White-label infrastructure for agencies
You have someone to turn to. I’ll take over a setup nobody has looked at in years.
DNS, servers, migrations, performance, security — under your brand, at a fixed price, with a handover document you can forward to your client.
You’ve won the job. There’s still infrastructure to sort out.
Configure DNS, get email working, set up a server or take over an environment from a previous provider. Sometimes the access credentials are missing, sometimes the documentation. Meanwhile, your team already has other work to do.
Tell me what still needs doing. We’ll agree on what I’ll take on, how much it will cost and when it will be finished.
You can come straight to me with that.
You’ve heard these sentences before.
- “The site went down when we moved it.”
- “Their emails keep landing in spam.”
- “Nobody knows who actually owns the domain.”
- “The old developer vanished and took the passwords.”
- “It’s slow and nobody knows why.”
- “The certificate expired. Again.”
- “We inherited this server and we’re scared to touch it.”
- “WordPress got hacked, and it came back after the cleanup.”
- “We can’t update WordPress, it would break the site.”
Tell me what isn’t working and when it started. You don’t need to know the cause or the technical term. If I need anything else, I’ll ask.
What I do
Fix
Problems with DNS, certificates, email delivery and Linux.
Move
Websites, servers, domains, email and cloud environments. DNS configuration and migration to Cloudflare. With a cutover plan and a way back if something goes wrong.
Optimize
I’ll find out what’s slowing things down. Linux, MariaDB/MySQL, PHP, NGINX, Apache or Postfix.
Secure
Configuring Linux, firewalls, VPNs and access permissions. Protecting websites through Cloudflare and securing access to the origin server.
Maintain
Updates, monitoring, small changes and checks on backups, domains and certificates.
Someone who already knows your setup.
If there’s always something to sort out with servers, websites and email, we can work together regularly. I’ll know your setup, so the next request won’t start with tracking down access credentials and explaining what runs where.
Choose a plan based on the number of domains and servers, the maintenance you need and the response time.
| Feature | Monitor | Maintain | Manage |
|---|---|---|---|
| Domains covered (up to) | 10 | 25 | 50 |
| Servers covered (up to) | 2 | 5 | 10 |
| Monitoring — uptime, certs, domains, backups | ✓ | ✓ | ✓ |
| Expiry watch with an owner list | ✓ | ✓ | ✓ |
| Monthly patching & maintenance window — system, PHP, WordPress and plugins | — | ✓ | ✓ |
| Included small requests (under 30 min) | 2 | 6 | 15 |
| Reply within, counted inside your coverage window | next business day | same business day | 4 hours |
| Reserved slot in my week | — | — | ✓ |
| Named contact, shared channel, quarterly report | — | ✓ | ✓ |
| Discount on fixed-price jobs | — | 10% | 20% |
| Per month | $400 | $850 | $1,700 |
Scroll the table sideways →
What’s covered. The plan covers one agency and its client portfolio. Included requests can be used for any website in that portfolio, within the limits of your chosen plan. We can agree on a larger scope individually.
Coverage window. Reply times are counted in your working hours, not mine. We agree on the coverage window in your contract, and reply times run only within it. Default is Mon–Fri 08:00–19:00 Prague. On Manage we can agree on a window aligned to your morning instead: Mon–Fri 13:00–21:00 Prague, which is 07:00–15:00 New York. No annual lock-in. One month’s notice, either direction.
You know what it will cost before I start.
Before I start, we agree on the scope, price and deadline. If the agreed work takes me longer, you don’t pay extra. If you want to add anything, we agree on the price first.
We can start with one job. You’ll see how I work, then decide whether you’d like to work together further.
| Service | What you get | Delivery | Price |
|---|---|---|---|
| Legacy infrastructure takeover audit | Full inventory, risk register ranked by severity, remediation plan — every figure read off the machine, not assumed | 7–10 days | $1,280 |
| Migration with a no-downtime cutover target | Staged copy, verification checklist, TTL-managed cutover, rollback plan | 5–7 days | $900 |
| Email deliverability rescue | Diagnosis, delisting, auth fixed, before/after inbox test | 5 days | $770 |
| Emergency access recovery | Registrar, host or former developer chased; ownership recovered | up to 10 days | $770 |
| Workload-tuned server build | Everything in the standard build, plus: your workload measured, kernel and stack tuned to it, services stripped to what you actually run, before/after numbers | 7 days | $1,500 |
| Server build & hardening | Firewall, SSH keys, TLS auto-renew, backups, monitoring, runbook | 5 days | $900 |
| Spam filter rescue | Bayes retrained on a verified corpus, separate scanner sets. Spam is assigned a score rather than rejected on receipt. Before/after false-positive count. | 5 days | $770 |
| Production upgrade (OS / PHP / Node / WordPress) | Staging test, maintenance window, rollback plan, verification | 5 days | $640 |
| Performance audit | Bottleneck analysis measured at the origin, prioritised findings with expected gain. Implementation quoted from the findings. If you commission it within 60 days of the audit, the audit fee is deducted. | 5 days | $640 |
| Backup + verified test restore | Automated backups, offsite copy and a documented successful test restore. | 3 days | $515 |
| Email deliverability setup | SPF, DKIM, DMARC, MTA-STS, TLS-RPT, MX verified, aggregate reporting enabled | 3 days | $385 |
| Domain + DNS + Cloudflare setup | Zone built, proxy and rules configured, authenticated origin pulls with your own private CA, CAA set, handover document | 3 days | $320 |
| Expiry protection setup | Domains and certs inventoried, auto-renew, alerting, owner list | 2 days | $260 |
Scroll the table sideways →
Delivery tells you when the work will be finished, counted from when I have access. It is not the number of days spent working on it.
