Skip to content
Linux System Admin services

Linux System Admin

Ubuntu Server Hardening and Security Audit

  • From $149
  • 2-day delivery
  • 2 revisions
  • Secure checkout
Ubuntu Server Hardening and Security Audit screenshot 1

I audit your Ubuntu or Debian server and lock it down: SSH keys only, a firewall that Docker cannot bypass, automatic security updates, fail2ban and least-privilege users. You get a written report of what was open, what I changed and what is left.

What's included

  • Security audit report: open ports, users, sudo rights, SSH config, running services
  • SSH hardened: keys only, no root password login, optional custom port
  • UFW or nftables firewall, including the Docker port-bypass fix
  • Unattended security upgrades and reboot policy
  • fail2ban or CrowdSec for SSH and web brute force
  • File permission, secret and .env exposure checks
  • Before/after checklist you can keep using

Who this is for

  • New VPS before it goes live
  • Servers that were set up quickly and never reviewed
  • Teams that need a security checklist for a client or audit

What I need from you

  • SSH access with sudo
  • A list of the apps and ports that must stay reachable

How it works

  1. Message me with what you need. The first consultation is free.
  2. I confirm the scope and a fixed price before any work starts.
  3. I do the work and keep you updated in the chat.
  4. You review it, and I hand over notes, access and anything I changed.

Free guides on this topic

Related services

Questions

Will hardening break my site?

I check which ports and services your apps use first, and I keep a second SSH session open while changing SSH and firewall rules, so you do not get locked out.

Do you support other distributions?

Yes. Debian, AlmaLinux and Rocky Linux get the same checklist with their own tools.

What you'll get

  • Production-ready implementation tailored to your goals
  • Clean, maintainable code following modern best practices
  • Deployment to secure infrastructure with monitoring
  • Handover with documentation and full access

Tech stack & tooling

  • Ubuntu and Debian servers
  • Nginx, SSL and firewalls
  • Security hardening and updates
  • Backups, migrations and cron jobs

How we'll work together

We start with a short requirements discussion, agree on scope and milestones, then move through implementation, review and handover. You get clear visibility into progress and a stable deployment at the end.

Fixed price

$149

Order now

Process

From idea to production

A transparent, predictable process focused on shipping real value, not surprises.

  1. 1

    Discovery call

    Free consultation

    We talk through your goals, users, timeline and budget, and I flag risks early.

  2. 2

    Scope & quote

    Written proposal

    You get a written scope, milestones and a fixed price. No work starts until you agree.

  3. 3

    Build & iterate

    Regular check-ins

    Small increments with regular check-ins, so you can see progress and steer early.

  4. 4

    Launch & support

    Handover + docs

    Production deployment with monitoring, documentation and optional ongoing support.

FAQ

Questions, answered

Everything you need to know before we start.

Still have a question?

Ask directly, I reply within 24 hours.

Email WhatsApp

What kind of projects do you take on?

SaaS products, business web apps, dashboards and APIs, plus DevOps and Linux work: deployments, CI/CD, server setup and maintenance. I take on new builds as well as existing codebases.

How much does a project cost?

It depends on scope. Fixed-scope packages with starting prices are listed on the Services page. For custom work I send a fixed quote after a free discovery call, so you know the price before any work starts.

How long does a typical project take?

Small fixes and deployments usually take days; a full web app or MVP takes weeks. Every proposal includes a timeline with milestones, so you know what ships when.

How do payments work?

We agree on scope and price first, and no advance is needed to start the conversation. Fixed-scope services can be paid securely online by card. Larger projects are split into milestones agreed up front.

Can you work on my existing codebase or servers?

Yes. I regularly fix bugs, improve performance, add features and migrate infrastructure on existing projects. We usually start with a short review so the estimate is based on the real code.

Do you work with clients outside Bangladesh?

Yes. I work remotely with clients worldwide, schedule calls around your time zone and reply to messages within 24 hours.

What happens after launch?

You get a handover with documentation and full access to your code, servers and accounts. Ongoing maintenance and support are available if you want someone to keep things running.

Related services

More projects

View all projects

From the blog

Read all articles