation of malware, intrusion attempts or abnormal server activity
Immediate response to critical security incidents and service failures

Regular security updates, patching and server hardening
Proactive identification and prevention of vulnerabilities that could cause downtime

The goal is maximum uptime, strong cybersecurity and rapid incident response. The engineer should not wait for a service to go down before taking action proactive monitoring and prevention are expected.

Long-term: $35/month fixed.

We need a developer to test our current backend system, identify issues, and provide clear recommendations for future updates. The work includes reviewing existing functionality, testing performance and reliability, and documenting findings in an organized way. You should be able to communicate issues clearly and suggest practical improvements that support long-term system stability and growth. This is a part-time project for someone who can work independently and deliver thoughtful recommendations based on testing results.

We are looking for an experienced Microsoft Dynamics 365 Consultant to help automate a manual business process by integrating Microsoft Dynamics 365 with an external system.

Project Scope:

* Analyze the current manual workflow.
* Design and implement an automated process in Microsoft Dynamics 365.
* Integrate Dynamics 365 with an external system using APIs or other suitable integration methods.
* Configure workflows, Power Automate, plugins, or custom development where required.
* Ensure secure and reliable data synchronization between both systems.
* Test the solution and resolve any issues before deployment.
* Provide documentation and knowledge transfer after project completion.

Required Skills:

* Microsoft Dynamics 365 CE / CRM
* Power Platform (Power Automate)
* C# Plugins and Custom Workflow Development
* REST APIs / Web APIs
* JavaScript (preferred)
* Dataverse
* Experience with third-party system integrations

Ideal Candidate:

* Proven experience delivering Dynamics 365 integration projects.
* Strong understanding of business process automation.
* Able to recommend the best technical approach based on project requirements.
* Good communication skills and availability for regular updates.

We are looking for an experienced ISP Network Engineer for remote technical support and troubleshooting.

Our network uses MikroTik, PPPoE, VLANs, OLT/GPON and RADIUS. The engineer should have strong practical experience in ISP networks and be able to troubleshoot issues remotely.

Required skills:
• MikroTik RouterOS
• PPPoE server and customer management
• VLAN configuration
• OLT/GPON/ONU troubleshooting
• RADIUS authentication and accounting
• Bandwidth management and QoS
• Routing, NAT and Firewall
• Network monitoring and troubleshooting
• Fiber, SFP/SFP+ and Ethernet networking

We need someone who has practical ISP experience and can provide reliable remote support when required.

Please share your experience with MikroTik, OLT, PPPoE, VLAN and RADIUS, along with your monthly support charges.

Trial job: n8n automation — Google Merchant Center disapproval alerts to Slack/Telegram

I run paid media on Google Ads and Google Merchant Center and I'm looking for a developer who is comfortable with n8n, Google APIs, and self-hosted infrastructure. This is a small, clearly scoped trial. If it goes well there's ongoing work.

The job

Build an n8n workflow that:

Checks Google Merchant Center on a daily schedule for product disapprovals and warnings (Content API / Merchant API)
Posts a clear summary to Slack or Telegram — product ID, title, issue reason, affected countries
Only alerts on new or changed issues, not the same items every day
Uses proper auth (service account or OAuth), with credentials stored in n8n's credential store, never hardcoded
Sends an error notification if the workflow fails

Deliverables

Working workflow exported as JSON
Short setup notes: how credentials are configured, how to change the schedule or channel

Budget: $100 fixed price, split into two milestones — $40 when disapprovals are pulling into n8n, $60 when alerts are live with dedupe and notes.

Ongoing work after the trial (scoped and paid separately): Hermes Agent setup on a Hetzner VPS, connecting Google Ads and Merchant Center APIs, and cleaning up my existing n8n workflows.

