
In Progress
Posted
Paid on delivery
Project Overview I am seeking an experienced full-stack developer or small team to audit, improve, secure, and modernize an existing production website and infrastructure. This is **not a greenfield project**. An existing frontend, backend/API, PostgreSQL database, content, media, forms, administrative functionality, Docker deployment, and VPS environment are already in place. The current website has experienced intermittent outages and loading failures. Based on prior troubleshooting, the likely problem area is a combination of deployment/runtime stability and security rather than a simple frontend bug. Known symptoms/issues include: Website sometimes hangs or times out while Docker containers still appear to be running. Nginx and Docker are functional, but the deployment is not yet clean/reproducible. There have been routing/loading inconsistencies. Fail2Ban/security rules previously caused legitimate traffic to be blocked when configured too aggressively. Suspicious runtime activity was previously observed, so the server/container environment requires a proper security audit. The existing admin/CMS functionality is incomplete for the desired use case. Database/backend/frontend components should all be checked, but no confirmed database failure has been established. The objective is to preserve all existing content and required functionality while creating a secure, stable, maintainable system with comprehensive administrator content management. Current Stack * [login to view URL] / React / TypeScript * Node.js * PostgreSQL * Docker * Nginx * Linux VPS The existing stack may be retained, refactored, or partially rebuilt where technically justified. 1. Audit, Backup & Implementation Plan Before major changes: * Create and verify backups of the application, database, media/data, and required configuration. * Audit frontend, backend/API, database, admin/CMS, routes, forms, integrations, Docker, Nginx, VPS, deployment, and security. * Identify technical/security issues and incomplete functionality. * Recommend what should be preserved, repaired, refactored, or rebuilt. * Provide a safe implementation/migration plan. 2. Data & Content Preservation Preserve all required existing content and data, including pages, images/media, blog/content entries, reviews/testimonials, FAQs, form/business records, SEO metadata, and database records. Database/schema changes must use controlled migrations. No required data may be lost, and migration integrity must be verified. 3. Backend & Admin/CMS Review the existing administrative functionality and improve, refactor, or replace it as appropriate. The final secure CMS/admin dashboard must allow a non-technical administrator to manage normal website content without editing code. Admin must be able to manage: * Pages and page content * Images/media and alt text * Blog/content entries * Reviews/testimonials * FAQs * Navigation/menus * SEO settings * Form submissions Admin must also be able to create new pages, edit pages, publish/unpublish pages, manage URLs/slugs, and upload/replace media. **Normal new pages and content must be creatable through the CMS without source-code modification or application redeployment.** 4. Contact Forms & Email All applicable forms must: * Validate submissions. * Save submissions to the database. * Display submissions in admin. * Send email notifications containing submitted information. * Support configurable notification recipient(s). * Include spam/abuse protection. * Log email delivery failures. * Provide appropriate user success/error confirmation. 5. SEO Preserve existing SEO value and metadata. Implement as applicable: * Existing URL preservation * 301 redirects when URLs change * Editable titles/descriptions * Canonical URLs * [login to view URL] * [login to view URL] * Image alt text * Social/Open Graph metadata * Appropriate structured metadata * Prevention of admin/staging/private indexing The overhaul must avoid unnecessary loss of existing search-engine indexing/rankings. 6. Authentication & Security Review and harden application and server security, including: * Secure admin authentication and protected routes * Appropriate roles/permissions * Secure password and session/token handling * Input validation/sanitization * Protection against common vulnerabilities including SQL injection, XSS, CSRF, authentication abuse, brute-force attacks, and malicious uploads * Secure media uploads * Rate limiting/abuse protection where appropriate * Secure HTTP configuration/headers * Dependency/security review * Proper secrets/environment management * Least-privilege access * No secrets stored in source code * Database/internal services not unnecessarily exposed publicly * Docker, Nginx, and VPS hardening Provide a summary of vulnerabilities identified, remediation performed, and remaining recommendations. 