The full picture
4 years as a PHP developer and 3 years as DevOps – I read both the stack trace and the CPU graph. Problems “between” dev and ops are my speciality.
TERMASOFT · Mateusz Terlecki · Poznań, Poland
Stable infrastructure and NIS2-ready security. DevOps · NIS2 & Wazuh · servers
I am a DevOps Engineer with 10+ years in IT. I prepare companies for NIS2 and deploy Wazuh (SIEM/XDR), design Proxmox and Kubernetes infrastructure, automate deployments with GitLab CI/CD, and run local AI models where data must not leave the company. No corporate overhead – just solid work.
- B2B / EU VAT invoice
- Remote · CET
- Reply within 24h
What you get all systems go
-
Your site and app stay fast
and do not go down when traffic suddenly spikes.
-
Changes ship without downtime
new features reach production and your customers never notice.
-
Security you can prove
Wazuh watches logs, vulnerabilities and file changes; backups are tested. Ready for NIS2 and audits.
-
I know about problems first
monitoring wakes me up before your customer notices anything.
- 10+
- years in IT
- 3+
- years of DevOps in production
- 4
- years of backend development
- 24h
- typical response time
NIS2 · Polish KSC Act 2026
NIS2 is already in force. The deadlines are closer than they look.
The amended Polish National Cybersecurity System Act entered into force on 3 April 2026. Medium and large companies in over a dozen sectors – and their suppliers – must demonstrate risk management, incident detection and reporting. Fines reach EUR 10M or 2% of turnover, and management is personally accountable. I help you get through it technically: Wazuh SIEM/XDR, procedures, documentation, ongoing care.
Check your company’s readiness
Legal status as of September 2026. I am not a lawyer – on interpretation I work with a law firm.
-
3 April 2026
act entered into force
-
3 October 2026
self-assessment and entity registration
-
3 April 2027
information security management system in place
-
24 h / 72 h
early warning and incident notification to the CSIRT
What I do
How I can help
Five areas, one approach: understand the problem first, then propose the simplest solution that will still work a year from now.
Wazuh NIS2 compliance – security monitoring
Wazuh (SIEM/XDR) deployment, NIS2 readiness assessment and incident-reporting procedures. Open source instead of expensive licences – for companies covered by NIS2 and their suppliers.
- Wazuh
- SIEM / XDR
- File Integrity Monitoring
- Vulnerability Detection
DevOps & infrastructure
Proxmox, Kubernetes, Docker Swarm, Ansible, GitLab CI/CD. I design, automate and maintain environments that just work.
- Proxmox VE
- Kubernetes
- Docker Swarm
- Ansible
AI in your company – local models and assistants
Local language models on your own hardware for data that must not leave the company, and a safe rollout of AI assistants (Claude, Codex, Cursor) for your team.
- Claude / Claude Code
- OpenAI Codex
- Cursor
- OpenRouter
Servers, networking & homelab
Hardware selection, Proxmox, NAS, networking and VPN. On-premise infrastructure for a small business or a serious homelab – designed and configured end to end.
- Proxmox VE
- Proxmox Backup Server
- TrueNAS
- ZFS
Symfony, PHP and Python developer
Internal tools, automation and API integrations in PHP (Symfony) and Python. Things that save hours of work every week.
- PHP 8
- Symfony
- Python
- C#
Why me
A developer who understands servers. An admin who reads code.
Everything as code
Ansible, Terraform, Git, pipelines – plus AI (Claude, Codex, Cursor) that speeds up writing and reviews. I do not click through panels: every environment is reproducible, every step lives in repository history.
Simple and predictable
I prefer Proxmox and Docker Swarm where Kubernetes would be overkill. I pick tools for the scale, not the hype.
Ownership
Backups that are tested. Monitoring and a SIEM that wake someone up. Documentation you can actually read. Not extras – the baseline.
How I work
From a conversation to a running system
- 01
Call
30 minutes about what you have and what you need. No strings attached.
- 02
Audit and plan
A short report: current state, risks, proposal and quote.
- 03
Implementation
Iteratively, in your repo, documented after every milestone.
- 04
Maintenance
Optional ongoing care – updates, monitoring, evolution.
Stack
Tools I work with every day
Not a “heard of it” list. These are the technologies I run in production.
Security
- Wazuh (SIEM / XDR)
- NIS2 / ustawa o KSC
- File Integrity Monitoring
- Vulnerability Detection
- CIS Benchmarks
- Suricata
- WireGuard
- OPNsense
- LDAP / SSO
- Hardening Linux
DevOps & virtualisation
- Proxmox VE
- Kubernetes
- Docker Swarm
- Ansible
- Terraform
- GitLab CI/CD
- Deployer
- Traefik
- HAProxy
- NFS
- LDAP
AI
- Claude / Claude Code
- OpenAI Codex
- Cursor
- OpenRouter
- Qwen / Gemma (self-hosted)
Languages & frameworks
- PHP 8
- Symfony
- Python
- Django (deploy: Gunicorn, Daphne)
- C#
- Bash
- TypeScript
Platforms (background)
- Magento 2
- PrestaShop
- Pimcore
- Subiekt GT
Databases & caching
- MySQL
- MariaDB
- MSSQL
- Redis
- Elasticsearch / ELK
- Varnish
Systems & networking
- Debian
- Fedora
- Arch Linux
- CentOS
- Windows Server
- Nginx
- MikroTik
- ZFS
Monitoring
- Sentry
- Prometheus
- Grafana
- ELK / OpenSearch
- Uptime Kuma
About
Mateusz Terlecki
DevOps Engineer, previously a PHP developer. I run TERMASOFT – the company under which I deliver infrastructure, server and software projects. After hours: a Proxmox homelab, Kubernetes “for sport” and hardware that can usually still be saved.
More about me and full experienceHave a project or an infrastructure problem?
Write a few sentences about what you want to achieve. I usually reply within 24 hours and tell you straight away whether and how I can help.