You should have

Real n8n experience, including HTTP/API nodes
Hands-on work with the Google Ads API and/or Merchant Center API (OAuth, scopes, developer tokens)
Basic Linux/Docker skills
A careful approach to credentials — this touches an ad account

To apply, answer briefly:

Have you connected Google Merchant Center or Google Ads to n8n before? What was the hardest part?
How would you handle "only alert on new issues"?

Proposals that skip these questions will be passed over.

I’m looking for an experienced Discord specialist to build a clean, professional server named Anushka Bhatia. The work includes custom channels and categories, roles and permissions, welcome and rules setup, community and professional sections, job and opportunity channels, a private client/support area, a ticket system, and essential bots and moderation setup. You should have proven experience building custom Discord servers and be able to deliver a complete, ready-to-use server. Please share examples of your previous work and a short description of what you can build. Looking for someone who can start ASAP.

Linux Systems Administrator
Job Type: Full-Time
Location: Killeen, Texas
Department: Systems Support

Job Summary
We are looking for an experienced Linux Systems Administrator to administer, monitor, secure, and maintain enterprise Linux environments. The ideal candidate will have strong hands-on experience with RHEL, Ubuntu, and CentOS, along with familiarity with Windows Server, VMware, and containerized environments such as OpenShift and Kubernetes.

This role will provide Tier 2/3 technical support, troubleshoot complex infrastructure issues, support enterprise applications, and collaborate closely with development, DevOps, and security teams.

Key Responsibilities
Administer, monitor, maintain, and troubleshoot Linux systems, including RHEL, Ubuntu, and CentOS.
Install, configure, secure, and optimize Linux services such as systemd, SSH, Apache/Nginx, cron, and related services.
Perform Linux system upgrades, patching, configuration, and security hardening.
Provide Tier 2/3 support for escalated server and infrastructure issues.
Identify, research, and implement Linux and OpenShift solutions and applications.
Support and troubleshoot enterprise applications and their underlying server environments.
Manage Linux security administration in collaboration with information security teams.
Monitor system health, performance, availability, and capacity, and proactively address potential issues.
Collaborate with development, DevOps, infrastructure, and security teams to support application and infrastructure requirements.
Provide technical guidance and support to IT teams on Linux configuration and administration.
Maintain awareness of Linux and OpenShift updates, changes, and new releases, and communicate relevant changes to stakeholders.
Work with vendors and internal teams to resolve technical issues and support applications and infrastructure.
Create and maintain accurate technical documentation, processes, and standard operating procedures.
Participate in a weekly on-call rotation to respond to after-hours infrastructure issues.
Travel to other data centers or company locations as required.
Perform other duties and assignments as needed.
Windows Server & Virtualization
Provide administration and support for Windows Server environments and related services.
Working knowledge of Active Directory, Group Policy, DNS, DHCP, and PowerShell.
Administer VMware vSphere/ESXi environments, including:
Virtual machine deployment
Resource management
VM administration
Snapshots
Basic troubleshooting
OpenShift & Containerization
Support and administer OpenShift/Kubernetes environments.
Install, configure, maintain, upgrade, monitor, and troubleshoot OpenShift/Kubernetes clusters.
Support containerized applications using OpenShift, Kubernetes, or Docker.
Stay current with developments, updates, and best practices in container orchestration technologies.
Security & Compliance
Ensure compliance with security standards, patching schedules, and organizational policies.
Apply security hardening practices to Linux and server environments.
Understand common web application and infrastructure vulnerabilities, risks, and appropriate countermeasures.
Work closely with security teams to identify and remediate security issues.
Maintain confidentiality of sensitive customer, business, and internal information.
Required Qualifications & Skills
Bachelor's degree in Computer Science, Computer Engineering, Information Technology, or a related field preferred. Equivalent relevant experience may be considered.
Strong hands-on experience administering Linux servers, preferably RHEL, Ubuntu, and/or CentOS.
Strong troubleshooting and analytical skills with the ability to independently research and resolve complex technical issues.
Experience with Linux system administration, configuration, patching, and security.
Knowledge of Windows Server administration and core services.
Familiarity with VMware vSphere/ESXi.
Knowledge of web/application server technologies such as Apache and Nginx.
Understanding of server and web application security principles.
Ability to manage multiple priorities and meet project deadlines.
Strong written and verbal communication skills.
Ability to collaborate effectively with technical and non-technical stakeholders.
Ability to work independently as well as part of a broader IT team.
Willingness to participate in an on-call rotation.
Preferred Qualifications
Experience with OpenShift, Kubernetes, and/or Docker.
Experience installing, configuring, upgrading, monitoring, and troubleshooting OpenShift/Kubernetes clusters.
Familiarity with CI/CD pipelines, Git, and DevOps practices.
Experience with Infrastructure as Code (IaC) tools such as Terraform and Ansible.
Experience with monitoring and logging platforms such as Prometheus, Grafana, ELK, or Splunk.
Familiarity with Linux security hardening and patch management.
Certifications such as RHCSA, RHCE, CKA, CKAD, or OpenShift certifications are a plus.
What We're Looking For
We are looking for someone who is technically strong, security-conscious, and comfortable working across Linux infrastructure, virtualization, and modern containerized environments. The ideal candidate should be proactive, capable of handling complex production issues, and able to collaborate effectively across IT, DevOps, development, and security teams.