Migrations. On migrations I plan for zero downtime and say so in writing: HTTP traffic moves behind a managed TTL, and where mailboxes or a live database are involved I tell you in advance exactly what the unavoidable window is, before you agree to the date.
Performance audit. The performance audit has a fixed price. I quote for the changes based on the audit findings. If you commission the implementation within 60 days, the audit fee comes off it — the audit is the discovery, and you shouldn’t pay for that twice.
Access recovery. Access recovery includes 6 hours of chasing, third-party fees at cost; if I can’t recover it, half comes back.
Prices are indicative; the binding price, scope and date are confirmed in writing before work starts. Business clients only.
Need someone to talk through a proposal or your next steps?
We can discuss architecture, performance, a planned migration or requirements for your developers. I’ll go through your proposal with you, point out risks and explain what I would do differently.
Depending on what you need, we can arrange a consultation or a written assessment you can share with your team or client.
| Package | What you get | Use within / delivery | Price |
|---|---|---|---|
| Consulting block — 1 hour | A call or a screen-sharing session, decisions made, written summary afterwards | consultation available this week | $190 |
| Consulting block — 5 hours | Use as needed for the services listed, in 30-minute increments | 3 months | $810 |
| Consulting block — 10 hours | As above, plus priority scheduling in my week | 6 months | $1,420 |
| Requirements → written specification | Workshops with you or your client, followed by a technical specification for the development team: user stories, acceptance criteria, data model, integrations, effort estimate | 10 days | from $1,400 |
| Architecture review | Written assessment: current state, risks, scaling and cost limits, prioritized roadmap. Forwardable to your client or their board. | 10 days | $1,900 |
| Cloud or multi-server migration | Plan, staged execution, cutover, rollback, full handover. Scoped per project. | scoped | from $2,400 |
Scroll the table sideways →
Business analysis — turning what the client actually wants into something a developer can build — is covered by the blocks, or delivered as the fixed-price specification above. Implementation is quoted separately: your team builds it, or I do. If you need something outside the services listed, get in touch. We’ll agree on the scope and a fixed price, not an hourly estimate.
When I am available
- Reachable
- You can reach me on weekdays from 08:00 to 19:00 Prague time — that’s 02:00–13:00 in New York.
- Hands-on work & cutovers
- 08:00–12:00 Prague = 02:00–06:00 New York = 07:00–11:00 London
- Production cutovers
- I schedule production cutovers between 08:00 and 12:00 Prague time. For clients in the US, that falls overnight. We always confirm the exact time and time zone together.
- Urgent work
- If something is urgent, get in touch. If I have capacity, I can start the same day. Urgent work carries a 50% surcharge.
Prague is CET in winter, CEST in summer. New York and London shift with me, so these pairings hold year-round except for the two or three weeks each spring and autumn when Europe and the US change clocks on different dates — then New York is one hour later than shown. Every cutover date is confirmed in writing with both local times spelled out, so this is never left to arithmetic.
What I don’t offer:
- I don’t provide 24/7 on-call support.
- Open-ended time-and-materials billing
- Commitments I can’t put in a calendar
You keep the access credentials and documentation.
I work independently. That’s why I want you to have everything you need to keep managing your infrastructure without my help.
- You grant me access and can revoke it at any time.
- When the work is finished, you receive a description of the changes, key dependencies and operating procedures. If someone else takes over, they’ll have something to work from.
- Either party can end the monthly arrangement with one month’s notice.
I want you to stay because working together suits you.
How I use AI in my work
I use AI in my work. I check its output and verify it in the specific environment before deployment. I don’t submit the content of customer data to generative AI services without documented instructions from the customer.
I am responsible for the approach I choose and the changes I make.
What I commit to
- 25+ years — Linux, networking, infrastructure, architecture, performance.
- I do the work personally. You discuss the brief and the results directly with me.
- Your client stays your client. I work under your brand and don’t contact them without your permission. We’ll confirm a mutual agreement not to poach clients in writing.
- You can pass on the documentation under your own name. You receive it ready to share with your client.
- I speak Czech, English and Spanish. If needed, I can join a call with your client or communicate only with your team.
- I have the contract documents ready. On request, I’ll send a master services agreement, an NDA and a completed security questionnaire.
- Voice, if you ever need it. Multi-tenant PBX, call centres, IVR, SIP and WhatsApp Business — FreeSWITCH and Asterisk, built across four countries. Quoted separately; just ask.
