Dear @superdorx
This is my proposal for your new server - for hosting dedicated to cms wp = wordpress.
I would recommend to go with Debian OS - latest version. This os is more stable then your foundation in your house and is also base for Ubuntu.
You might ask why not go with Ubuntu and my answer would be - stay close to source as much as you can. Ubuntu modifies everything within its distro, being said - even how Apache and php works, while Debian give you native clean run - means you can always relay on Apache or php documentation directly from developers which means you would be able to update system without breaking your neck.
Debian as naked server system eat much less ram and CPU then Ubuntu. I understand your concerns about documentation but I can tell you that you can create your own documentation be it markdown files or some sort of wiki which you can use for your self or deploy widely on git (be it your own private git or windows own github - I would not share anything there, they can use it in its own business as closed source and make money on it -etc…)
I’ve been using Debian as OS for servers since early 2010 and on my devices like desktops and laptops since early 2011. I cannot complain about this OS on whatever side I could look. Besides your concerns about documentation - yeah on Debian when you search on google you have to be a bit more specific or just join proper IRC channels… like #apache or #debian and you can ask questions even there - chats are very calm there, slower then at #ubuntu and right to the point you did asked.
Okay here is what I can do for you
This is for gpl version but can be applied to pro version as well! (Please note - I do not work with domain aliases)
- install & update naked system - Debian latest distro
- install virtualmin & setup correct values for busy server with your specified hardware
- you would be able to choose between swap partition or swap file - swap partition is calculated by default and cannot be changed easy, swap file acts as swap partition and can be changed within few commands which give you much more flexibility.
- set up custom rolling backups of everything - sort of time machine to go back 7 days or more (if you would have enough disk space), this is for domains and virtualmin it self
- server security hardening = I would deploy:
- fail2ban (*optional) with custom regex configs
- ssh disable username and password - ssh keys login only
- no ftp - ssh instead
- correct ssl chip set - leave out old chip sets
- write
.htaccesscustom rules (*optional) - for example force your pma(phpmyadmin) and wp-admin to load via https if rest of the site is not, lock down your site to password or user name or ssl certificate verification (on ssl cert there is no need for user name or password but user provide cert installed on his own browser) - deploy custom error pages (*optional), in base of virtualmin for every single server - new or old - tailored towards your own business
- deploy disk watcher (*optional) - it will notify you when you reach 85% or more HDD space via email or instant messages based on telegram - fully end to end encrypted (please note that you will have to have telegram on your mobile or pc or laptop devices for this function)
- deploy ssh watcher (*optional) - it will notify you when anyone would log into your server via ssh via email or instant messages based on telegram - fully end to end encrypted (please note that you will have to have telegram on your mobile or pc or laptop devices for this function)
- comprehensive documentation & issue reports - with git versioning, on my private git repository. You would be able to report issue and track it down with me or any other person within your team. You would be able to git clone… documentation for you and your team and track it down changes with me and others within your team. You would be able to keep this on your own with your own team or any other devops in future as git is standard thing for source code tracking
- ssh session recordings - you would have records of my ssh sessions, what I’ve done each time working on your server. Those recordings are html based but also allow you to pause or stop play back and directly copy and paste commands what you would see on that recordings.
- remote support - I am always here. please note: if I would not have root access via ssh, which I would normally don’t even want/ask with screen screen recording option I offered, you would have to use teamviewer and be up and online to connect to your machine and then within you presented on phone, we both access your server terminal.
- git server - (*optional) - you will have your own git - something like github with web gui - impact on ram is about 3MB per 500 users.
- comprehensive price. No hidden fees, nor palava of dollar per issues - you will pay as on this proposal and when / after job is finished. - You know me personally. - Get in touch regards the pay as this is public forum - however you would not be disappointed.
This should give you an overall what I would do for you… please ask any other devops here or - some other developers out here on forums for opinion. Perhaps they could come out with much more then my exhausted list here.
Thanks for your time and have good day!