ViciDial TLS/SRTP Secure Setup

I need a fresh ViciDial installation hardened for production-grade call center operations (10 seats). Core: end-to-end encryption with TLS SIP signalling + SRTP media. SIP trunk from provider already committed—must register/route encrypted. Production-ready: initial campaign configured with uploaded leads/audio files I provide.

Scope
- Install latest stable Vicibox/ViciDial (Asterisk 18/20) on clean Linux server I provide. Secure initial setup (change root pw, firewall basics, disable unused services).
- Generate/deploy SSL certs (Let’s Encrypt preferred) + enable TLS transport (PJSIP 5061). Secure web UI (HTTPS redirect, Dynamic Portal hardening).
- Compile/enable SRTP (libsrtp), enforce media_encryption=sdes (no RTP fallback), confirm encrypted audio in sngrep both directions.
- Configure trunk + outbound dialplan rules. AMD enabled/tuned for outbound. Upload IVR audio files + leads I provide. Create initial progressive campaign (10 agents, standard hours).
- Optimize for 10 seats: Codecs (allow=alaw; disallow=all else), max dial level 3-4, ulimit tweaks, recording/monitoring/reports verified working. Create 10 agent accounts + manager accounts (listen/whisper/barge).
- Basic production hardening—firewall whitelist (SSH/web/RTP ports), database security (mysql remote deny), fail2ban.

Acceptance
Job complete when:
- Test calls to/from trunk show TLS/SRTP in SIP traces (sngrep screenshots).
- 10 agents login (MicroSip), place calls via campaign, AMD/IVR flows work recording/monitoring/reports functional.
- Campaign ready to start with uploaded leads.
- Hardening verified (no open ports, web secure).
- Hand-off doc

TO APPLY - ANSWER THESE 5 QUESTIONS IMMEDIATELY:
What is your exact time estimate to complete this full scope? (hours)
Vicibox 12 + Asterisk 20 experience? (yes/no + projects)
TLS+SRTP PJSIP projects completed? (# of similar jobs)
Fixed price for this exact scope?
Time estimate REQUIRED in first reply - filters serious experts only. Server access ready NOW.