Server & Performance

A slow site costs you sales, a hacked one costs you more

Page speed affects both conversion and search rankings. Security failures affect everything. We handle both as one job, because in practice they're the same job — a well-configured server is both faster and harder to break into.

Server setup and hardening

• Hetzner provisioning — Ubuntu LTS, sized for your actual traffic rather than a hosting sales page
• OpenLiteSpeed or Nginx — with LSCache or FastCGI caching configured properly
• Redis object cache — so the database isn't asked the same question a thousand times
• Fail2ban — automatic blocking after repeated failed logins
• Cloudflare WAF — rate limiting, bot protection, country rules where needed
• Automated backups — offsite, tested, with a restore procedure that actually works
• Telegram monitoring — you get a message when the site goes down, not an email you'll read tomorrow

Speed optimisation

We start by measuring, not guessing. Core Web Vitals, waterfall analysis, database query profiling — then fix what's actually slow rather than applying a generic checklist.

Common wins: image conversion to WebP with correct sizing, deferring scripts that block rendering, cleaning up plugins that load on every page for no reason, database cleanup of orphaned metadata, and cache configuration that survives a WooCommerce cart.

Migrations

Moving hosts is where sites break. We migrate with a staging test first, DNS cutover planned around your quiet hours, and the old host kept alive until we're certain everything works. Downtime is typically minutes, not hours.

We've handled self-hosted Supabase migrations, WordPress multisite moves and full stack relocations to Hetzner — including one migration of 82 active users with no data loss.

How we quote

We can't price a speed or security job before looking at it — the fix for a slow site might be twenty minutes of cache configuration or a week of untangling a plugin stack, and we won't know which until we check.

So the first step is a free initial check. We look at Core Web Vitals, the obvious bottlenecks and the security basics, tell you what we found, and quote fixed for the work. If the fix is simple enough that you can do it yourself, we'll say so. Ongoing monitoring is available as a monthly retainer.