Base
Hardened build
minimal ports, security patches applied at build time
Infisical on Ubuntu 24.04
Azure
Security
Infisical, an open source secrets management platform, a self hosted alternative to HashiCorp Vault and Doppler, secured on first boot.
Overview
Infisical is an open source secrets management platform that teams use to store, organise, share and version application secrets and configuration across organisations, projects and environments. It offers folders, secret referencing, a full web UI, a REST API, a CLI and SDKs, so developers pull secrets into their apps and pipelines instead of scattering them in .env files, all run and owned inside their own cloud account rather than a hosted service.
Why the cloudimg image
cloudimg ships the free self hosted Infisical Community edition hardened and fully patched on Ubuntu 24.04, with a bundled PostgreSQL and Redis on the same VM. Because Infisical is a secrets vault, security is enforced from first boot: a unique KMS encryption key, JWT secret, database password and cache password are generated on each virtual machine so nothing sensitive is shared across images, a unique super administrator is pre seeded and open signup is disabled so no attacker can seize the instance before you sign in, and PostgreSQL and Redis are bound to the internal container network only. It comes with a paired deployment guide and 24/7 cloudimg support.
Common uses
- Central secret storage for apps and services
- Secrets in CI, CD and infrastructure pipelines
- Team wide secret sharing and versioning
See it running
Real screenshots taken while testing this image against its deployment guide.
More in Security
KeePass Password Manager
Security
KeePass is a free, open source password manager that stores all your passwords in a highly encrypted database. The datab...
CrowdSec
Security
This image runs CrowdSec, the free and open source collaborative behavioural security engine.
Ollama GPU-Accelerated LLM Server
Security
This image runs Ollama 0.30, the easiest way to run open large language models locally - pull and serve Llama, Mistral, ...
OWASP ZAP
Security
This image runs OWASP ZAP (the Zed Attack Proxy), the world's most widely used open source web-application security scan...
step-ca
Security
This image runs step-ca, the open source online certificate authority from Smallstep for secure, automated X.509 and ACM...
Trivy Security Scanner
Security
This image runs Trivy, the open source, Apache-2.0 licensed all-in-one security scanner from Aqua Security.