PAVLÍK.DO Infrastructure for agencies
Menu

White-label infrastructure for agencies

You have someone to turn to. I’ll take over a setup nobody has looked at in years.

DNS, servers, migrations, performance, security — under your brand, at a fixed price, with a handover document you can forward to your client.

The situation

You’ve won the job. There’s still infrastructure to sort out.

Configure DNS, get email working, set up a server or take over an environment from a previous provider. Sometimes the access credentials are missing, sometimes the documentation. Meanwhile, your team already has other work to do.

Tell me what still needs doing. We’ll agree on what I’ll take on, how much it will cost and when it will be finished.

You can come straight to me with that.

In plain words

You’ve heard these sentences before.

  • “The site went down when we moved it.”
  • “Their emails keep landing in spam.”
  • “Nobody knows who actually owns the domain.”
  • “The old developer vanished and took the passwords.”
  • “It’s slow and nobody knows why.”
  • “The certificate expired. Again.”
  • “We inherited this server and we’re scared to touch it.”
  • “WordPress got hacked, and it came back after the cleanup.”
  • “We can’t update WordPress, it would break the site.”

Tell me what isn’t working and when it started. You don’t need to know the cause or the technical term. If I need anything else, I’ll ask.

Services

What I do

  • Fix

    Problems with DNS, certificates, email delivery and Linux.

  • Move

    Websites, servers, domains, email and cloud environments. DNS configuration and migration to Cloudflare. With a cutover plan and a way back if something goes wrong.

  • Optimize

    I’ll find out what’s slowing things down. Linux, MariaDB/MySQL, PHP, NGINX, Apache or Postfix.

  • Secure

    Configuring Linux, firewalls, VPNs and access permissions. Protecting websites through Cloudflare and securing access to the origin server.

  • Maintain

    Updates, monitoring, small changes and checks on backups, domains and certificates.

Monthly plans — start here

Someone who already knows your setup.

If there’s always something to sort out with servers, websites and email, we can work together regularly. I’ll know your setup, so the next request won’t start with tracking down access credentials and explaining what runs where.

Choose a plan based on the number of domains and servers, the maintenance you need and the response time.

Monthly plans and what each one includes
Feature Monitor Maintain Manage
Domains covered (up to) 102550
Servers covered (up to) 2510
Monitoring — uptime, certs, domains, backups ✓✓✓
Expiry watch with an owner list ✓✓✓
Monthly patching & maintenance window — system, PHP, WordPress and plugins —✓✓
Included small requests (under 30 min) 2615
Reply within, counted inside your coverage window next business daysame business day4 hours
Reserved slot in my week ——✓
Named contact, shared channel, quarterly report —✓✓
Discount on fixed-price jobs —10%20%
Per month $400 $850 $1,700

Scroll the table sideways →

What’s covered. The plan covers one agency and its client portfolio. Included requests can be used for any website in that portfolio, within the limits of your chosen plan. We can agree on a larger scope individually.

Coverage window. Reply times are counted in your working hours, not mine. We agree on the coverage window in your contract, and reply times run only within it. Default is Mon–Fri 08:00–19:00 Prague. On Manage we can agree on a window aligned to your morning instead: Mon–Fri 13:00–21:00 Prague, which is 07:00–15:00 New York. No annual lock-in. One month’s notice, either direction.

Fixed-price jobs

You know what it will cost before I start.

Before I start, we agree on the scope, price and deadline. If the agreed work takes me longer, you don’t pay extra. If you want to add anything, we agree on the price first.

We can start with one job. You’ll see how I work, then decide whether you’d like to work together further.

Fixed-price jobs with deliverables, delivery time and price
Service What you get Delivery Price
Legacy infrastructure takeover audit Full inventory, risk register ranked by severity, remediation plan — every figure read off the machine, not assumed 7–10 days $1,280
Migration with a no-downtime cutover target Staged copy, verification checklist, TTL-managed cutover, rollback plan 5–7 days $900
Email deliverability rescue Diagnosis, delisting, auth fixed, before/after inbox test 5 days $770
Emergency access recovery Registrar, host or former developer chased; ownership recovered up to 10 days $770
Workload-tuned server build Everything in the standard build, plus: your workload measured, kernel and stack tuned to it, services stripped to what you actually run, before/after numbers 7 days $1,500
Server build & hardening Firewall, SSH keys, TLS auto-renew, backups, monitoring, runbook 5 days $900
Spam filter rescue Bayes retrained on a verified corpus, separate scanner sets. Spam is assigned a score rather than rejected on receipt. Before/after false-positive count. 5 days $770
Production upgrade (OS / PHP / Node / WordPress) Staging test, maintenance window, rollback plan, verification 5 days $640
Performance audit Bottleneck analysis measured at the origin, prioritised findings with expected gain. Implementation quoted from the findings. If you commission it within 60 days of the audit, the audit fee is deducted. 5 days $640
Backup + verified test restore Automated backups, offsite copy and a documented successful test restore. 3 days $515
Email deliverability setup SPF, DKIM, DMARC, MTA-STS, TLS-RPT, MX verified, aggregate reporting enabled 3 days $385
Domain + DNS + Cloudflare setup Zone built, proxy and rules configured, authenticated origin pulls with your own private CA, CAA set, handover document 3 days $320
Expiry protection setup Domains and certs inventoried, auto-renew, alerting, owner list 2 days $260

Scroll the table sideways →

Delivery tells you when the work will be finished, counted from when I have access. It is not the number of days spent working on it.

