SSH keys only
Password auth disabled, root login off, port hardened.
Visible health
Every engagement ends with a basic, real-time view of CPU, memory, disk, and uptime — no opening a terminal to check.
Hardening baseline
Default-on in our setup. Documented in your runbook.
Password auth disabled, root login off, port hardened.
Default-deny, explicit allowlists, IPv4 + IPv6.
Security patches auto-installed, reboots scheduled.
Bruteforce protection for SSH, Nginx, common services.
Workflows under a deploy user with explicit sudo.
journald + logrotate sized to the disk you actually have.
Real config, not snippets
SSL, HSTS, gzip, proxy headers, and rate-limit defaults included — handover-grade, not toy.
server {
listen 443 ssl http2;
server_name app.yourco.com;
ssl_certificate /etc/letsencrypt/live/app.yourco.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/app.yourco.com/privkey.pem;
add_header Strict-Transport-Security "max-age=31536000" always;
gzip on;
location / {
proxy_pass http://127.0.0.1:3000;
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Real-IP $remote_addr;
}
}
server { listen 80; server_name app.yourco.com; return 301 https://$host$request_uri; }Tool belt
No surprises in your handover — everything below is documented and named.
غالباً ما يُدمج مع
تواصل معنا
يسعدنا الإجابة على أي أسئلة لديك ومساعدتك في تحديد الخدمة الأنسب لاحتياجاتك.
+91 9219253613نحدد موعد مكالمة في الوقت المناسب لك
نعقد اجتماع استكشافي واستشاري
نُعد عرضاً مفصلاً