Server security and monitoring
Firewall, hardening, Wazuh SIEM and alerts, so you know what's happening on your servers before it becomes a problem.
Hi, I'mAndréCardoso.
Linux sysadmin moving into DevOps. I take apps to production with Docker, CI/CD, monitoring and security, on servers I run myself.
How I can help
Automation and private AI
Process automation (including RPA on SAP) and AI assistants running on your own infrastructure, with your data staying in Europe.
Deployment, CI/CD and maintenance
Docker, nginx, Jenkins pipelines, domains, certificates and backups. I get your app online and keep it running.
Turnkey landing pages
Your business page with domain, hosting, professional email, DNS and support. One person handles it all.
Projects
Security monitoring on a VPS
An internet-facing server with full visibility into who's trying to get in.
- Wazuh
- Firewall
- Dozzle
- Docker
Caderneta: OCR-powered bet tracker
A multi-user web app that reads screenshots and turns them into data and stats.
- React
- OCR
- Docker
- nginx
- Jenkins
Vivace Beauty: landing page for a salon in Peniche
Website for a hair and beauty salon, with its own domain, hosting and WhatsApp booking.
- React
- C#
- Docker
- nginx
- .pt domain
Horas: self-hosted time clock
A work-hours tracking app, hosted on my own server.
- Docker
- nginx
- Self-hosting
SAP purchasing automation with OpenRPA
A robot that creates purchase requisitions and orders in SAP with no manual input.
- OpenRPA
- SAP
- API
- Automation
This site, from server to screen
A portfolio with a frontend, an API and a private area, hosted and secured by me.
- React
- Node.js
- nginx
- Cloudflare
Latest articles
- Wazuh in Docker on a VPS: step-by-step security monitoringHow to install Wazuh (an open-source SIEM) in Docker on a VPS, connect the agent to the host itself, and keep the dashboard off the internet. · 7 min read
- nginx, Cloudflare and Let's Encrypt: HTTPS for many containers on one serverHow to serve several Docker apps on their own subdomains, with wildcard Let's Encrypt certificates via Cloudflare DNS and nginx as a reverse proxy. · 6 min read
About me
I've worked as a Linux sysadmin for about 5 years and I'm moving into DevOps. I like taking an idea all the way to production, with domain, HTTPS, monitoring and security handled from day one. I learn best by doing, so my VPS doubles as my lab: it runs several of my own apps in Docker, behind nginx, protected by a firewall and Wazuh.
What I do
- Servers
- 5 years of Linux in production. Docker, Docker Compose, nginx and certificates; I deploy and maintain my own applications.
- CI/CD and automation
- Jenkins pipelines in Docker, Git and GitHub, Bash and Python scripting, and RPA for business processes.
- Security and observability
- Firewalls, hardening, Wazuh SIEM, log centralisation and analysis.
- Development
- React interfaces and Node and Python APIs, with authentication and databases.
- Linux
- Docker
- Docker Compose
- nginx
- Jenkins
- CI/CD
- Git
- GitHub
- Wazuh
- Cloudflare
- Let's Encrypt
- Bash
- React
- Vite
- Node.js
- Express
- Python
- PostgreSQL
- OpenRPA
- SAP
What I enjoy
- Automating anything I repeat more than twice
- Self-hosting and tinkering with my VPS
- Monitoring: dashboards, alerts and logs
- Football on weekends
- Learning one new technology per project
Let's talk
Looking for a DevOps engineer or sysadmin, running a server with no monitoring, or want to use AI without sending your data abroad? Reach me on WhatsApp or by email.