Artalk, a lightweight self hosted comment system that adds threaded, privacy respecting comments to any website you own.
Artalk is an open source, self hosted comment system: a privacy respecting alternative to hosted commenting services. A single lightweight service serves three things at once, an embeddable comment widget you drop into any page with a short snippet of HTML, a REST API for the comments themselves, and a full administration sidebar for moderating threads, managing sites and pages, reviewing users and exporting or importing your data. Readers get threaded replies, a Markdown editor with live preview, voting, emoticons, image attachments and notifications; you get moderation queues, keyword and spam filtering, a built in captcha and optional social sign in. It suits bloggers, publishers, documentation sites and anyone who wants to own their readers' comments rather than hand them to a third party.
cloudimg ships Artalk as a single self contained service with its embedded database, running as a dedicated non root system user behind a hardened reverse proxy, ready the moment the instance boots. The image is secure by default and carries no credential at all: it ships with no database and therefore no account to sign in as, and on each instance's first boot the only administrator is created with a strong password unique to that instance, written to a root only file, alongside a fresh session signing key. The service itself is bound to loopback so only the proxy is reachable, and the public listener stays shut until that bootstrap has completed, so nobody passing by can reach a half configured instance. The site address is resolved from instance metadata at first boot rather than baked in. Every deployment ships fully patched, with a paired deploy guide and 24/7 cloudimg support.
Real screenshots taken while testing this image against its deployment guide.