Budget: 10000 UAH Deadline: 5 days
Good day!
I have experience with Nightscout and can complete the project according to the specifications.
Budget: 8000 UAH Deadline: 2 days
I already have a practically ready similar solution for Nightscout and nginx, which can be quickly adapted to your VPS and discussed here; I am available.
Regarding the timeline - 1-2 working days after access.
Regarding the budget - 8000 UAH for deploying Docker, MongoDB, persistent storage, HTTPS, nginx reverse proxy, websocket, gzip, security headers, rate limiting, proxy buffering, large request support, and auth_request.
Here, it’s more about not just spinning up containers, but configuring them so that Nightscout runs properly behind the reverse proxy and doesn’t crash after a VPS restart =)
Look, there’s a nuance - for subscription through an external auth server, we need to understand what response it returns for an active subscription and how to pass the token or cookie.
> Question 1 - does the domain already point to the VPS, and is SSL needed through certbot or is there already a certificate?
> Question 2 - is the external auth server ready and is there a URL for checking the subscription for nginx auth_request?
Similar cases from Ingello:
> https://business.ingello.com/lita - a medical system where reliability and careful handling of patient data are important.
> https://business.ingello.com/rapport - medical digital processes and integrations, close in terms of data criticality and access.
> https://systems-fl.ingello.com - the main profile of Ingello Systems for projects on the marketplace.
After access to the VPS and domain, we will prepare Docker Compose, nginx configuration, env variables, check container restarts, and readiness behind the proxy.
Overall, it’s fine; the task is small, but in such matters, the devil is in the nginx configs - that’s my little professional deformation.
Proposals are currently absent
Current freelance projects in the category DevOps
Need: to help purchase and launch a VPS server in the USA; to set up a proxy/VPN with an American IP address; to install and configure OpenVPN for all employees; to assist with corporate email; to transfer all access and a brief instruction. We are looking for a specialist not only for one-time setup but also for ongoing support. It is important that in case of problems with the server, VPN, proxy, connection, or email, we can quickly contact the specialist and receive prompt assistance. Please specify your experience, setup cost, completion time, terms of ongoing support, and response time for urgent requests.
As part of enhancing the cybersecurity level of our infrastructure, we need to abandon the practice of storing "eternal" and static API keys, passwords, and integration tokens in the configuration files (.env, appsettings.json, config.yaml) of our microservices. Business Goal: Create a single secure storage point for confidential data (secrets) with a mechanism for their automatic updating (rotation) in external systems on a schedule. Our other services will request current tokens "on the fly" via API, which will minimize damage in case of compromise of any system component.Security Model and Encryption (Crypto Core) No secret should be stored in plaintext in the database. Upon application startup, a Master Key is passed to the environment variables. If the key is missing or has an invalid length, the service should fail at the initialization stage with a clear error in the logs. Each secret is encrypted before being written to the database using this Master Key. Upon request, it is decrypted in memory and returned in the response body.Audit Logging (Audit Trail) Any action with secrets (creation, reading by the service, successful or unsuccessful rotation) must be recorded in a separate log file audit.log (or a separate table in the database). Strict Taboo: It is strictly prohibited to record the actual values of secrets in the audit log (neither in plaintext nor in encrypted form).
We have a dedicated server on Hetzner with a website on Docker (+ Laravel framework) Contact with the developers has been lost Need to: - restore and change server access (probably SSH) - recommend a storage location and set up a full server backup with easy recovery, probably not on Hetzner for security - fix the logo that is not displaying for some reason (it's unclear why the file has become inaccessible) Important - there is no website backup, and there is no room for error. We will only consider experienced specialists.