Mohammed Alefari | DevOps Engineer & Laravel Developer

About Me

Who I Am

Self-taught DevOps Engineer from Yemen with a background in PHP/Laravel development. Transitioned into DevOps driven by passion for infrastructure automation, security hardening, and building reliable CI/CD pipelines.

Believes in learning by building real-world projects and sharing knowledge with the community.

"Automate everything, secure by default"

Languages: Arabic (Native), English

Mar 2025 — Present

DevOps Engineer & Freelancer

Offering professional DevOps services including CI/CD automation, container orchestration, infrastructure as code, and security hardening. Building production-grade systems for clients worldwide.

Jan 2022

Started PHP/Laravel Development

Began self-teaching PHP and Laravel framework, building web applications and learning backend development fundamentals.

Jan 2023

Discovered DevOps & Infrastructure

Transitioned focus to DevOps driven by passion for infrastructure automation, security hardening, and CI/CD pipelines.

Jun 2023

Docker & Container Orchestration

Mastered Docker containerization, Docker Compose, and began exploring Kubernetes (K3s) for container orchestration.

Jan 2024

CI/CD & Automation Mastery

Built production-grade CI/CD pipelines using Jenkins and GitHub Actions. Implemented Ansible for configuration managemen...

Jun 2024

DevOps Engineer

Building production-grade infrastructure, open-source DevOps tools, and sharing knowledge with the community. Focused on...

> $ count --projects

=> 0

> $ count --technologies

=> 0

> $ get --experience

=> 0

Services

What I Offer

bash

root@mmsal512:~$ deploy --pipeline

CI/CD Pipeline Setup

Automate your software delivery process with robust, secure, and scalable CI/CD pipelines.

GitHub Actions, Jenkins, GitLab CI
Automated Testing & Deployment
Zero-downtime releases

> $ contact --service="cicd-pipeline-setup"

bash

root@mmsal512:~$ ansible-playbook setup.yml

Cloud Infrastructure (IaC)

Design and provision cloud infrastructure using code for consistency and rapid scaling.

Linux VPS, DigitalOcean
Ansible
Infrastructure scaling & optimization

> $ contact --service="cloud-infrastructure-iac"

bash

root@mmsal512:~$ kubectl apply -f production.yml

Docker & Kubernetes

Containerize applications and orchestrate them for maximum availability and resource efficiency.

Docker containerization
Kubernetes (K8s) / K3s clusters
Microservices architecture

> $ contact --service="docker-kubernetes"

bash

root@mmsal512:~$ secure --server

Server Hardening & Security

Protect your infrastructure against threats with proactive security hardening and firewalls.

Linux security configuration
CrowdSec & UFW firewall setup
SSL/TLS certificates & audit

> $ contact --service="server-hardening-security"

bash

root@mmsal512:~$ watch --metrics

Monitoring & Observability

Gain deep insights into your systems with real-time monitoring and alerting solutions.

Prometheus & Grafana dashboards
Log management (ELK/Loki)
Automated incident alerting

> $ contact --service="monitoring-observability"

bash

root@mmsal512:~$ php artisan serve

Laravel/PHP Full-Stack

Build high-performance, robust backend APIs and applications with Laravel.

Custom Laravel applications
RESTful API development
Database design & optimization

> $ contact --service="laravelphp-full-stack"

Pricing

Flexible Plans For Your Project

bash

root@mmsal512:~$ plan --subscribe

STARTER

$149 / one-time

// For individuals and small projects that need a solid foundation.

# Ideal for: Developers deploying their first project · Personal websites and portfolios · Small side projects

# VPS Setup & Hardening

SSH key-only authentication
Fail2Ban + UFW firewall configuration
Automatic security updates enabled
Non-root user setup with sudo privileges

# Docker Environment

Docker & Docker Compose installation (latest stable)
Configured for production use
Log rotation configured

# Single Application Deployment

Dockerized deployment for one application
Traefik reverse proxy setup
Free SSL certificate (Let's Encrypt auto-renewal)
Domain DNS configuration guidance

# Basic Monitoring

Server uptime monitoring
Disk space alerts

# Documentation

Setup guide with all credentials
Basic maintenance commands cheat sheet

# إعداد وتأمين السيرفر

مصادقة بمفتاح SSH فقط
إعداد جدار الحماية Fail2Ban + UFW
تفعيل التحديثات الأمنية التلقائية
إنشاء مستخدم غير root بصلاحيات sudo

