DigitalOcean advanced server management

We are a startup IT company. We develop software solutions for the Aviation industry. Our first product is almost ready to roll out and we need a robust server infrastructure to publish it. The application is developed in PHP, uses a MySQL database and cURL library. We would need the following tasks to be performed: 1. Initial set-up (bidding price_ - Create virtual machine(s) on DigitalOcean - Initial set-up of the Linux distro (preferably CentOS) - Implement security best practices and OS hardening - Implement security monitoring to notify of possible threats - Install software necessary to run the app (Web server, PHP, DB, SSL, etc.) - Manage TLS certificates granted by LetsEncrypt - Configure the system to score an "A+" on [login to view URL] - Document the steps taken to secure the machine - Make the process of creating new identical machines (for either production or development) easy and quick. For example via script, ansible, docker, etc. - Prepare the infrastructure to be scalable and redundant, ready to easily accommodate large growth. 2. Recurring tasks - Maintain the production and test machines updated with the latest security patches - Conduct regular safety audits to make sure the hardening measures are working as supposed - Monitor performances and advise management when scaling of the machines is required. - Support the management in the decision making for infrastructure upgrades. The main point is the automation of the process. We would like to be able to spin up test machines identical to the production ones in a matter of minutes, with minimal set-up. The second most important point is the possibility to easily scale the structure and make it redundant and distributed. We are open to your inputs regarding possible structures for redundancy. ### ACKNOWLEDGE BEFORE BIDDING ### You are bidding for a long-term project. After the initial set-up phase you will also need to follow the recurring tasks mentioned above. If you do not accept this, please do not bid. The recurring tasks will be paid per day, regardless of the amount of hours spent working on that day, so consider this in your bid. One day you may need to do just some back-ups and some day you may need to spend a bit more time on configuring something. To acknowledge these conditions when bidding, please mention "Recurring tasks: $XX per day". All amounts indicated are in U.S. Dollars. ###############################