7. Infrastructure & Production Deployment Provide a clean, reproducible, documented deployment including: * Dockerized services * Docker Compose * Nginx reverse proxy * SSL/HTTPS * Appropriate firewall/network configuration * Health checks * Automatic restart policies * Secure environment/secrets configuration * Production logging and log rotation * Reliable recovery after container/service restart and VPS reboot Testing/deployment should minimize production disruption. Use a safe cutover/rollback approach where appropriate. 8. Performance, Monitoring & Compatibility Review and optimize page loading, images/media, frontend assets, and API/database performance. Verify proper operation on desktop, tablet, mobile, and major modern browsers. Implement appropriate monitoring for website uptime, application/container failures, critical errors, CPU, RAM, and disk usage, with reasonable alerts where appropriate. 9. Automated Backups & Disaster Recovery Implement automated backups for required: * PostgreSQL data * Uploaded media/content * Required application/configuration data Define appropriate retention and document recovery procedures. At least one actual backup restoration must be successfully tested before final acceptance. 10. Testing, Documentation & Handover Perform complete production testing, including: * Public pages/routes and existing functionality * Admin authentication/CMS * Creating and publishing a new page through admin * Content/media management * Blog, reviews, FAQs and navigation * SEO management * Forms, database storage and email notifications * Mobile/desktop/browser compatibility * SSL/HTTPS * Container/service restart * VPS reboot/recovery * Backup and successful restoration Provide documentation covering architecture, deployment, Docker Compose, Nginx, environment configuration, database migrations, CMS operation, backups/restoration, monitoring, security, and routine maintenance. Another qualified developer should be able to deploy and maintain the system using the documentation. Ownership At completion, client must receive/control all required: * Source code * Database schema/migrations * Docker/Docker Compose configuration * Required server/Nginx configuration * Documentation * Production credentials/accounts The completed system must not depend on undocumented developer-owned accounts, credentials, services, or proprietary components controlled exclusively by the developer. Access & Confidentiality The website URL, repository, server information, credentials, business information, and other identifying details will **not be disclosed publicly during bidding**. Necessary access will be provided to the selected developer after engagement and any required confidentiality agreement. Timeline The target completion period is approximately **two weeks from project start**, assuming the initial audit confirms the existing system can reasonably be repaired/refactored within that timeframe. If significant previously unknown problems require substantial additional work or rebuilding, they must be documented and discussed before materially changing scope or timeline. Final Acceptance The project is complete only when: * Required existing functionality and data are preserved. * CMS/admin requirements are operational. * New pages can be created and managed through admin. * Forms and email notifications work. * SEO requirements are completed. * Security hardening is completed. * Production deployment is stable. * Monitoring and automated backups are operational. * Backup restoration is successfully tested. * Documentation and ownership materials are delivered. * Final production testing is successfully completed. * Critical defects are resolved. Proposal Requirements Please include: * Relevant full-stack experience and comparable projects * CMS/admin development experience * Security and Docker/Nginx/Linux experience * Proposed approach * Estimated completion time * Fixed-price quote Identify anything you consider outside your quoted scope **before accepting the project**. Payment Terms This is a **fixed-price project**. Final payment will be released after successful completion and verification of the agreed requirements, successful production deployment, delivery of documentation and ownership materials, and satisfaction of the final acceptance criteria. THE PRICE YOU BID IS THE BINDING PRICE FOR THE PROJECT (DO NOT BID RANDOM B.S. AND THEN TRY TO ESTIMATE THE PROJECT) Please read all of the terms and conditions of this project and do not submit bids that are only for audit or other proposals. This project is open only to United States- and Canada-based developers and companies!!!
Project ID: 40636260
355 proposals
Remote project
Active 4 days ago
Set your budget and timeframe
Get paid for your work
Outline your proposal
It's free to sign up and bid on jobs
355 freelancers are bidding on average $493 USD for this job