Migrations. On migrations I plan for zero downtime and say so in writing: HTTP traffic moves behind a managed TTL, and where mailboxes or a live database are involved I tell you in advance exactly what the unavoidable window is, before you agree to the date.

Performance audit. The performance audit has a fixed price. I quote for the changes based on the audit findings. If you commission the implementation within 60 days, the audit fee comes off it — the audit is the discovery, and you shouldn’t pay for that twice.

Access recovery. Access recovery includes 6 hours of chasing, third-party fees at cost; if I can’t recover it, half comes back.

Prices are indicative; the binding price, scope and date are confirmed in writing before work starts. Business clients only.

Consulting, analysis & architecture

Need someone to talk through a proposal or your next steps?

We can discuss architecture, performance, a planned migration or requirements for your developers. I’ll go through your proposal with you, point out risks and explain what I would do differently.

Depending on what you need, we can arrange a consultation or a written assessment you can share with your team or client.

Consulting and architecture packages
Package What you get Use within / delivery Price
Consulting block — 1 hour A call or a screen-sharing session, decisions made, written summary afterwards consultation available this week $190
Consulting block — 5 hours Use as needed for the services listed, in 30-minute increments 3 months $810
Consulting block — 10 hours As above, plus priority scheduling in my week 6 months $1,420
Requirements → written specification Workshops with you or your client, followed by a technical specification for the development team: user stories, acceptance criteria, data model, integrations, effort estimate 10 days from $1,400
Architecture review Written assessment: current state, risks, scaling and cost limits, prioritized roadmap. Forwardable to your client or their board. 10 days $1,900
Cloud or multi-server migration Plan, staged execution, cutover, rollback, full handover. Scoped per project. scoped from $2,400

Scroll the table sideways →

Business analysis — turning what the client actually wants into something a developer can build — is covered by the blocks, or delivered as the fixed-price specification above. Implementation is quoted separately: your team builds it, or I do. If you need something outside the services listed, get in touch. We’ll agree on the scope and a fixed price, not an hourly estimate.

Availability

When I am available

Reachable
You can reach me on weekdays from 08:00 to 19:00 Prague time — that’s 02:00–13:00 in New York.
Hands-on work & cutovers
08:00–12:00 Prague = 02:00–06:00 New York = 07:00–11:00 London
Production cutovers
I schedule production cutovers between 08:00 and 12:00 Prague time. For clients in the US, that falls overnight. We always confirm the exact time and time zone together.
Urgent work
If something is urgent, get in touch. If I have capacity, I can start the same day. Urgent work carries a 50% surcharge.

Prague is CET in winter, CEST in summer. New York and London shift with me, so these pairings hold year-round except for the two or three weeks each spring and autumn when Europe and the US change clocks on different dates — then New York is one hour later than shown. Every cutover date is confirmed in writing with both local times spelled out, so this is never left to arithmetic.

What I don’t offer:

  • I don’t provide 24/7 on-call support.
  • Open-ended time-and-materials billing
  • Commitments I can’t put in a calendar
Handover and ongoing management

You keep the access credentials and documentation.

I work independently. That’s why I want you to have everything you need to keep managing your infrastructure without my help.

  • You grant me access and can revoke it at any time.
  • When the work is finished, you receive a description of the changes, key dependencies and operating procedures. If someone else takes over, they’ll have something to work from.
  • Either party can end the monthly arrangement with one month’s notice.

I want you to stay because working together suits you.

Using AI

How I use AI in my work

I use AI in my work. I check its output and verify it in the specific environment before deployment. I don’t submit the content of customer data to generative AI services without documented instructions from the customer.

I am responsible for the approach I choose and the changes I make.

Why me

What I commit to

  • 25+ years — Linux, networking, infrastructure, architecture, performance.
  • I do the work personally. You discuss the brief and the results directly with me.
  • Your client stays your client. I work under your brand and don’t contact them without your permission. We’ll confirm a mutual agreement not to poach clients in writing.
  • You can pass on the documentation under your own name. You receive it ready to share with your client.
  • I speak Czech, English and Spanish. If needed, I can join a call with your client or communicate only with your team.
  • I have the contract documents ready. On request, I’ll send a master services agreement, an NDA and a completed security questionnaire.
  • Voice, if you ever need it. Multi-tenant PBX, call centres, IVR, SIP and WhatsApp Business — FreeSWITCH and Asterisk, built across four countries. Quoted separately; just ask.
About me

Who is behind this

I have worked in IT infrastructure for over 25 years. For almost a quarter of a century I ran my own company doing colocation, web hosting and domains. I have also worked as technical director at companies in finance and telecoms.

