Arshford Thua
builds infrastructure_
Systems & DevOps engineer running Linux, Kubernetes, backups, mail and hosting at scale. I set things up, keep them running, and make sure they recover when they don't — infrastructure you don't have to babysit.
Who I am
I'm Arshford Thua (ArsH), a systems & DevOps engineer working across multi-country web hosting infrastructure. My day is Linux, containers, backups that actually restore, mail that lands, and dashboards that tell the truth about what's running.
I hold a BSc in Information Technology and a stack of Linux and cloud certifications, and I've spent years keeping large fleets healthy — from Kubernetes clusters to hundreds of hosting servers.
Under Ashif Labs I bring that same discipline to individuals and small teams: clean setups, sensible security, and infrastructure that just works.
What I work with
Linux & systems
Containers & Kubernetes
Virtualization
Cloud & bare metal
IaC & CI/CD
Databases
Backup & disaster recovery
Mail infrastructure
Hosting & DNS
Security & VPN
Monitoring & observability
Automation & support
Selected work
Centralised backup infrastructure
Deployed Bareos across central servers with PostgreSQL catalogs, grandfather-father-son retention, TLS dial-home clients and hardened deploy scripts — plus a restic/Backrest strategy for cross-provider VM backups with LVM-snapshot consistency.
Kubernetes backup dashboard
Built a Django status dashboard unifying JetBackup, Kasten K10 and Longhorn across multiple clusters, with per-engine collectors and a "needs attention" view. Surfaced a fleet-wide backup outage hiding behind stuck jobs.
Self-hosted mail platform
Deployed and ran OX App Suite on Kubernetes — Dovecot, Postfix, PMG relay, LDAP auth, Solr full-text search, encryption and S3 filestore — and handled a live production database and storage migration.
Mail filtering & anti-spam
Tuned rspamd to kill false-positive storms, score abusive patterns and whitelist trusted senders — with a custom React/FastAPI dashboard for visibility into what's being filtered and why.
WHMCS performance engineering
Multi-month effort diagnosing OOM kills, PHP-FPM exhaustion, CPU throttling and N+1 query explosions across billing platforms — fixed with Redis caching, index work and probe decoupling.
Fleet tooling & hardening
A parallel PHP nameserver scanner with daily change-detection across a 40k-domain fleet, and an Ansible-driven script that normalised file permissions across 1,500 WordPress accounts — hardened against path traversal.
Kubernetes platform operations
Day-2 operations for full Kubernetes stacks — RKE2 and K3s clusters on Rancher with Longhorn storage and Helm-packaged workloads — including upgrades, node lifecycle and cluster migrations with minimal disruption.
Multi-cloud & bare-metal provisioning
Stood up servers across AWS, OVH, Contabo, Hetzner and DigitalOcean — bare-metal and VPS — provisioned and configured as code with Terraform and Ansible, and shipped through Semaphore CI/CD pipelines.
Experience & education
Systems & DevOps Engineer
Keeping large-scale hosting infrastructure healthy across countries.
- Operate and migrate full Kubernetes stacks (RKE2/K3s, Rancher, Longhorn, Helm) alongside a fleet of cPanel/WHM servers
- Provision bare-metal and VPS across AWS, OVH, Contabo, Hetzner and DigitalOcean, configured as code with Terraform and Ansible
- Build CI/CD pipelines with Semaphore and automate fleet-wide operations
- Manage databases and migrations, backup & DR, mail infrastructure and monitoring across the platform
- Provide L2/L3 technical support across diverse production systems, with performance engineering and incident response
Founder
Bringing production-grade infrastructure practices to individuals and small teams — hosting, backups, self-hosting and monitoring, done properly.
BSc, Information Technology
Certifications
How I can help
Server setup & hardening
VPS provisioning, firewall, SSH, WireGuard VPN and updates — a clean, secure base to build on.
Hosting & migration
Move sites without downtime. WordPress, cPanel, DNS and email handled end to end.
Backup & recovery
Automated, encrypted backups with restores that are actually tested — not assumed.
Docker & self-hosting
Run your own tools — Nextcloud, Vaultwarden, monitoring — on infrastructure you control.
Mail server setup
Self-hosted email with sensible anti-spam, so your mail lands and stays yours.
Monitoring & uptime
Dashboards and alerts that tell you what's wrong before your users do.
Let's get it running
Have a server, a site, or an idea that needs solid infrastructure behind it? Tell me what you're working on.