Expert DevSecOps / Linux Admin: Clean Server Migration & Rebuild (DigitalOcean)

Job Description: Context: We recently discovered a rootkit on our production server (DigitalOcean Droplet, CentOS/Ubuntu) hosting our backend (Node.js, SocketCluster, PHP Admin Panel). The vulnerability likely occurred a few months ago when a former developer temporarily disabled firewalls and ran outdated bash scripts as root. Because this is a rootkit-level compromise, we are NOT looking for a standard "malware cleanup" service. Since our platform is currently in a low-traffic phase, we are taking the time this weekend to do a 100% clean rebuild and migration to ensure the absolute integrity of our user and provider databases. The Task: We need an experienced DevSecOps / Cloud Engineer to perform a completely clean migration to a newly provisioned DigitalOcean Droplet. The project starts this weekend and must be fully completed and tested by Monday morning. Scope of Work: Provision and harden a new DigitalOcean Droplet. Safely extract ONLY the raw databases (MySQL/MongoDB) from the compromised server. Do NOT transfer any system files, configurations, or infected binaries. Deploy our clean backend code strictly from our official GitHub repository. Reconfigure PM2, SocketCluster, and Node.js environments securely. Ensure all necessary ports (including our custom WebSockets ports like 1892, 2195, 7688) are correctly allowed through UFW and DigitalOcean Cloud Firewalls without exposing the database to the public. Reinstall and configure SSL (Certbot/Let's Encrypt). Point the DNS to the new Droplet. Requirements: Deep expertise in Linux Server Administration and Cloud Security (DigitalOcean). Solid experience with Node.js environments, PM2, and WebSockets. Proven ability to safely dump and restore databases from compromised environments without transferring malware. Excellent communication and documentation skills. Budget & Timeline: We are looking for the best balance of quality and a fair price. We are not in a panic, but we want the job done flawlessly. The deadline for completion is this coming Monday morning (Bolivia time / UTC-4). Please provide your best competitive fixed-price estimate for this weekend project, along with a brief explanation of how you plan to safely extract the database without carrying over the rootkit. I will provide full root access to the old Droplet and the DigitalOcean panel once hired.