Ente Photos on Ubuntu 24.04 LTS

Why the cloudimg image

cloudimg delivers the whole Ente stack, the museum server, the web app, PostgreSQL and the S3 compatible object store, installed and wired together so the sign up page answers the moment the instance boots, with no compose files to assemble by hand. The image is secure by default and bakes no credential: the upstream quickstart writes fixed secrets, and cloudimg keeps none of them. On the first boot of every instance a fresh set of secrets is generated, the database password, the object store access and secret keys, and the three master secrets the server uses to encrypt and sign, the encryption key, the hash key and the JWT secret, and they are written to a root only file, so no two instances share a secret and no upstream default ever governs a running server. Because Ente is end to end encrypted there is no server side admin password at all: you create your account from the app, where your keys are generated on your device. The datastores are kept off the public network, the encrypted photo store and metadata live on a dedicated data volume captured into the image, the base is fully patched with unattended security upgrades enabled, and every deployment is paired with a step by step deploy guide and backed by 24/7 cloudimg support.