# بيئة Docker

تثبيت Docker & Docker Compose (أحدث إصدار مستقر)
مُهيأ للاستخدام الإنتاجي
إعداد تدوير السجلات

# نشر تطبيق واحد

نشر تطبيق واحد داخل حاوية Docker
إعداد Traefik كـ Reverse Proxy
شهادة SSL مجانية (تجديد تلقائي عبر Let's Encrypt)
إرشاد لإعداد DNS الخاص بالدومين

# مراقبة أساسية

مراقبة وقت تشغيل السيرفر
تنبيهات مساحة القرص

# التوثيق

دليل الإعداد مع جميع بيانات الدخول
ورقة مرجعية لأوامر الصيانة الأساسية

> $ show --details

Delivery: 2-3 business days
Support: 7 days post-delivery (bug fixes only)

> $ hire --plan="starter"

⭐ POPULAR

bash

root@mmsal512:~$ plan --subscribe

PROFESSIONAL

$399 / one-time

// For businesses and teams that need reliable, automated infrastructure.

# Ideal for: Startups launching their product · Development teams needing CI/CD · Businesses requiring reliable uptime

// includes everything in Starter +

# Advanced Security

CrowdSec intrusion detection system
Kernel security parameters (sysctl hardening)
Port knocking or Tailscale VPN access
Automated vulnerability scanning

# Multi-App Deployment (up to 5)

Each app fully containerized
Network isolation between services
Shared database setup (PostgreSQL / MySQL)
Redis caching layer

# CI/CD Pipeline

GitHub Actions or Jenkins pipeline
Automated testing → build → deploy
Staging + Production environments
Rollback mechanism configured

# Full Monitoring Stack

Prometheus + Grafana dashboards
Container health monitoring
Resource usage alerts (CPU, RAM, Disk)
Uptime monitoring with notifications

# Automated Backups

Daily database backups
Application data backups
Cloud storage (Google Drive / S3)
Backup verification & rotation policy

# Performance Optimization

Cloudflare CDN & edge caching setup
Gzip / Brotli compression
Static asset optimization

# Documentation & Training

Complete infrastructure documentation
Architecture diagram
30-min video walkthrough of setup
Runbook for common operations

// يشمل كل ما في Starter بالإضافة إلى

# أمان متقدم

نظام كشف التسلل CrowdSec
معلمات أمان النواة (تقوية sysctl)
الوصول عبر Port Knocking أو Tailscale VPN
فحص الثغرات التلقائي

# نشر تطبيقات متعددة (حتى 5)

كل تطبيق داخل حاوية مستقلة
عزل الشبكات بين الخدمات
قاعدة بيانات مشتركة (PostgreSQL / MySQL)
طبقة تخزين مؤقت Redis

# أنابيب CI/CD

خط أنابيب GitHub Actions أو Jenkins
اختبار تلقائي ← بناء ← نشر
بيئة اختبار + بيئة إنتاج
آلية التراجع مُهيأة

# حزمة مراقبة كاملة

لوحات مراقبة Prometheus + Grafana
مراقبة صحة الحاويات
تنبيهات استخدام الموارد (CPU, RAM, القرص)
مراقبة وقت التشغيل مع إشعارات

# نسخ احتياطي تلقائي

نسخ احتياطي يومي لقاعدة البيانات
نسخ احتياطي لبيانات التطبيق
تخزين سحابي (Google Drive / S3)
سياسة التحقق والتدوير للنسخ الاحتياطية

# تحسين الأداء

إعداد Cloudflare CDN والتخزين المؤقت
ضغط Gzip / Brotli
تحسين الملفات الثابتة

# التوثيق والتدريب

توثيق كامل للبنية التحتية
رسم بياني للمعمارية
فيديو شرح للإعداد (30 دقيقة)
دليل تشغيلي للعمليات الشائعة

> $ show --details

Delivery: 5-7 business days
Support: 30 days post-delivery

> $ hire --plan="professional"

bash

root@mmsal512:~$ plan --subscribe

ENTERPRISE

$899 / one-time

// For organizations that need production-grade infrastructure with zero compromise.

