Backed Deployment
Budget: $250 – $750 CAD
Position Overview
We are seeking an experienced System Administrator (freelancer/consultant/agency) to deploy, secure, and optimize the production backend for A Platform. You will follow a comprehensive, documented CTO-level architecture and be responsible for a zero-downtime, robust environment that maximizes speed, privacy, compliance, and scalability.
Key Deliverables
• Deploy and harden two VPS (Auth mini-VPS & Backend Dedicated Server; offshore, adult-friendly hosting)
• Configure advanced firewall, SSH key auth, fail2ban, WireGuard VPN (VPS1 <-> VPS2)
• Install, secure, and optimize:
• Node.js backend app (Express)
• Nginx as reverse proxy/front
• PostgreSQL, Redis (secure config)
• Docker (if needed)
• Set up Cloudflare + BunnyCDN (DNS, proxy, DDoS)
• Integrate Google, Twitter, Facebook OAuth login (OAuth2 Proxy or similar)
• Configure Wasabi storage for videos (secure bucket, API keys)
• Set up Let’s Encrypt SSL (auto-renew)
• Strengthen logging, updates, monitoring (fail2ban, Prometheus/Grafana, logrotate)
• Support system API endpoints, HTTPS/SSL across all layers
• Implement best security practices; minimize attack surface
• Confirm all compliance features: no backend internet exposure, DMCA, age-verification, privacy-first
We are seeking an experienced System Administrator (freelancer/consultant/agency) to deploy, secure, and optimize the production backend for A Platform. You will follow a comprehensive, documented CTO-level architecture and be responsible for a zero-downtime, robust environment that maximizes speed, privacy, compliance, and scalability.
Key Deliverables
• Deploy and harden two VPS (Auth mini-VPS & Backend Dedicated Server; offshore, adult-friendly hosting)
• Configure advanced firewall, SSH key auth, fail2ban, WireGuard VPN (VPS1 <-> VPS2)
• Install, secure, and optimize:
• Node.js backend app (Express)
• Nginx as reverse proxy/front
• PostgreSQL, Redis (secure config)
• Docker (if needed)
• Set up Cloudflare + BunnyCDN (DNS, proxy, DDoS)
• Integrate Google, Twitter, Facebook OAuth login (OAuth2 Proxy or similar)
• Configure Wasabi storage for videos (secure bucket, API keys)
• Set up Let’s Encrypt SSL (auto-renew)
• Strengthen logging, updates, monitoring (fail2ban, Prometheus/Grafana, logrotate)
• Support system API endpoints, HTTPS/SSL across all layers
• Implement best security practices; minimize attack surface
• Confirm all compliance features: no backend internet exposure, DMCA, age-verification, privacy-first
Related categories:
Linux
Nginx
Node.js
PostgreSQL
Redis
OAuth
Security
Cloudflare
Firewall
System Administration