Arshford Thua
builds infrastructure_
Systems & DevOps engineer running Linux, Kubernetes, backups, mail and hosting at scale. I set things up, keep them running, and make sure they recover when they don't — infrastructure you don't have to babysit.
Who I am
I'm Arshford Thua (ArsH), a systems & DevOps engineer working across multi-country web hosting infrastructure. My day is Linux, containers, backups that actually restore, mail that lands, and dashboards that tell the truth about what's running.
I hold a BSc in Information Technology and a stack of Linux and cloud certifications, and I've spent years keeping large fleets healthy — from Kubernetes clusters to hundreds of hosting servers.
Under Ashif Labs I bring that same discipline to individuals and small teams: clean setups, sensible security, and infrastructure that just works.
What I work with
Linux & systems
Containers & orchestration
Backup & disaster recovery
Mail infrastructure
Hosting & billing
Automation & code
Monitoring & observability
Cloud
Selected work
Centralised backup infrastructure
Deployed Bareos across central servers with PostgreSQL catalogs, grandfather-father-son retention, TLS dial-home clients and hardened deploy scripts — plus a restic/Backrest strategy for cross-provider VM backups with LVM-snapshot consistency.
Kubernetes backup dashboard
Built a Django status dashboard unifying JetBackup, Kasten K10 and Longhorn across multiple clusters, with per-engine collectors and a "needs attention" view. Surfaced a fleet-wide backup outage hiding behind stuck jobs.
Self-hosted mail platform
Deployed and ran OX App Suite on Kubernetes — Dovecot, Postfix, PMG relay, LDAP auth, Solr full-text search, encryption and S3 filestore — and handled a live production database and storage migration.
Mail filtering & anti-spam
Tuned rspamd to kill false-positive storms, score abusive patterns and whitelist trusted senders — with a custom React/FastAPI dashboard for visibility into what's being filtered and why.
WHMCS performance engineering
Multi-month effort diagnosing OOM kills, PHP-FPM exhaustion, CPU throttling and N+1 query explosions across billing platforms — fixed with Redis caching, index work and probe decoupling.
Fleet tooling & hardening
A parallel PHP nameserver scanner with daily change-detection across a 40k-domain fleet, and an Ansible-driven script that normalised file permissions across 1,500 WordPress accounts — hardened against path traversal.
Experience & education
Systems & DevOps Engineer
Keeping large-scale hosting infrastructure healthy across countries.
- Run Kubernetes clusters (RKE2/Rancher) and a fleet of 50+ cPanel/WHM servers
- Own backup & DR, mail infrastructure, and monitoring across the platform
- Automate fleet-wide operations with Ansible and custom tooling
- Lead performance engineering and incident response on production systems
Founder
Bringing production-grade infrastructure practices to individuals and small teams — hosting, backups, self-hosting and monitoring, done properly.
BSc, Information Technology
Certifications
How I can help
Server setup & hardening
VPS provisioning, firewall, SSH, users and updates — a clean, secure base to build on.
Hosting & migration
Move sites without downtime. WordPress, cPanel, DNS and email handled end to end.
Backup & recovery
Automated, encrypted backups with restores that are actually tested — not assumed.
Docker & self-hosting
Run your own tools — Nextcloud, Vaultwarden, monitoring — on infrastructure you control.
Mail server setup
Self-hosted email with sensible anti-spam, so your mail lands and stays yours.
Monitoring & uptime
Dashboards and alerts that tell you what's wrong before your users do.
Let's get it running
Have a server, a site, or an idea that needs solid infrastructure behind it? Tell me what you're working on.