# Ideal for: Companies with critical production workloads · Teams migrating to containerized infrastructure · Organizations requiring compliance & security audits

// includes everything in Professional +

# High Availability Architecture

K3s / Nomad container orchestration
Auto-healing: crashed services restart automatically
Zero-downtime deployments (rolling updates)
Service discovery via Consul
Load balancing (Fabio / Traefik)

# Unlimited Application Deployment

Microservices architecture support
Inter-service communication configured
Shared secrets management
Per-service scaling policies

# Advanced CI/CD Architecture

Multi-environment pipeline (Dev / Staging / Prod)
Canary or Blue-Green deployment strategy
Automated security scanning in pipeline
Infrastructure as Code (Terraform + Ansible)
GitOps workflow

# Enterprise Monitoring & Observability

Prometheus + Grafana + Loki (metrics + logs)
Custom dashboards per application
Alerting rules (Slack / Email / WhatsApp)
Log aggregation and search
Incident response runbooks

# Disaster Recovery Plan

Automated backup with cloud redundancy
Full server restoration playbook (Ansible)
Recovery Time Objective (RTO): < 1 hour
Tested recovery procedure documentation

# Security Audit & Compliance

Full server security audit report
Container security scanning
Network penetration surface analysis
Monthly security report (with retainer)

# Premium Documentation & Knowledge Transfer

Complete infrastructure-as-code repository
Architecture diagrams (Mermaid / Draw.io)
Video documentation of full setup
On-call support procedures
Team training session (up to 2 hours)

// يشمل كل ما في Professional بالإضافة إلى

# معمارية عالية التوفر

تنسيق الحاويات عبر K3s / Nomad
التعافي الذاتي: الخدمات المتعطلة تُعاد تلقائياً
نشر بدون توقف (تحديثات متدرجة)
اكتشاف الخدمات عبر Consul
موازنة الأحمال (Fabio / Traefik)

# نشر تطبيقات غير محدود

دعم معمارية الخدمات المصغرة
إعداد التواصل بين الخدمات
إدارة الأسرار المشتركة
سياسات توسع لكل خدمة

# معمارية CI/CD متقدمة

خط أنابيب متعدد البيئات
استراتيجية نشر Canary أو Blue-Green
فحص أمني تلقائي في خط الأنابيب
البنية التحتية ككود (Terraform + Ansible)
سير عمل GitOps

# مراقبة ورصد على مستوى المؤسسات

Prometheus + Grafana + Loki (مقاييس + سجلات)
لوحات مراقبة مخصصة لكل تطبيق
قواعد تنبيه (Slack / Email / WhatsApp)
تجميع وبحث السجلات
أدلة الاستجابة للحوادث

# خطة التعافي من الكوارث

نسخ احتياطي تلقائي مع تكرار سحابي
دليل استعادة السيرفر بالكامل (Ansible)
هدف وقت الاستعادة: أقل من ساعة واحدة
توثيق إجراءات استعادة مُختبرة

# التدقيق الأمني والامتثال

تقرير تدقيق أمني شامل للسيرفر
فحص أمان الحاويات
تحليل سطح الاختراق الشبكي
تقرير أمني شهري (مع الاشتراك)

# توثيق متقدم ونقل المعرفة

مستودع كامل للبنية التحتية ككود
رسوم بيانية للمعمارية (Mermaid / Draw.io)
توثيق فيديو للإعداد الكامل
إجراءات الدعم عند الطلب
جلسة تدريب للفريق (حتى ساعتين)

> $ show --details

Delivery: 10-14 business days
Support: 60 days post-delivery

> $ hire --plan="enterprise"

                // تحتاج شيئاً مختلفاً؟

                // كل بنية تحتية فريدة من نوعها.

                // تواصل معي للحصول على عرض سعر مخصص يناسب احتياجاتك.

                //

                // جميع الباقات تشمل:

                → مكالمة استشارية مجانية قبل البدء

                → تسليم آمن لجميع بيانات الدخول والتوثيق

                //

                // الدفع: 50% مقدماً، 50% عند التسليم

                // الطرق: تحويل بنكي، PayPal
            
                // Need something different?

                // Every infrastructure is unique.

                // Contact me for a custom quote tailored to your needs.

                //

                // All packages include:

                → Free consultation call before starting

                → Secure handover of all credentials and documentation

                //

                // Payment: 50% upfront, 50% on delivery

                // Methods: Bank Transfer, PayPal

Testimonials

Client Logs

/var/log/clients.log

[2026-02-15 00:00:00] eng.omar@tech-company: "Mohammed completely designed our CI/CD pipeline from scratch using Jenkins. Our deployment process is now seamless and fully automated, saving us hours of manual work every week. Professionalism and technical depth are unmatched."

> Eng. Omar — Technical Director, Tech Company

[SYS-LOG] SYNC_ARCHIVE_REQUEST REF_ID: #429X

> Indexing legacy testimonial database...
> [LOADED]: Additional success stories detected.
> Awaiting manual integrity verification (Staging Mode).