Part-Time | Long-Term Monthly Retainer | NDA Required

About the Role

We're a small tech-driven startup (BikeFixUp) looking for a reliable, hands-on DevOps/Linux engineer to own, secure, monitor, and maintain our production infrastructure on an ongoing basis.

This is not a one-time setup job. We need a trusted technical partner who can investigate real production issues across the full stack, identify root causes, apply safe fixes, and keep clear documentation someone who takes responsibility, not just tasks.

Our Stack
OS: Ubuntu (VPS)
Reverse Proxy: Caddy
DNS/CDN/Security: Cloudflare
Databases: PostgreSQL (primary), MySQL/MariaDB, MongoDB (basic)
Cache/Queues: Redis
Backend: Laravel (existing), NestJS (active development)
Frontend: Next.js, React Native
Version Control: Git / GitHub
Containerization: Docker (used selectively, not default — approved case-by-case)
Scale: ~4 active projects, small team, production APIs and backend services
Responsibilities
Server Administration & Security
Harden Ubuntu servers firewalls, SSH, open ports, unnecessary services
Apply security patches and OS updates on a regular schedule
Monitor CPU, RAM, disk, network, and critical services
Manage credentials, keys, and secrets securely (no secrets in Git, ever)
Investigate suspicious activity, brute-force attempts, and unauthorized access
Minimize public-facing attack surface
Caddy & Cloudflare
Configure and maintain reverse proxy routing
Manage domains, DNS records, and SSL/TLS certificates
Maintain Cloudflare security rules and proxy settings
Protect origin servers from direct public exposure
Troubleshoot routing, DNS propagation, and certificate issues
Deployments & Production Operations
Deploy and maintain applications across environments (staging/production)
Manage GitHub-based release workflows
Handle rollbacks and service recovery when deployments fail
Manage workers, queues, and scheduled jobs
Verify deployments and document all production changes
Databases & Redis
PostgreSQL: backups, restores, permissions, query troubleshooting, performance
MySQL/MariaDB: general administration
MongoDB: basic troubleshooting
Redis: connectivity, memory, queue/worker failures
Application-Level Troubleshooting

You must go beyond the server. When something breaks, you should be able to trace the issue across:

Application config and environment variables
PHP or Node.js runtime errors
Database or Redis connectivity
File permissions
Queue/worker failures
Caddy routing or Cloudflare rules
DNS resolution
Server resource exhaustion

We need root cause analysis not "I restarted the service and it's working now."

