Ubuntu Security & Git Deployment Automation (secure office code so employee can't take it to home)
Budget: $10 – $30 USD
I’m tightening security around my Ubuntu-based office workstation and, at the same time, want every push to my repos to land on my VPS without manual steps.
Security first: the machine already runs Ubuntu 22.04. I need a solid firewall configuration built around advanced, custom rules with monitoring and alerting. Think iptables/nftables (or UFW if you prefer) plus a lightweight dashboard or log-shipping to something like Fail2Ban, CSF, or another tool you recommend. The goal is to control inbound and outbound traffic per port, IP, and protocol, then keep an eye on it in real time. If you feel encryption at rest or an antivirus layer would complement the setup, flag it as an optional add-on—I’m open to it.
Deployment workflow: I have several web projects (Node and PHP) living in private Git repositories. I’d like a Git-based deployment pipeline so that when I push to the main branch:
• code is tested (simple lint/unit-test stage is enough for now)
• the target VPS pulls or receives the new build
• services restart with zero-downtime (pm2, systemd, or whatever fits)
• releases are versioned and rollbacks are one-command easy
A self-hosted solution using bare Git hooks, GitLab CI, or GitHub Actions + runner is fine—as long as it’s reliable and clearly documented.
Deliverables
• Hardened firewall with custom rules, logging, and live monitoring enabled
• End-to-end Git deployment workflow for multiple projects, including sample project set up to prove it works
• Clear, step-by-step documentation so I can repeat or extend the setup later
I’ll give you SSH access to a staging VPS and a screen-share window to my local box for the initial assessment; anything sensitive will be obscured. Once both sides are convinced it works, we’ll replicate it on production.
I need code for execution in my ubuntu computer and i will only pay for code which is tested without affecting my development
Security first: the machine already runs Ubuntu 22.04. I need a solid firewall configuration built around advanced, custom rules with monitoring and alerting. Think iptables/nftables (or UFW if you prefer) plus a lightweight dashboard or log-shipping to something like Fail2Ban, CSF, or another tool you recommend. The goal is to control inbound and outbound traffic per port, IP, and protocol, then keep an eye on it in real time. If you feel encryption at rest or an antivirus layer would complement the setup, flag it as an optional add-on—I’m open to it.
Deployment workflow: I have several web projects (Node and PHP) living in private Git repositories. I’d like a Git-based deployment pipeline so that when I push to the main branch:
• code is tested (simple lint/unit-test stage is enough for now)
• the target VPS pulls or receives the new build
• services restart with zero-downtime (pm2, systemd, or whatever fits)
• releases are versioned and rollbacks are one-command easy
A self-hosted solution using bare Git hooks, GitLab CI, or GitHub Actions + runner is fine—as long as it’s reliable and clearly documented.
Deliverables
• Hardened firewall with custom rules, logging, and live monitoring enabled
• End-to-end Git deployment workflow for multiple projects, including sample project set up to prove it works
• Clear, step-by-step documentation so I can repeat or extend the setup later
I’ll give you SSH access to a staging VPS and a screen-share window to my local box for the initial assessment; anything sensitive will be obscured. Once both sides are convinced it works, we’ll replicate it on production.
I need code for execution in my ubuntu computer and i will only pay for code which is tested without affecting my development