DevOps Developer: Deploy Updates & Security Audit for AI Sports Analytics Platform (Docker/FastAPI)

I run GoWinBet (gowinbet.ai), an AI-powered sports analytics platform (football, tennis, basketball: NBA + NCAA). The code is ready; I need an experienced developer to deploy a new release safely on our production server and audit the platform's security. Stack - Frontend: Next.js (React) - Backend: Python FastAPI - AI services: Python (LightGBM models, nightly retraining, cron jobs) - Infrastructure: Docker Compose on an Ubuntu server (AWS), Nginx/HTTPS - External APIs: API-Sports, ESPN public data **Scope (single milestone)** Deployment - Back up the current production (code, databases, model files) before any change - Deploy the new release from a zip archive, following my written installation guide - Rebuild and restart the Docker services (frontend, backend, AI services) with minimal downtime - Run the provided health checks and confirm that everything passes - Verify the cron jobs (nightly retraining and settlement) and the memory limits - Document what was done and how to roll back Security audit and hardening - Rotate API keys and secrets, and make sure no secret is in the code, the logs or the Git history - Review the .env handling, Docker networks, open ports and firewall - Check HTTPS/TLS, Nginx headers, CORS and rate limiting on the public API - Review authentication, premium-access checks and JWT handling - Update vulnerable dependencies (pip / npm audit) - Set up automated backups and basic monitoring/alerts - Deliver a short report: issues found, fixes applied, remaining risks ranked by priority Requirements - Proven experience with Docker Compose in production, Linux server administration and AWS - Solid knowledge of FastAPI/Python and Next.js deployments - Web application security experience (OWASP Top 10, secrets management) - Clear written communication; you document every change - Available within the next few days; work in Eastern Time or with good overlap To apply, please answer: 1. Describe a production deployment with Docker Compose that you handled, including the rollback plan. 2. What are the first three things you check when auditing a FastAPI + Next.js app? 3. Your total estimated time and fixed price for the whole scope, and your availability.