Backups, Monitoring & Recovery
Maintain automated backups for databases, files, and configurations
Verify backup integrity and test restores periodically
Monitor uptime, SSL expiry, Redis, queues, and application health
Maintain documented rollback and disaster recovery procedures
Respond to critical production incidents promptly
Uptime & Incident Response

Our target is maximum possible uptime. This means:

Proactive monitoring don't wait for things to break
Strong DDoS/DoS and brute-force mitigation via Cloudflare and firewall rules
SSH hardening and access control
Immediate response to critical incidents (downtime, data exposure, security breach)
Prompt investigation of any malware or intrusion attempts
Regular security audits and vulnerability checks
Documentation Requirement

You must maintain a living infrastructure runbook that any new engineer could use to understand and recover our environment. It must cover:

Servers, services, ports, and dependencies
Caddy and Cloudflare configuration
Deployment and rollback procedures
Database and Redis setup
Backup and restore procedures
Security configuration
Common troubleshooting steps
Disaster recovery playbook
Security & Confidentiality

An NDA is required before any production access is granted. You must:

Use individual accounts wherever possible
Follow least-privilege access principles
Never share credentials or production data
Never commit secrets to any repository
Never create undocumented access paths
Never expose internal services without explicit approval
Report any security incidents immediately

All infrastructure, source code, credentials, and business information are confidential property of BikeFixUp.

Requirements
4+ years of hands-on DevOps/Linux experience (Ubuntu production environments)
Strong PostgreSQL experience (required)
Solid experience with Caddy or Nginx
Redis administration experience
Cloudflare setup and security configuration
Real-world production incident experience — you should be able to describe actual incidents you diagnosed and resolved
Comfortable with long-term, part-time retainer work
Available for critical production incidents with a fast response time
What You'll Get
Real ownership of production infrastructure across multiple live projects
Direct communication with the founding team no middlemen
Exposure to a growing multi-tech stack (Laravel, NestJS, Next.js, React Native)
A stable long-term engagement with room to grow
A relationship built on trust, not just tickets
How to Apply

Start your proposal with: "TRUSTED DEVOPS"

Then include:

Years of DevOps/Linux experience
Specific experience with Ubuntu, PostgreSQL, Redis, Caddy/Nginx, and Cloudflare
One real production incident you diagnosed and resolved (brief, specific)
Your backup and disaster recovery experience
Your availability and typical response time for critical incidents
Your expected monthly fee
Confirmation you're comfortable signing an NDA

Retainer Budget: $35/month (fixed) long-term engagement

We're a small startup with a limited budget but serious infrastructure needs. We're looking for someone who values trust, ownership, and a long-term working relationship over a high one-time payday.

Need help installing Immich on a Truenas server. The work includes setting up the environment, configuring the installation, and ensuring everything runs smoothly after setup. Please share relevant experience with server installations and similar projects.

We’re seeking a full stack engineer to help build and maintain a scalable web application. You’ll work across the entire stack, from front-end development to back-end systems and deployment. The ideal freelancer can contribute to product development, troubleshoot issues, and support ongoing improvements. This is a long-term opportunity for someone who is reliable, proactive, and comfortable working independently while collaborating with the team when needed.

We need a senior Laravel developer to secure and upgrade a live booking system that has been running since 2016.
The system takes real bookings and real payments every day. It runs on a self-managed DigitalOcean droplet. It is years out of date, it has been attacked before, and the developer who built it left no documentation.

Two things are happening here and both matter. The security work is urgent and starts in week one, on the live server, before the upgrade planning is finished. The upgrade follows it.
This is not a redesign. Every feature has to keep working: booking, admin, pricing, capacity, payments, PDF generation and email.

