ElectricSQL, a Postgres sync engine that streams live partial replicas of your tables to any client over plain HTTP.
ElectricSQL is a sync engine for Postgres. Instead of asking clients to poll for changes, it tails the database's own logical replication stream and serves each client a shape: a filtered, columnar slice of a table, defined by a simple query. Clients subscribe once, receive the current snapshot, then hold an ordinary long lived HTTP request that delivers every subsequent insert, update and delete as it happens. Because the interface is plain HTTP with real caching semantics, shapes can sit behind ordinary proxies and CDNs, and any language that can make a request can consume them. It is the engine behind local first and realtime applications, where the client keeps a working copy of the data it needs and stays current without bespoke websocket plumbing or a hand written change feed.
The sync API serves database contents, so an unauthenticated instance is an open database. cloudimg closes that on both layers before anything is reachable: a reverse proxy is the single way in and holds a per instance credential, and the sync service's own API secret is generated per instance too, so a request needs both. Neither is baked into the image. The image also ships with no database at all: the bundled Postgres cluster is built fresh on first boot, on its own dedicated data volume, with passwords generated for that instance, so the upstream default is never created rather than created and rotated. That Postgres comes from the distribution's main package set, so it keeps receiving security updates for the life of the instance. The sync service itself is the official upstream release, pinned by digest and version checked at runtime, bound to loopback and started only once first boot has finished. Every deployment is fully patched, carries a paired deploy guide and is backed by 24/7 cloudimg support.