Hi — Elias here from Miami. I understand you're looking to conduct a full-stack audit and enhance your CMS while ensuring security and smooth deployment. Improving functionality while maintaining system integrity is essential. The real technical challenge often lies in managing permissions and data flow effectively. A common issue in projects like this is ensuring that changes don’t disrupt existing workflows or introduce security gaps. My approach would involve a thorough assessment of your current architecture, focusing on stability and scalability. I recommend using Docker for containerization, which will help in easily deploying and managing your application across different environments. Implementing strong security practices from the start will also safeguard against potential threats. I’ve worked on similar systems that required extensive audits and enhancements, where security and maintainability were top priorities. A few questions to better understand the scope: Q1 – What specific functionalities do you aim to improve or add to the CMS? Q2 – Are there particular security concerns or compliance standards you want to address? Q3 – How do you envision user roles and permissions being structured in the new system? Looking forward to hearing from you.
$500 USD in 3 days
8.3
8.3

Hi, I read the full brief carefully and this is the kind of repair/refactor project where being methodical matters a lot. You need someone who can preserve the live data and functionality first, then harden the stack, improve the admin/CMS flow, and make deployment/recovery reliable without creating SEO or production issues. I have solid experience with React/Node-based systems, CMS/admin improvements, Docker/Nginx/Linux deployments, and security-focused cleanup on existing projects. I can handle this with an audit-first approach, clear implementation plan, controlled migrations, and proper final documentation.
$735 USD in 14 days
7.9
7.9

Your current infrastructure has three critical exposure points: your PostgreSQL instance is likely accessible without IP whitelisting, your Docker containers are running with root privileges creating privilege-escalation risk, and your Nginx configuration is missing security headers that leave you vulnerable to clickjacking attacks. Quick questions - are you currently running database backups with point-in-time recovery enabled? And what's your RTO target if the VPS fails? Here is the architectural approach: - LINUX/NGINX: Implement fail2ban with custom rules for admin route protection, configure CSP/HSTS headers, and set up automated SSL renewal with monitoring. - POSTGRESQL: Migrate to connection pooling with PgBouncer to prevent connection exhaustion, implement row-level security for multi-tenant isolation, and configure automated incremental backups with offsite replication. - DOCKER: Rebuild containers using multi-stage builds with non-root users, implement health checks for zero-downtime deployments, and configure resource limits to prevent memory leaks from crashing the VPS. I've hardened production infrastructure for 8 SaaS platforms processing 2M+ requests daily without downtime. Let's schedule a 20-minute technical walkthrough so I can audit your current setup before proposing the migration path.
$450 USD in 10 days
7.1
7.1

Hello, I have carefully reviewed the full requirements, including the CMS, data preservation, security hardening, Docker/Nginx deployment, backups and restoration, monitoring, SEO, and final acceptance criteria. This is exactly the type of project where I would approach the existing system methodically rather than unnecessarily rebuilding it. I understand that this is a fixed-price project and that the bid needs to represent the actual project scope rather than an artificially low audit-only price. I would therefore review the supplied codebase and access before making any assumptions about hidden rebuild requirements. If the existing system contains a major issue that genuinely changes the agreed scope, I would document it and discuss it before proceeding. The target of approximately two weeks is reasonable provided the initial audit confirms the current application is suitable for repair/refactoring within the stated scope. I’m interested in delivering the complete project—including the production deployment, security hardening, working CMS, tested backups/restoration and documentation—not just an audit or partial implementation. Best regards RAHEEL
$500 USD in 7 days
6.2
6.2

Hi, I hope you're doing well. I have carefully reviewed your project, Full-Stack Website Audit, CMS Development, Security Hardening & Production Deployment , and I'm confident I can deliver a high quality solution tailored to your requirements. I'm a Full Stack Developer with 4+ years of experience building websites, SaaS platforms, AI powered applications, automation tools, web scrapers, lead generation systems, and custom software. I focus on delivering reliable, high quality solutions that meet business objectives while maintaining accuracy, performance, and scalability. I'd be happy to discuss your project in more detail and recommend the best approach before we get started. I look forward to working with you. Best regards, Arslan Shahid Full Stack Developer | Technical Fixes | AI Automation | Lead Generation & Extraction Expert | Websites Dev
$250 USD in 7 days
5.8
5.8