The stack today
• Laravel 5.2.41, PHP 7.0, MySQL
• Admin in Laravel Blade, jQuery and Bootstrap 3
• Customer booking frontend in AngularJS 1.5, compiled and served from public/booking
• Stripe and SagePay/Opayo, Excel export, wkhtmltopdf, Mailgun
• Ubuntu, Nginx, PHP-FPM 7.0, MySQL on a DigitalOcean droplet managed over SSH

What the work covers
Security first. Establish whether anything is still present from the previous compromise. Audit every credential. DigitalOcean Cloud Firewall, SSH hardening, Cloudflare with WAF. Logging with automated email alerts. Backups with a tested restore.
Server. Rebuild on current Ubuntu, Nginx, PHP 8.3 and current MySQL, with a password protected staging clone. You need real DigitalOcean and Linux VPS experience, not Laravel alone.
Laravel. 5.2 to 11 in stages, PHP 7.0 to 8.3, with the application working at the end of each stage. Laravel Shift or equivalent is fine, tell us if you plan to use it. Replace Bower, Gulp and Elixir, the old Excel library and anything else unmaintained.
Admin. Blade, jQuery and Bootstrap 3 working on the new stack. Functional fixes only, no redesign.
Integrations and testing. Stripe, Opayo, wkhtmltopdf, Excel export and Mailgun all retested. Automated smoke tests on the booking flow and both payment paths, because there are none today.

Handover.
A deployment runbook, an upgrade log and a security findings report, written for a developer who has never seen the system.
Not in scope
The AngularJS 1.5 booking frontend is not being rewritten. It must keep working on the new stack. We may fund that separately later, so mention it if you have done AngularJS to modern Angular work, but it is not a requirement.
How we work
Plan first, then work in stages. After every stage the live booking flow, admin and payments must still work. Fixed scope, with a documented scope of work covering 18 items and acceptance criteria. We share it with shortlisted applicants and ask you to estimate every item. Payment is in stages against working deliverables.
Who we want
Individual freelancers only. We are not looking for an agency, a studio, or a developer who will pass this to a team. If you are one person and this is your own work, we are interested wherever you are based.
Agencies: do not approach us by email, phone, LinkedIn or WhatsApp. Any approach outside Upwork will be ignored and reported to Upwork.
How to apply
Answer the questions below. Applications that do not answer them will not be read.
Shortlisted applicants are paid for a short review task before we commit to the full engagement. You get read access to the codebase and the server and give us a written upgrade plan, what you found, the three biggest risks, and your estimate against every item on the scope of work.

Configure a RunPod Ubuntu instance with NVIDIA drivers, CUDA, and Docker/NVIDIA Container Runtime. Deploy vLLM as an OpenAI-compatible endpoint on port 8000 and Open WebUI on port 3000 or 8080 using a single clean docker-compose.yml. Test the setup by pulling and running the Qwen/Qwen2.5-7B-Instruct model to confirm GPU offloading and full chat streaming. Use only official Docker images and avoid custom binaries or obfuscated scripts. Deliver the docker-compose.yml file and a short Loom screen recording showing streaming inference in Open WebUI.

Email Coordinator AI Agent
A phased build that takes the Email Coordinator's triage, routing, lead handling and follow-up tracking from human-operated to agent-operated, with people kept exactly where the risk is.

Overview
We are looking for an experienced DevOps or infrastructure specialist to help deploy a production-ready Laravel application on a Linux VPS. This is a targeted task to establish a solid foundation, automate the deployment workflow, and ensure the server and database are configured securely for production traffic.

Scope of Work

* VPS Provisioning & Web Server Setup: Configure a fresh Linux server with Nginx, PHP-FPM, and Redis. Secure the server with a UFW firewall and basic SSH hardening.
* Database Setup: Install and configure the production database (MySQL or PostgreSQL), optimize basic performance settings, and restrict external access.
* CI/CD Pipeline Construction: Build an automated pipeline (e.g., GitHub Actions, GitLab CI) integrated with a deployment tool (like Deployer or Envoy) to enable reliable, zero-downtime deployments.
* Laravel Production Readiness:
* Secure the `.env` configuration and restrict access to the project root by ensuring Nginx routes traffic exclusively through the `public/` directory.
* Set up and monitor Laravel queue workers using Supervisor.
* Configure cron jobs for Laravel's task scheduling.
* Execute application optimizations (route, config, view, and event caching) for production performance.


