Base
Hardened build
minimal ports, security patches applied at build time
addy.io on Ubuntu 24.04
Azure
Security
addy.io, an open source self hosted email aliasing service, secured on first boot.
Overview
addy.io, formerly AnonAddy, is a self hosted email aliasing service. Instead of giving your real address to every shop, forum, newsletter and app, you give each one a different alias on your own domain. Mail sent to an alias is forwarded to your real inbox and you can reply from the alias, so the other side never learns where it lands. When an alias starts attracting spam you switch it off, and only that one correspondent is affected. Because each alias is unique to one recipient, an address that starts receiving spam tells you exactly who leaked or sold it.
Why the cloudimg image
Upstream ships with sign up open and no concept of an owner, so on a public address any passer by can create an account and issue aliases on your domain. The cloudimg image seeds exactly one administrator with a password generated on your machine and closes registration before either the web or the mail listener opens. The application key, database and Redis passwords, verification secret, blocklist API secret and DKIM key are all generated per instance, including the one real secret upstream commits to its public repository. A guard refuses to start either public listener on an empty, unrotated or published default value. Paired deploy guide and 24/7 cloudimg support.
Common uses
- Give every website its own disposable email alias
- Trace and cut off whoever leaked or sold your address
- Run alias based anti spam on infrastructure you control
See it running
Real screenshots taken while testing this image against its deployment guide.
More in Security
AliasVault Self-Hosted Password Manager & Aliases
Security
The cloudimg image ships the free and open source, AGPL-3.0 licensed AliasVault, run the officially supported way as the...
Apache Directory Server LDAP - Managed Support
Security
This image runs Apache Directory Server (ApacheDS) 2.0, the Apache Software Foundation's extensible, embeddable director...
Apache SpamAssassin Anti-Spam Filter
Security
This image runs Apache SpamAssassin, the open source, Apache-2.0 licensed anti-spam platform.
Authentik - Self-Hosted Identity Provider and SSO Platform
Security
Authentik is an open source identity provider: single sign-on, multi-factor authentication, user management and access c...
Authgear - Open Source Identity Provider
Security
This image runs Authgear, the open source authentication server and identity provider.
Bl
Beelzebub Low-Code Honeypot Framework
Security
This image runs Beelzebub, the open source low code honeypot and deception framework.