Linux administration

Linux server administration – Ubuntu, Debian, AlmaLinux, CentOS

Linux is the foundation of most web infrastructure in the world and the primary operating system on which we run servers for our clients. We have been administering servers based on Ubuntu Server, Debian, AlmaLinux, and CentOS for years, in production environments running WordPress sites, WooCommerce stores, and custom web applications.

We configure servers from scratch, secure the operating system, deploy firewalls, design backup strategies, and monitor infrastructure 24/7. Every Linux server we hand over is prepared for specific application requirements – we do not use templates or default configurations.

System

Linux system installation and configuration

We install and configure Linux servers from scratch – we match the distribution to project requirements, configure partitioning, the file system, network, package repository, and basic system services. Ubuntu Server and Debian for web environments, AlmaLinux as a stable successor to CentOS in production environments requiring long-term support, CloudLinux with CageFS, LVE, and MySQL Governor in shared hosting environments. In containerized environments, we deploy Docker and systemd-nspawn – we describe the comparison of approaches in our publication Web application containerization.

Security

Operating system security

We secure a Linux server on multiple layers: updating the system and kernel, disabling unnecessary services and daemons, configuring an iptables or nftables firewall, restricting SSH access solely to public keys, deploying fail2ban, configuring AppArmor or SELinux, setting password policies, and auditing file permissions. Each layer reduces the attack surface.

Firewall

iptables / nftables firewall and fail2ban

We configure network firewalls at the Linux kernel level – iptables for older distributions, nftables for newer ones. We define traffic filtering rules, close unused ports, and segment access to services. We deploy fail2ban to automatically block brute-force attempts on SSH, FTP, admin panels, and other listening services.

Backup

Backups and disaster recovery

We design and deploy backup strategies on Linux servers using rsync, borgbackup, restic, or infrastructure provider snapshots. Local and remote (offsite) copies with AES-256 encryption and retention rotation. We regularly test data recovery procedures – a backup you haven't tested is not a backup. On servers with ZFS, we use atomic snapshots and optimizations described in our publication ZFS optimization for databases.

Monitoring

24/7 monitoring and updates

We monitor Linux servers 24/7: uptime, CPU load, RAM, disk and partition usage, network traffic, and system and application service status. Alerts are sent immediately – we react to problems before they affect site performance. We conduct regular system and software security updates.

A Linux server is not something you set up and forget about. It is a living infrastructure that requires regular updates, monitoring, log reviews, and reactions to emerging threats. Every server we manage is prepared for specific application requirements, with stability, speed, and security in mind.

Process

How we work

Linux server administration at WebOptimo is a repeatable, structured process – not a one-time configuration.

Audit A review of system configuration, network services, firewall, SSH, permissions, crontabs, logs, and backup status. The result is a report with a prioritized list of issues and recommendations.
Plan Prioritizing changes based on their impact on security and performance. Critical fixes (open ports, outdated kernel) immediately; larger changes (stack migration, deploying replication) with a schedule.
Implementation System configuration, securing services, tuning the web server and database, deploying backups and monitoring. Changes are made gradually, with testing at every stage.
Monitoring Continuous 24/7 monitoring: uptime, CPU, RAM, disks, network traffic, service status, security logs. Alerts and response before a problem affects application performance.
Maintenance Regular system and software updates, log reviews, SSL certificate rotation, backup tests, and periodic reports with recommendations for the next period.
Scenarios

When do you need Linux server administration?

A Linux server requires constant attention – here are common situations where professional support pays off.

Performance

The site runs slowly despite a powerful server

Powerful hardware won't help when Nginx operates with default workers, PHP-FPM has too few processes, and the database doesn't fit in memory buffers. A server audit identifies the real bottlenecks – from web server configuration, through OPcache and object cache, to kernel parameters.

Security

The server hasn't been updated in months

An outdated kernel, unpatched packages, open ports, and default SSH configuration are real risks. We secure the server on multiple layers: updating the system, configuring the firewall, restricting SSH access to keys, deploying fail2ban and AppArmor or SELinux.

Migration

You are moving to a new server or provider

Migration is not just copying files. You need to configure the environment from scratch, move databases, recreate cron jobs and SSL certificates, test performance, and switch DNS with minimal downtime. We handle migrations between providers – OVH, Hetzner, DigitalOcean, AWS, and others.

Scale

Traffic is growing – the server can't keep up

Growing traffic requires not only more resources but a well-thought-out architecture: load balancing, reverse proxy, database replication, caching on multiple layers. We design infrastructure that scales with your business – from a single VPS to a cluster with a load balancer. We compare web servers on the Apache vs LiteSpeed vs Nginx page.

Support

No administrator on the team

A developer who "also handles the server" is not a system administrator. There's no time for updates, no one reads the logs, and the backup is a cron entry that's never been tested. We take over Linux server administration as an external team – with 24/7 monitoring, regular updates, and reporting.

DNS

Problems with DNS, domains, and certificates

Misconfigured DNS records, missing DNSSEC, expiring SSL certificates, and site unavailability after changing providers – these are problems stemming from a lack of systematic infrastructure management. We configure DNS, manage domains and certificates – details in our publication DNS architecture and domain management.

Frequently asked questions

Questions and answers

We administer servers based on Ubuntu Server, Debian, AlmaLinux, CentOS, and CloudLinux. We tailor the choice of distribution to project requirements – Ubuntu and Debian for web and WordPress environments, AlmaLinux as a stable successor to CentOS in production environments, CloudLinux with CageFS and LVE in shared hosting environments.

Yes. We administer VPS and dedicated servers with any provider – OVH, Hetzner, DigitalOcean, Linode, AWS EC2, GCP Compute Engine, and many others. We do not impose infrastructure – we work with what you have or help you choose the optimal provider.

Securing a server involves updating the system and kernel, disabling unnecessary services and daemons, configuring an iptables or nftables firewall, restricting SSH access to keys, deploying fail2ban, configuring AppArmor or SELinux, setting password policies, and auditing file and directory permissions.

Yes. We monitor server uptime, CPU load, RAM memory, disk and partition usage, network traffic, and the status of system and application services. Alerts are sent immediately – we react to problems before they affect site performance.

We design a backup strategy using tools such as rsync, borgbackup, restic, or provider snapshots. We create local and remote (offsite) copies, with encryption and rotation. We regularly test data restoration procedures to ensure the backup works in practice.

Yes. We configure Nginx with FastCGI cache, PHP-FPM with dedicated pools, Redis or Memcached as an object cache, and OPcache. We optimize worker_processes, keepalive, buffer, and limit settings – tuning each parameter for the specific load of the WordPress site or WooCommerce store.

Yes. We perform a full migration of WordPress and WooCommerce sites to a new Linux server – we configure the environment from scratch, transfer files and databases, and test performance before switching DNS. The migration takes place without downtime or data loss.

Contact

Let's talk about managing your Linux server

We will present a Linux server administration offer tailored to your needs. No obligations, no marketing jargon – a concrete proposal after a short conversation or infrastructure analysis.

Phone

+48 608 271 665

Mon–Fri, 8:00–16:00 CET

Email

contact@weboptimo.pl

We respond within 24h

Company

WebOptimo

VAT ID: PL6391758393

Marcin Szewczyk-Wilgan - m4c.pl  Powered by FreeBSD  Edited in Vim