Who is behind this
I have worked in IT infrastructure for over 25 years. For almost a quarter of a century I ran my own company doing colocation, web hosting and domains. I have also worked as technical director at companies in finance and telecoms.
I lived and worked in Latin America and the Caribbean for twenty years, so alongside Czech and English I am comfortable working in Spanish.
Much of my work is covered by NDAs, so you will not find client names or detailed case studies here. I am glad to provide references on request.
More about my background in my professional CV at pavlikj.com.
How we get started
Tell me what you need.
By email, WhatsApp or an agreed channel. A brief description of the situation is enough.
We agree on the scope, price and deadline.
If I need more information, I’ll ask first.
I get to work.
I’ll let you know when I start and get in touch if I need your decision.
I hand over the work and documentation.
What I changed and what you need to know to keep things running.
Tell me what you need help with.
- jan@pavlik.do
- Phone
- +420 735 842 934
- +420 735 842 934
- Hours
- Mon–Fri 08:00–19:00 Prague · cutovers 08:00–12:00 Prague
- Based in
- Czech Republic · working with agencies in the EU, UK, US and LatAm
Not an agency? Write anyway.
Legal
Terms of the price list
Prices published on this page are indicative and are not a binding offer. The binding price, scope and delivery date are confirmed in writing for each individual job before work begins. A fixed price covers the scope described in that written confirmation; anything outside it is quoted separately. These terms apply only where that written confirmation refers to them.
Services are provided to businesses only (B2B). Payment terms are 14 days from the invoice date.
Liability for damages is limited to the fee paid for the job concerned, except where Czech law does not permit such limitation — in particular for damage caused intentionally or by gross negligence. A higher cap can be agreed in writing for an individual engagement. The relationship is governed by the law of the Czech Republic and the courts of the Czech Republic have jurisdiction.
Privacy notice
Controller: Jan Pavlík, Company ID 72625635, Školská 660/3, 110 00 Praha 1, Czech Republic. Contact: jan@pavlik.do.
What I process: technical data needed to deliver and secure this website, including IP address, request time, requested URL, browser or user-agent information and diagnostic or security logs. If you contact me by e-mail, telephone, WhatsApp or another offered channel, I process your contact details, message content and any information you voluntarily provide. If I provide you with a hosting or managed service, I also process your identification, billing and contract details, the service configuration, invoices and payment history, support requests, and records of incidents or of abuse and DSA notices.
Data you store in a service I run. If I host a website, mailbox, database or server for you, you may store personal data about your own customers, users or staff in it. For that data you are the controller and I am the processor: I process it only to operate, secure, back up, restore and support the service, on your documented instructions, under the data processing agreement. Administrator access is restricted and logged, traffic is encrypted, systems are hardened and monitored, and the infrastructure is backed up daily with the last seven daily images available. I do not use the content of your data for my own purposes.
Why, and on what basis: technical data are processed to operate, protect, troubleshoot and prevent abuse of the website on the basis of legitimate interests (Article 6(1)(f) GDPR). Enquiry and project data are processed to answer you and take steps before entering into a contract, to perform a contract, to protect legitimate legal and business interests and, where required, to comply with legal obligations (Article 6(1)(b), (c) and (f)).
Who receives it: hosting and infrastructure providers, including Hetzner and other technical providers; Cloudflare for delivery and security; e-mail and telecommunications providers; the contact service you choose, such as WhatsApp; professional advisers; and public authorities where disclosure is legally required. Personal data are not sold.
International transfers: some providers may process data outside the European Economic Area. Where required, transfers rely on an adequacy decision, Standard Contractual Clauses or another safeguard permitted by the GDPR. Cloudflare’s current safeguards are described in its Data Processing Addendum. The privacy terms of an independently selected contact service also apply when you use that service.
How long: server and security logs are retained for no longer than three months unless a security incident requires longer investigation. E-mail is deleted from the inbox once it is no longer needed, and deleted items are permanently removed within three months. Ordinary replies that are not part of client, project, contractual, accounting, tax or legal-claim records are deleted once no longer needed. Client and project correspondence is archived by year and retained for the contractual relationship and applicable limitation periods. Accounting, tax and other legally required records are retained for their statutory periods, up to ten years where applicable, and relevant records may be kept longer while a dispute or legal claim is active.
Your rights: subject to the GDPR conditions, you may request access, rectification, erasure, restriction or portability and may object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time without affecting prior lawful processing. Exercise these rights at jan@pavlik.do.
Your choice: providing contact or project information is voluntary, but without the information needed to identify and answer your request I may be unable to respond or provide services. No automated decision-making or profiling is used.
Cookies and complaints: this website uses no analytics or marketing cookies and does not write to local storage. Infrastructure or security providers may use strictly necessary technical mechanisms. You may lodge a complaint with the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Praha 7, at the Office’s contact page.
Hosting service terms
Hosting is not offered as a standalone product, nor actively marketed to consumers — it is arranged individually. For those cases the general terms, consumer information, abuse policy, DSA contact points, hosting privacy information and data processing agreement are published in full. The Czech text governs.