IT Tools - Self-Hosted Developer Utilities

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

## Overview

IT-Tools is an open source, self-hosted collection of around 80 handy developer and IT utilities gathered into one clean web interface: hash, UUID, ULID and token generators, a JWT parser, base64 and URL encoders and decoders, a crontab expression generator, colour, case, date and number-base converters, JSON, YAML and SQL formatters, IPv4 and IPv6 subnet and network calculators, QR-code generators, a chmod calculator, a docker-run-to-compose converter, a regex tester and many more. Every tool computes entirely in your own browser: there is no backend, no database and no telemetry, so the data you paste into a tool never leaves the browser. That makes it well suited to offline, air-gapped and privacy-sensitive environments. This AMI delivers IT-Tools built from the pinned upstream release, served by nginx and gated by a unique per-instance credential, so a working private toolbox is operational within minutes of launch.

## Why This Image vs a Manual Install

IT-Tools has no built-in authentication of its own; it is designed as an openly readable public utility, so exposing it directly on a public IP would make the whole tool set world-readable. Running it safely yourself means building the Vue single-page app from source with the correct Node and pnpm toolchain, serving the static bundle, and putting an authenticated front door in front of it. This image completes every one of those steps at build time. The SPA is built from the pinned upstream git tag, published under nginx on port 80, and the whole application is gated behind HTTP Basic authentication using a unique per-instance credential generated on each instance's first boot. The complete GPL-3.0 corresponding source for the exact version running is kept on disk.

## Authentication

IT-Tools itself has no accounts or login. This image adds a single per-instance HTTP Basic credential (user admin) in front of the whole app so the tools are not publicly readable, minted on first boot and written to a root-only file. A single unauthenticated path is exposed: GET /health returns 200 for load-balancer and health probing. Read your per-instance credential with: sudo cat /var/lib/cloudimg/it-tools-credentials.txt.

## Security Hardening

This image follows a defence in depth approach:

• No default or shared credentials: the per-instance HTTP Basic password is generated fresh on every instance's first boot with openssl and is never shipped in the image; the build-time credential is wiped before capture
• Gated front door: the whole application sits behind HTTP Basic authentication, so a scanner or passer-by cannot read the tools; only GET /health is public
• Client-side by design: every tool computes in the browser, so there is no server-side database, no stored user data and no telemetry to protect
• Add your own TLS: the front door is plain HTTP on port 80; for production, terminate TLS with your own certificate or an Application Load Balancer and restrict the security group to trusted source IP ranges as the guide describes

## Concrete Use Cases

• A private, always-available developer toolbox: give a team one self-hosted URL for the everyday encode, decode, hash, UUID, JWT, crontab, subnet and converter tools instead of relying on assorted public websites
• Privacy-sensitive and offline work: because every tool runs entirely in the browser and nothing is sent to a server, paste secrets, tokens and internal data into the tools on an air-gapped or restricted network without it leaving the browser
• Standardize tooling across an organization: host a single pinned version of the utilities behind a per-instance credential so everyone uses the same known-good tools on the internal network

## AWS Integration

Deploy on any EC2 instance type; the recommended size is m5.large. Put the instance behind an Application Load Balancer to terminate TLS with your own certificate, and restrict the security group to trusted source IP ranges. Because the application is entirely static and client-side there is no database to back up.

## cloudimg Support

24/7 technical support by email and chat. Help with deployment, adding TLS with your own domain and certificate, restricting network access, and reverse-proxy configuration.