* SSL Implementation: Secure the domain with a free Let's Encrypt/Certbot SSL certificate.

Deliverables

* A fully functioning, secure production environment on the provided VPS.
* An automated CI/CD pipeline where code pushed to the deployment branch triggers a successful, zero-downtime rollout.
* A brief handover document detailing server configuration paths, database credentials, and instructions for managing the queue workers and SSL renewals.

Requirements

* Proven experience deploying Laravel applications to self-managed VPS environments.
* Deep knowledge of Linux server administration, Nginx, and secure database management.
* Hands-on experience with modern CI/CD workflows and deployment scripts.

To Apply, Please Provide:

1. A brief summary of your approach to handling zero-downtime deployments.
2. The CI/CD tools you prefer to use for this type of task.
3. Your estimated timeline and fixed-price quote for completion.

We are looking for an experienced Server / IT Infrastructure professional to independently review two proposed server specifications and advise us which option is most suitable for our business.

We currently operate a server environment supporting approximately 500 websites, together with email hosting and databases. We are reviewing our server infrastructure to ensure that we have the right balance of:

Performance and reliability
Data protection and redundancy
Backup and disaster recovery
Storage capacity and future growth
Cost effectiveness

We have received two different proposed server specifications, with different hardware, storage and RAID configurations. As we are not server specialists, we would like an independent expert to review both proposals and explain which solution is most appropriate for our actual requirements.

What we need from you:

Review both server specifications in detail.
Compare the processors, RAM, storage, NVMe/SSD/HDD configuration, RAID setup and other relevant hardware.
Assess whether either specification is over- or under-powered for our requirements.
Review the proposed backup/storage approach and identify any weaknesses.
Advise which of the two options you would recommend and why.
Identify any components you would change to improve reliability or reduce unnecessary cost.
Advise whether a separate NAS/backup server would be appropriate and what specification would be sufficient.
Explain your recommendation in clear, non-technical language so that we can make an informed purchasing decision.

We are not looking for someone to sell us hardware. We are looking for independent professional advice before making a purchase.

This should initially be a relatively small consultancy task. We will provide both specifications and further information about our current server/storage usage to the selected freelancer.

Ideal experience:

Server infrastructure / systems administration
Dell, HPE or similar enterprise server hardware
RAID and enterprise storage
NAS and backup solutions
Web/email hosting environments
Disaster recovery and backup planning

When applying, please briefly explain your experience with server infrastructure and RAID/storage design and confirm that you are comfortable providing an independent comparison rather than supplying the hardware.

We operate an automation agent that drives SAP GUI for Windows (thick client) to execute business transactions on behalf of our users. The current implementation is single-threaded: it runs one screen at a time, takes control of the physical mouse and keyboard, and blocks the user's desktop while it works.

We are re-architecting it into a parallel, unattended, non-interfering system. We need an engineer who has built this before and knows where the landmines are — session limits, scripting security policy, modal-dialog handling, Windows session licensing — rather than someone who will discover them on our timeline.

What you will build
Migrate from screen-level automation to the SAP GUI Scripting API. Replace synthetic mouse/keyboard input with the COM object model (GuiApplication → GuiConnection → GuiSession) so commands dispatch directly to the GUI and never steal focus from the user.
Implement multi-session parallelism. Use CreateSession() to run several SAP windows concurrently under a single connection, respecting rdisp/max_alt_modes limits. Design the worker pool to degrade gracefully when the session ceiling is reached.
Design the isolation layer. Evaluate and implement worker isolation so agent activity is invisible to the end user. Candidate approaches include Hyper-V VMs, Windows Server RDS, or Azure Virtual Desktop multi-session. You will be expected to produce a written recommendation covering licensing implications, not just a technical preference.
Build a robust orchestration and error layer. Session lifecycle management, unexpected modal-dialog handling, transaction retry and idempotency, structured logging, and clean recovery from GUI hangs or dropped connections. The COM model is STA and not thread-safe — your design must reflect that.
Identify and migrate transactions to RFC/BAPI where possible. Assess which processes can bypass the GUI entirely via SAP Connector for .NET (NCo). We expect a meaningful share of current UI automation to be replaceable with direct, thread-safe calls.
Document and hand over. Architecture documentation, runbooks, Basis-team configuration requirements, and a deployment guide. Knowledge transfer to our internal team is part of the engagement, not an afterthought.