With a proven track record in full-stack development and system modernization, I understand the importance of preserving existing website content and functionalities while enhancing security and stability. My expertise in React, Node.js, Docker, and PostgreSQL aligns well with your project requirements. How do you envision the balance between retaining the current stack and implementing necessary upgrades for optimal performance and security? Regards, Yogesh Kumar
$260 USD in 9 days
6.0
6.0

Dear Client, Thanks for considering my application for your project. I have reviewed your project, and it best matches with my expertise. With over 6 years of experience as a senior full stack web developer, I can confidently say that I can start IMMEDIATELY and complete the job efficiently and within a short timeframe. You can find more information about me at https://developer-amjid.web.app. I'm eager to commence work on your project and look forward to your positive response. Sincerely, Amjid
$500 USD in 7 days
5.7
5.7

Hello dear, Greetings from Md. Toriqul Islam! We are a dedicated Web Design & Development team with over 10+ years of industry experience, I’m Engineer Toriqul Islam, an experienced Computer Science & Engineering graduate from (RUET). We specialize in building modern, scalable, and user-friendly digital solutions tailored to business needs. What I Offer We help businesses grow online by delivering: • Clean, modern, and responsive website designs • High-performance and scalable web applications • User-focused UI/UX for better engagement and conversion My Technical Expertise We work across a wide range of technologies, including: • Frontend: HTML5, CSS3, Bootstrap, JavaScript, jQuery, Angular, React • Backend: Node.js, PHP, Laravel, .NET, CodeIgniter, Ruby on Rails, Python • CMS & Platforms: WordPress • Database: MySQL, MongoDB • Mobile Development: React Native, Flutter, and more Why Choose me? ✔️ Clean, optimized, and well-documented code ✔️ Reusable and scalable components ✔️ On-time delivery with complete requirement fulfillment We are confident in our ability to turn your ideas into a powerful digital product. Let’s discuss your project and make it a success. Looking forward to working with you! Best Regards, Md. Toriqul Islam
$250 USD in 4 days
5.7
5.7

Hello, 1. Is your existing documentation detailed? Yes/No. 2. Are there specific admin/CMS features missing? Excited to enhance your website! For this project, I’ll conduct a thorough audit to pinpoint improvements while ensuring no data or functionality is lost. My focus is on creating a robust system that empowers your admin team. Let’s discuss the details in chat or on a call to review the timeline and project costs together. Looking forward to collaborating on this! Feel free to reach out for a quick chat.
$250 USD in 4 days
5.4
5.4

Hello, the most important part of this overhaul is not rebuilding what already works, it is proving what can safely stay before changing anything. With production data, existing SEO, Docker infrastructure, and live functionality already in place, I would begin with verified backups and a dependency, database, route, deployment, and security audit so every later change has a rollback path. I would then separate the findings into preserve, repair, refactor, and replace. The CMS would be structured around reusable content models so an administrator can create pages, manage URLs, media, SEO, FAQs, reviews, navigation, and submissions without touching the codebase or triggering a deployment. For production, I would handle controlled PostgreSQL migrations, form validation and persistence, notification failure logging, authentication hardening, permissions, Nginx and Docker review, redirects, canonical URLs, sitemap handling, and staging protection. Before handover, I would test both functionality and migration integrity against the original system so content or SEO value is not silently lost. Do you currently have a staging environment where the audit and migration can be tested safely? Is the existing admin custom built, or based on a CMS framework? Have a nice day.
$750 USD in 20 days
5.3
5.3

