EmGee.dev / Work / The EmGee.dev platform
The EmGee.dev platform
The servers, backups, monitoring and release process every site and app here runs on.
About
Separate servers in Melbourne for apps, a dedicated product, WordPress, and databases plus backups, on a private network. Cloudflare sits in front of every public site.
One way to release anything: test, upload, health-check, and roll back by itself if the new version does not answer.
What it does
- A console with a status grid for every server, site, certificate, backup and app, and buttons to restart or roll back from a phone.
- Keys for every app kept and rolled from one place.
- Nightly backups to our own backup server and to Cloudflare R2, locked against deletion for 30 days; monthly restore drills.
Security statement
- Firewalls deny by default: only HTTPS from Cloudflare and WireGuard are open. SSH is key-only, over WireGuard, with fail2ban.
- Servers answer Cloudflare only when it presents our own client certificate (Authenticated Origin Pulls); TLS 1.2+ and HSTS.
- Secrets encrypted with sops and age; each key scoped to one job and one server.
- Automatic security updates every night; app packages audited hourly.
- Admin console behind WireGuard, with password plus passkey.
Shared platform measures (servers, backups, updates, monitoring) are on the Security page. Found a problem? security@emgee.dev.
Privacy statement
What it keeps
- Server logs needed to keep things running (error logs; no visitor tracking).
Why
Security and fault-finding.
Where it is kept
Melbourne; encrypted backups also in Cloudflare R2.
Who else sees it
| Service | What for | Where |
|---|---|---|
| BinaryLane | Server hosting in Melbourne. | Australia |
| Cloudflare | Delivers the site and blocks attacks; sees IP addresses and request details. | Global |
| Cloudflare R2 | Off-site copy of encrypted backups (they cannot read them). | Cloudflare |
| Zoho Mail | Mailboxes. | Australia |
| Resend | Alert and app email. | USA / Japan |
How long, and deleting it
Logs rotate after 14 days; backups as on the Security page.
Ask what we hold about you, correct it or have it deleted at privacy@emgee.dev; we answer within 30 days. The general Privacy page covers your rights under the Australian Privacy Principles.
Contact
Questions about The EmGee.dev platform: hello@emgee.dev. Security reports: security@emgee.dev. Privacy: privacy@emgee.dev.