● Processing sync: 42% complete

Skills

Tech Stack & Tools

Operating Systems & Scripting

Linux

Ubuntu

Debian

Bash Scripting

Containers & Orchestration

Docker

Kubernetes

K3s

HashiCorp Nomad

CI/CD & Automation

Jenkins

GitHub Actions

Ansible

Terraform

Monitoring & Observability

Prometheus

Grafana

Security & Networking

CrowdSec

UFW

Fail2Ban

Tailscale VPN

Cloudflare

Web & Reverse Proxy

Traefik

Nginx

Databases & Caching

PostgreSQL

Redis

MySQL

Service Discovery & Load Balancing

HashiCorp Consul

Fabio

Development Background

PHP

Laravel

Projects

Featured Projects

Infra Full Stack

Featured

Production-grade DevOps portfolio showcasing end-to-end infrastructure automation — Terraform → Ansible → Docker → K3s → CI/CD → Monitoring. Everything automated, secure, and production-ready.

Terraform K3s GitHub Actions Prometheus Grafana Flask Docker Ansible Gunicorn

Multi-stage Docker build
HPA auto-scaling
Rolling updates
Telegram notifications
Full CI/CD pipeline

0 0

GitHub →

Ultimate Secure Setup

Featured

Ansible Playbook for full server hardening and security automation.

Ansible CrowdSec UFW

Full server hardening
Automated security policies
CrowdSec integration

0 0

GitHub →

Hybrid CI/CD Pipeline

Featured

Jenkins inside K3s with Docker builds via SSH — hybrid approach for CI/CD.

Jenkins K3s Docker

Jenkins on K3s
SSH-based Docker builds
Hybrid architecture

0 0

GitHub →

Server Boilerplate

Full production stack deployment in one command using Docker Compose and Traefik.

Docker Compose Traefik

One-command deployment
Traefik reverse proxy
Production-ready stack

0 0

GitHub →

Nomad & Consul Cluster

Automated HashiCorp cluster deployment with service discovery using Nomad, Consul, and Fabio.

Nomad Consul Fabio

Automated cluster setup
Service discovery
Load balancing with Fabio

0 0

GitHub →

Stack Backup Automation

Automated backups to Google Drive via rclone with scheduling and notifications.

Bash Rclone Cron

Google Drive integration
Scheduled backups
Notification support

0 0

GitHub →

Server Cleanup

Comprehensive server reset and cleanup automation script for maintaining clean environments.

Bash Automation

Full server cleanup
Automated reset
Environment maintenance

0 0

GitHub →

Infrastructure

Production Architecture

Cloudflare

DNS + CDN + WAF

CF Tunnel

Secure Connection

Traefik

Reverse Proxy + TLS

Docker

Containers

K3s

Orchestration

Prometheus

Metrics

Grafana

Dashboards

CrowdSec

Security

Tailscale

VPN Mesh

Full production architecture: Cloudflare protection → Secure tunnel → Traefik reverse proxy → Docker/K3s orchestration → Prometheus & Grafana monitoring

Blog

Latest Articles

root@mmsal512:~$

root@mmsal512:~$ cat how-i-automated-my-entire-deployment-pipeline.md

[2026-03-05 00:00:00]

How I Automated My Entire Deployment Pipeline

Six months ago, my deployment process was manual and error-prone. Now, a single push to main triggers a fully automated CI/CD pipeline with health checks and auto-rollbacks.

#github-actions #ci-cd #automation #docker #traefik

8 min read

root@mmsal512:~$

root@mmsal512:~$ cat docker-security-best-practices.md

[2026-03-12 00:00:00]

Docker Security Best Practices for Production

Running Docker in production is more than just "docker run". Learn the essential hardening steps: non-root users, read-only filesystems, resource limits, and CrowdSec.

#docker #security #hardening #crowdsec #production

10 min read

root@mmsal512:~$

root@mmsal512:~$ cat from-laravel-dev-to-devops.md

[2026-03-20 00:00:00]

From Laravel Developer to DevOps Engineer: My Journey

Two years ago, I was completely blind to everything after "git push". Here is the story of my transition: the learning path, the tools, and the mindset shift.

#career #laravel #devops #journey

7 min read

// 3 articles loaded. More coming soon... _

Contact

Get in Touch

contact@mmsal512.cloud ~ terminal

name

0/30

email

0/30

subject

0/30

message

0/50 words | 0/200

Email

mmsal20902012@gmail.com

Location

Yemen

Website

mmsal512.cloud