I lived and worked in Latin America and the Caribbean for twenty years, so alongside Czech and English I am comfortable working in Spanish.

Much of my work is covered by NDAs, so you will not find client names or detailed case studies here. I am glad to provide references on request.

More about my background in my professional CV at pavlikj.com.

Jan Pavlík
How it works

How we get started

  1. Tell me what you need.

    By email, WhatsApp or an agreed channel. A brief description of the situation is enough.

  2. We agree on the scope, price and deadline.

    If I need more information, I’ll ask first.

  3. I get to work.

    I’ll let you know when I start and get in touch if I need your decision.

  4. I hand over the work and documentation.

    What I changed and what you need to know to keep things running.

Contact

Tell me what you need help with.

Email
jan@pavlik.do
Phone
+420 735 842 934
WhatsApp
+420 735 842 934
Hours
Mon–Fri 08:00–19:00 Prague · cutovers 08:00–12:00 Prague
Based in
Czech Republic · working with agencies in the EU, UK, US and LatAm

Not an agency? Write anyway.

Legal

Terms of the price list

Prices published on this page are indicative and are not a binding offer. The binding price, scope and delivery date are confirmed in writing for each individual job before work begins. A fixed price covers the scope described in that written confirmation; anything outside it is quoted separately. These terms apply only where that written confirmation refers to them.

Services are provided to businesses only (B2B). Payment terms are 14 days from the invoice date.

Liability for damages is limited to the fee paid for the job concerned, except where Czech law does not permit such limitation — in particular for damage caused intentionally or by gross negligence. A higher cap can be agreed in writing for an individual engagement. The relationship is governed by the law of the Czech Republic and the courts of the Czech Republic have jurisdiction.

Privacy notice

Controller: Jan Pavlík, Company ID 72625635, Školská 660/3, 110 00 Praha 1, Czech Republic. Contact: jan@pavlik.do.

What I process: technical data needed to deliver and secure this website, including IP address, request time, requested URL, browser or user-agent information and diagnostic or security logs. If you contact me by e-mail, telephone, WhatsApp or another offered channel, I process your contact details, message content and any information you voluntarily provide. If I provide you with a hosting or managed service, I also process your identification, billing and contract details, the service configuration, invoices and payment history, support requests, and records of incidents or of abuse and DSA notices.

Data you store in a service I run. If I host a website, mailbox, database or server for you, you may store personal data about your own customers, users or staff in it. For that data you are the controller and I am the processor: I process it only to operate, secure, back up, restore and support the service, on your documented instructions, under the data processing agreement. Administrator access is restricted and logged, traffic is encrypted, systems are hardened and monitored, and the infrastructure is backed up daily with the last seven daily images available. I do not use the content of your data for my own purposes.

Why, and on what basis: technical data are processed to operate, protect, troubleshoot and prevent abuse of the website on the basis of legitimate interests (Article 6(1)(f) GDPR). Enquiry and project data are processed to answer you and take steps before entering into a contract, to perform a contract, to protect legitimate legal and business interests and, where required, to comply with legal obligations (Article 6(1)(b), (c) and (f)).

Who receives it: hosting and infrastructure providers, including Hetzner and other technical providers; Cloudflare for delivery and security; e-mail and telecommunications providers; the contact service you choose, such as WhatsApp; professional advisers; and public authorities where disclosure is legally required. Personal data are not sold.

International transfers: some providers may process data outside the European Economic Area. Where required, transfers rely on an adequacy decision, Standard Contractual Clauses or another safeguard permitted by the GDPR. Cloudflare’s current safeguards are described in its Data Processing Addendum. The privacy terms of an independently selected contact service also apply when you use that service.

How long: server and security logs are retained for no longer than three months unless a security incident requires longer investigation. E-mail is deleted from the inbox once it is no longer needed, and deleted items are permanently removed within three months. Ordinary replies that are not part of client, project, contractual, accounting, tax or legal-claim records are deleted once no longer needed. Client and project correspondence is archived by year and retained for the contractual relationship and applicable limitation periods. Accounting, tax and other legally required records are retained for their statutory periods, up to ten years where applicable, and relevant records may be kept longer while a dispute or legal claim is active.

Your rights: subject to the GDPR conditions, you may request access, rectification, erasure, restriction or portability and may object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time without affecting prior lawful processing. Exercise these rights at jan@pavlik.do.

Your choice: providing contact or project information is voluntary, but without the information needed to identify and answer your request I may be unable to respond or provide services. No automated decision-making or profiling is used.

Cookies and complaints: this website uses no analytics or marketing cookies and does not write to local storage. Infrastructure or security providers may use strictly necessary technical mechanisms. You may lodge a complaint with the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Praha 7, at the Office’s contact page.

Hosting service terms

Hosting is not offered as a standalone product, nor actively marketed to consumers — it is arranged individually. For those cases the general terms, consumer information, abuse policy, DSA contact points, hosting privacy information and data processing agreement are published in full. The Czech text governs.

Open the hosting service terms