Dear Client, I read "Full-Stack Website Audit, CMS Development, Security Hardening & Production Deployment" carefully and understand what you're looking to achieve with this Mern Stack Development project. My hands-on experience with Node.js, PostgreSQL, Web Development, Full Stack Development, Backend Development, API Development aligns directly with what you need. I've delivered similar Mern Stack Development work end to end — clean, scalable and on time — and I can share closely related samples and start right away. A few quick questions to get us started: 1. Do you have detailed requirements ready, or should we define the scope together? 2. What's your target timeline for the first working version? 3. Are there existing designs, code or systems I should build on? Thanks & Regards, Deepak
$488 USD in 14 days
4.6
4.6

Hi , I just saw your project regarding Full-Stack Website Audit, CMS Development, Security Hardening & Production Deployment. I've been building scalable web apps and custom integrations for a while, and this fits right into my wheelhouse. I'm a full-stack developer with hands-on experience in AI (custom LLMs, RAG, workflow automation), SaaS architectures (React, Node.js), and Web3 integrations. Instead of just delivering basic scripts, I focus on building secure, production-ready solutions that actually scale. I've launched multiple real-world products and know how to avoid the common technical pitfalls in these areas. Let's have a quick chat so we can go over your exact needs. I can share some of my recent work so you can see the code quality firsthand. Best, Emre
$250 USD in 18 days
4.6
4.6

As a seasoned Senior Full-Stack Engineer with over 7 years of experience, I am your ideal choice for this project. My proficiency in the entire tech stack used by your existing website combines with my solid problem-solving and analytical skills to effectively identify and address the root causes of intermittent outages, loading failures, and runtime inconsistencies. Moreover, my extensive experience in API development coupled with backend expertise ensures that I would be able to thoroughly evaluate, optimize, and secure your website's functionality. Given my expertise, my approach to achieving the required objectives begins with careful audit and backups to create a safe environment for implementing changes. Furthermore, my skill in seamless API integrations and secure payment gateways aligns with your needs for robust contact forms and email communication system. I understand the importance of data preservation while maintaining migration integrity. Rest assured that under my watch all required content and data on your existing website will be preserved while implementing the necessary upgrades. My key goal is a comprehensive administrator content management system that empowers non-technical administrators without requiring continual reliance on developers for simple website updates. Choose me today for data-backed excellence!
$500 USD in 7 days
4.8
4.8

Hi, I can handle the complete project end-to-end, including security hardening, CMS/admin improvements, Docker/Nginx deployment, PostgreSQL, backups, monitoring, performance optimization, and production testing. I understand this is a full implementation—not an audit-only project—and I’ll preserve your existing data and functionality. I can work within the 2-week target and provide a fixed-price quote upfront with no surprise costs. Best Regards, Shakila Naz
$250 USD in 3 days
5.0
5.0

This project requires a comprehensive audit and deployment strategy involving Linux, Nginx, and containerized environments. I have extensive experience managing server environments, including Linux VPS and cPanel, ensuring that the infrastructure supporting your CMS and database layers is stable and secure. My background covers the full technical stack, from PHP and WordPress to server-side optimization and security hardening. I regularly clean and fortify sites against malware and perform migrations, which gives me the necessary insight to audit your existing setup and configure your production environment for peak performance and reliability. I can complete this work for $448.85 within 1 day. Let me know when you are ready to start so I can begin the audit of your server and CMS configuration immediately.
$448.85 USD in 1 day
4.4
4.4

With nearly two decades steeped in software engineering and a PhD in Artificial Intelligence to boot, I bring unique technical precision and out-of-the-box thinking to every project I undertake. Holding the esteemed position of Chief Technology Officer at an AI startup, I've had the privilege of leading full-stack development while spearheading AI-driven solutions and building advanced digital products. The scope of my work included; AI-powered voice and chat agents, machine learning-based analytical platforms, comprehensive SaaS applications plus API integration for agile cloud deployment - skills that directly complement your project requirements. Navigating existing architecture is an area where I truly excel. From your project details, it is evident that you require someone who can work extensively with Docker containers, Nginx, Node.js in a Linux VPS environment, amongst others. My expertise surrounding these technologies coupled with my proven track record in securing, auditing and troubleshooting complex systems - often prone to intermittent outages - make me particularly well-suited to address your website's stability concerns. With me, you'll not only find the much-sought technical advice but a safe implementation/migration plan as well.
$250 USD in 7 days
4.6
4.6

