aptly, a repository manager that mirrors, snapshots, and publishes GPG signed Debian and Ubuntu APT repositories.
aptly is an open source tool for managing Debian and Ubuntu package repositories. It mirrors upstream APT repositories to a fast local copy, snapshots them so a fleet always installs an identical, reproducible set of packages, and publishes your own GPG signed repositories that any apt client verifies and consumes. aptly keeps its own embedded database and package pool on disk and is driven by a scriptable command line and REST API, so there is no separate database server and no web console to manage.
The cloudimg image is hardened and fully patched with aptly preconfigured behind nginx TLS, the REST API bound to loopback and fronted by HTTP basic auth. It ships secure by default with no shared credentials: on first boot every instance generates its own GPG signing key, its own management API password and its own TLS certificate, then publishes a signed demonstration repository and writes the per instance credentials to a root only file. Every instance is backed by a paired deploy guide and 24/7 cloudimg support.