Q01What does a DevOps engineer do on a crypto project that is different?
The base is the same: deployments, databases, monitoring. Crypto adds chain infrastructure. Nodes that must stay at the tip of the chain, RPC providers that rate-limit or serve stale data, private keys that sign transactions and must never leak, and traffic that spikes with the market. Someone who has not run nodes or handled signing keys will learn it on your production system.
Q02Cloud or bare metal?
Both have a place. Cloud suits stateless APIs, managed databases and anything that scales up and down. Bare metal suits chain nodes and latency-sensitive trading systems, where you want the whole machine at a fixed monthly cost. A mix is common.
Q03How do you keep private keys and secrets safe in production?
Keys never go in the repository or in plain environment files on shared machines. Signing sits in the smallest service possible, reachable by the fewest people, with access logged. The exact setup depends on the threat model. A hot wallet for a bot is a different problem from a treasury. I design it with you and say what risk remains.
Q04Do we need multi-region?
Only with a reason. Two are good ones: users or counterparties in different parts of the world where latency matters, and a requirement to survive a provider outage. It adds cost and complexity, mostly around the database. If neither applies, one well-monitored region with tested backups is the better choice.
Q05How long does it take to stabilize a shaky production setup?
Visibility comes first and comes quickly: metrics and alerts are days of work. After that the order follows the risk. Some fixes are a config change. Others, like moving a database to a replicated setup, need planning and a quiet window. After the audit you get a ranked list showing what each step buys.