Hello, "Dockerized Secure CMS Deployment" - intermittent outages and security gaps. I will audit, harden and refactor your stack, then deliver a reproducible Docker Compose setup with a user‑friendly admin panel. I recently modernized a site and secured its SEO while keeping all content intact: https://www.freelancer.com/projects/google-ads/Google-Ads-SEO-Revamp-40564589/reviews I will manage secrets outside the code, set up zero‑downtime cut‑over and provide rollback steps to avoid service disruption. Can you share access to the current Git repository and the Nginx configuration so I can start the audit? Looking forward to working with you. Artur Giżycki~
$720 USD in 14 days
4.1
4.1

⭐ ⭐ ⭐ ⭐ ⭐ Hi sir ⭐ ⭐ ⭐ ⭐ ⭐ I can execute your project perfectly. I have a few ideas regarding the project that I would like to discuss via chat. I look forward to working with you. Warm regards Ruslan
$400 USD in 7 days
3.8
3.8

Hi there ! Let's have short meeting for ur project if you wanna Keep, Fix, Simplify - read the whole thing, no copy-paste. Your Django SaaS has outgrown its founder-built roots and needs a senior eye to separate what's solid from what's quietly rotting. I inherited a 50k-line Django monolith once - first 3 moves were mapping data flow, auditing migrations, and grepping for TODOs to feel where the pain actually lived. I left a custom auth system alone because it was battle-tested and secure, even though I'd never have built it that way. I also killed a "microservices" dream that was really just a distributed monolith and collapsed it back into the main Django app - deploy times dropped 70%. First few hours in your repo? I'd dig into settings/ organization, Celery task granularity, and per-app test coverage. Down for a 12-hour paid assessment to start. Timeline : 5 days Budget : £450 Drop a message and let's jump on a call.
$450 USD in 5 days
3.4
3.4

Dear Sir, I am thrilled to bid your project. My approach starts with verified application/database/media backups, followed by a focused architecture, security, infrastructure, CMS, SEO, and data-integrity audit. I will then document what should be preserved, repaired, refactored, or replaced before implementation begins. I can deliver the complete scope: CMS/admin improvements with code-free page creation, content/media management, forms and email notifications, SEO preservation/redirects, authentication and security hardening, controlled database migrations, Docker/Nginx deployment, SSL, monitoring, automated backups, and tested disaster recovery. I will also perform production and cross-device testing, including CMS publishing, forms, service/container restarts, VPS recovery, and an actual backup restoration. All source code, migrations, infrastructure configuration, documentation, and required accounts/credentials will be transferred with no undocumented developer-owned dependencies. Estimated completion: **approximately 2 weeks**, subject to the initial audit confirming the existing application is reasonably repairable within the stated scope. I am comfortable working under NDA and fixed-price milestones with final acceptance based on the requirements specified. Sincerely.
$500 USD in 7 days
3.4
3.4

arlington heights, United States
Payment method verified
Member since Apr 30, 2016
$30 USD
$20 USD
$25 USD
$10-500 USD
$20 USD
₹12500-37500 INR
₹12500-37500 INR
₹600-1500 INR
₹1500-3000 INR
$15-25 USD / hour
$250-750 USD
₹37500-75000 INR
₹1500-12500 INR
₹37500-75000 INR
$15-25 USD / hour
$15-25 USD / hour
$25-50 USD / hour
$10-30 USD
$30-250 USD
₹12500-37500 INR
$250-750 USD
$3000-5000 USD
₹1500-12500 INR
₹1000-1001 INR / hour
$10-15 USD