Like in title,
This would require some experienced Django developer with some competences in react frontend.
Django cookies cutter app is hosted on Ubuntu server and is dockerized.
Some additional tasks may appear.

STRICT RULES - READ BEFORE BIDDING
. ZERO-TOLERANCE HARDWARE RULE:
DO NOT BID if you do not have direct, hands-on experience with ALL of these specific devices:

Cudy P2 5G Router

DrayTek Vigor 2915 Router

Yeastar S20 PBX
We are a live production business, NOT a testing ground or a network engineering academy. If you do not know these exact models inside out, do not waste our time. We will not teach you how our network works.

2. THE CORE AUTOMATION GOAL (MANDATORY):
We demand a 100% seamless, automated experience for the end-user. Moving in and out of the office must require ZERO manual network adjustments.

Smart VPN (Always-On): It must run 24/7. When a user walks into the KSA office and connects to the local Wi-Fi, the routing must automatically prioritize local traffic without conflicts. When outside on 5G, it must route to the remote sites smoothly. No manual ON/OFF switching.

Linkus App: It must auto-switch instantly. It must use the Local PBX IP when inside the office, and automatically switch to the DDNS endpoint when outside, bypassing the VPN completely to avoid latency.

3. STRICTLY ANYDESK OR ULTRAVIEWER ONLY:
ALL work MUST be done remotely via AnyDesk or UltraViewer. No direct access, VPN credentials, SSH keys, or passwords will be handed over.

4. MANDATORY BACKUPS:
You must take full configuration backups of all devices to my local PC before making a single change.

5. NO TIME-WASTING:
Do NOT message me asking "What is the problem?" or "What is your budget?". The scope is below. Your bid is your final price. Violating this results in an immediate BLOCK.

--- PROJECT DETAILS & TECHNICAL SCOPE ---

We need an expert to troubleshoot and optimize our site-to-site network and VoIP infrastructure between Saudi Arabia (5G behind CGNAT) and Egypt (Fiber).

Current Infrastructure:

KSA Site: DrayTek Vigor 2915 router cascaded behind a Cudy P2 5G router.

Egypt Site: Yeastar S20 PBX on stable Fiber (NO modifications needed here).

Cloud VPS (Germany): Used as a relay to bypass the KSA 5G CGNAT. It runs Docker, Caddy (reverse proxy) with a dynamic DNS setup.

Tunnels: WireGuard is ALREADY SET UP and working perfectly on the cloud server for the site-to-site link. Remote users currently use DrayTek SSL VPN.

The Issues to Fix via AnyDesk / UltraViewer:

Port 443 Conflict: The previous developer mapped port 443 on the VPS (via Caddy) directly to the DrayTek Web GUI. This conflicts with DrayTek SSL VPN. You must resolve this and forward the necessary Yeastar S20 PBX ports directly through the VPS so users can register Linkus natively via the DDNS hostname.

Smart VPN (Always-On Split Tunnel): Reconfigure the DrayTek remote dial-in VPN to IPsec/IKEv2. You MUST configure pure Split-Tunneling to route BOTH the remote Egypt subnets AND the local KSA subnets correctly to achieve the seamless transition mentioned above.

VoIP Instability: Fix the random drops and choppy audio on the Linkus app. Configure and enforce lightweight codecs (e.g., Opus) on the Yeastar S20.

Minor WireGuard Tweaks: Verify/adjust MTU/MSS clamping to prevent packet fragmentation over 5G, and ensure "PersistentKeepalive" is active.

