Base
Hardened build
minimal ports, security patches applied at build time
Hanko on Ubuntu 24.04 LTS
Azure
Security
Hanko, an open source authentication server for passkeys, passwordless and passwords, so you add modern sign in to your apps without building auth yourself.
Overview
Hanko is an authentication backend that lets you add modern, passwordless sign in to your applications through a clean REST API. It implements passkeys and security keys (FIDO2 and WebAuthn), email passcodes, passwords, multi factor authentication and social login, manages user registration, sign in, credential management and account recovery, and issues signed session tokens your app verifies against a published JSON Web Key Set. Instead of building and maintaining your own identity service, you point your application at Hanko and drop its login web component into your frontend. It suits product and platform teams who want to offer passkeys and passwordless sign in, replace passwords and shared secrets with phishing resistant credentials, and keep full control of their user data by self hosting the auth server rather than depending on a hosted identity provider.
Why the cloudimg image
cloudimg delivers Hanko as a complete, secure by default appliance: the pinned upstream authentication server runs the moment the instance boots, backed by a self contained local PostgreSQL database, with nginx in front as a TLS ready entry point and no container registry to reach or compose file to assemble. It is secure by default: no administrator is baked into the image, the first user you register becomes your admin so there is no default login to change, the administrative API is bound to the loopback interface only as the project intends, and on the first boot of every instance a unique database password and a unique session signing key are generated and written to a root only file so no two instances ever share a secret. The server learns its own public address on every boot so cross origin and relying party settings stay correct, the database is captured empty and re provisioned per instance, the base is fully patched with unattended security upgrades enabled, and every deployment comes with a paired deploy guide and 24/7 cloudimg support.
Common uses
- Add passkeys and passwordless sign in to web and mobile apps
- Replace passwords and shared secrets with phishing resistant credentials
- Self host a modern authentication server and keep full control of user data
More in Security
KeePass Password Manager
Security
KeePass is a free, open source password manager that stores all your passwords in a highly encrypted database. The datab...
CrowdSec
Security
This image runs CrowdSec, the free and open source collaborative behavioural security engine.
Ollama GPU-Accelerated LLM Server
Security
This image runs Ollama 0.30, the easiest way to run open large language models locally - pull and serve Llama, Mistral, ...
OWASP ZAP
Security
This image runs OWASP ZAP (the Zed Attack Proxy), the world's most widely used open source web-application security scan...
step-ca
Security
This image runs step-ca, the open source online certificate authority from Smallstep for secure, automated X.509 and ACM...
Trivy Security Scanner
Security
This image runs Trivy, the open source, Apache-2.0 licensed all-in-one security scanner from Aqua Security.