Jahid Hiron

ServerIQ is my current company project, where I work as a Software Engineer. It is a server monitoring and analytics platform used by 200+ teams to monitor server health, analyze metrics, and manage alerts.

When a server is launched, a ServerIQ Agent is installed with a Gateway API endpoint and unique server key. The agent collects CPU, RAM, disk, network, processes, and availability metrics, then sends them to the ingestion API approximately every minute. The API identifies the server using its key and stores the metrics for analysis and visualization.

With 1,200+ monitored servers generating time-series data, efficient storage and querying became essential. I worked with TimescaleDB to handle high-volume monitoring data, including time-based queries and efficient storage of historical metrics. These metrics power dashboards, analytics, and alerting workflows.

Users can define custom events based on conditions such as high RAM or disk usage, network activity, server downtime, or a specific process stopping. Events can notify contacts or groups through web notifications, email, SMS, WhatsApp, Discord, Telegram, Microsoft Teams, and custom webhooks.

ServerIQ also provides team collaboration and access control. Users can create teams, invite members, organize servers, and assign read/write permissions, similar to GitHub's collaboration model.

I also worked on the billing and monetization system, including subscription plans, billing intervals, feature entitlements, and usage limits. This involved complex scenarios such as dunning states, usage snapshots, and reconciliation logs. Dunning states track failed-payment and recovery stages, usage snapshots capture customer usage for billing and enforcement, while reconciliation logs help detect and investigate billing or usage discrepancies.

Overall, the project gave me hands-on experience with time-series data, TimescaleDB, real-time ingestion, monitoring, alerting, team authorization, and production billing systems.

Built and open-sourced a production-grade REST API starter template using NestJS 11, PostgreSQL, TypeORM, Redis, RabbitMQ, and Socket.IO — designed to give backend teams a secure, scalable foundation with authentication, RBAC, logging, and messaging built in from day one.

Authentication & Authorization

• Implemented JWT access/refresh token flow with rotation, Google OAuth, email verification, password reset, and "remember me" extended sessions with multi-device session tracking.
• Built decorator-based RBAC with fine-grained permissions, auto-discovered from controller routes via NestJS's DiscoveryService.

Architecture & Patterns

• Designed a layered architecture (Config, Common, Shared, Infrastructure, Feature Modules) using the Provider pattern for single-responsibility business logic and a generic BaseRepository for consistent CRUD, pagination, and transaction handling across TypeORM entities.

Observability & Reliability

• Built per-request HTTP logging and audit-trail activity logging (user + system level), with centralized error tracking exposing an admin API to inspect, resolve, and alert on unhandled server errors.
• Added Winston structured logging with AsyncLocalStorage-based request correlation.

Real-Time & Async Processing

• Integrated Socket.IO for real-time WebSocket updates and RabbitMQ for decoupled background processing, with async-deferred log persistence for high-throughput scenarios.

Security & DevOps

• Applied Helmet security headers, CORS allowlisting, scrypt password hashing, HIBP breach checks, and Redis-based rate limiting.
• Included Docker Compose setup, Swagger/OpenAPI auto-documentation, i18n support, and comprehensive test coverage (Jest unit + e2e).