General Check: Ensure the Cudy P2 5G router has DMZ pointing to the DrayTek to avoid Double NAT, and verify SIP ALG is disabled across all routers.

Need someone to build a Go High Level workflow for a follow-up sales sequence, including email, SMS, and manual call steps. Also need whisper setup when someone makes a sales request. Use hosted messaging to send texts directly from a business phone number in Quo, and ensure replies go to our number as well.

trigger new sales request to call connecting me and then to the lead once I'm on the line. With whisper saying lead source, square footage, and desired service.

https://chatgpt.com/s/t_6a9d06d1c9c08191bed4d0b0417e331f

Also need task flow management system in ghl, sales pipeline created, and a few current issues fixed with lead creation triggers. See attached.

Overview

We are a digital marketing agency running a Plesk-based hosting server for client websites. We have confirmed a root-level compromise: a setuid-root backdoor binary was planted on the server, and attacker artefacts are present across the large majority of vhosts on the box. The backdoor was installed while our team was already remediating what we initially believed was a single-site WordPress infection.

We are engaging separately on the full rebuild. This engagement is containment only. We need an experienced hand for the next 24 to 48 hours to stabilise the situation correctly, preserve evidence properly, and stop ongoing harm, so that we do not destroy our forensic position or make the rebuild harder through panicked action.

This is a live incident. We need someone who has done this before, not someone learning on our server.

Scope of work (fixed price, defined deliverables)
Evidence preservation. Coordinate a full disk snapshot with the hosting provider before any other action. Copy system and vhost logs to external storage before rotation or attacker cleanup. Document a chain of custody we can hand to a forensics provider later.
Stop outbound abuse. A bulk mailer is present in large numbers across the server and the IP is at risk of blocklisting. Halt outbound spam in a way that preserves evidence and, where possible, keeps legitimate client mail flowing. Report on what was queued and sent.
Backdoor assessment (identification, not reverse engineering). Locate and document privilege escalation artefacts and persistence mechanisms present on the box. Identify scheduled tasks, services, modified binaries and accounts used for persistence. We need an inventory, not a malware analysis report.
Secure administrative access. Remote shell access to the server is currently failing server-wide for reasons not yet explained and not configured by us. Establish a trustworthy administrative access path, working with the provider's rescue mode or console if required.
Credential exposure inventory. Produce a prioritised list of every credential class exposed by this compromise (control panel, databases, mail, management tooling, API tokens) so we can rotate methodically from clean machines.
Written handover. A concise report covering what you did, what you found, what remains dangerous, and your recommended sequence for the rebuild. This will be read by both technical and non-technical stakeholders.



Required experience
Demonstrable experience containing root-level Linux compromises, not just WordPress malware cleanups
Strong Plesk administration, including working effectively when the panel and shell access are degraded
Comfortable with provider rescue mode and out-of-band console access (OVH experience a plus)
Postfix and mail abuse containment
Sound judgement on evidence preservation. We need someone who understands why deleting the malware first is the wrong move
Clear written English. Part of the deliverable is a report our management will read

What we provide

Root-level access to the server and control panel
Hosting provider account access as required
An existing indicators-of-compromise report for the originally affected site, plus the results of a server-wide signature sweep we have already run
A direct line to a decision maker for the duration, including out of hours

Terms

Fixed price, with the six deliverables above as the acceptance criteria

Start: immediately. We will review proposals as they arrive rather than waiting for a closing date

Duration: 24 to 48 hours

NDA required before any server or client detail is shared

Please quote for the scope as written. If you believe the scope is wrong, tell us why in your proposal, we would rather hear that now than mid-engagement

I need a Discord expert to create and configure a server for my trading business. The work includes setting up channels, roles, permissions, and organizing the server structure to support community interaction and trading discussions. I’m looking for someone who can build a clean, functional server and help ensure it is easy to use for members. Please share relevant experience with Discord server creation and any examples of similar projects.