KitchenOwl

AWS Application Stacks
Base
Hardened build
minimal ports, security patches applied at build time
Access
Unique credentials
generated on first boot, readable only by root
Verified
Boots working
services pass a health gate before release
Support
24/7, 365 days
by email and live chat, 24 hour response SLA

Overview

Self hosted grocery list, recipe manager and meal planner for households: a shared shopping list that checks off in real time, recipes whose ingredients add to the list in one tap, and a weekly meal planner. Secured by cloudimg with unique credentials per instance and no default login, backed by 24/7 support.

Why the cloudimg image

This image arrives installed, configured and hardened, so there is no manual setup before you can use it. It is built on a patched base, runs with credentials generated uniquely for your instance on first boot, and passes an automated health check before every release. Every deployment is backed by 24/7 support from cloudimg engineers.

Key features

  • A shared household food hub: several people use one live shopping list that checks off in real time as anyone shops, a collection of recipes whose ingredients add to the list in one tap, a weekly meal planner that can fill the list for you, and grocery expense tracking. The all in one container serves the API and the Flutter web app on one origin, so the same account works from the web and the mobile apps.
  • Secure by default with no known credential. The upstream token signing secret is a fixed public value; cloudimg generates a fresh unique secret on first boot before the app starts, and seeds one administrator with a per instance random password written to a root only file. Open self sign up is disabled and onboarding closes once the administrator exists, so no two deployments share a login and the upstream default never governs a running instance.
  • Ready in seconds and production shaped. The pinned container is captured into the image so there is no first boot download, an empty SQLite database is created on a dedicated data volume you can snapshot and grow independently, an nginx reverse proxy on port 80 carries WebSocket upgrades for realtime sync while the app stays bound to loopback, and the image is fully patched at build time and backed by 24/7 cloudimg support.

See it running

Real screenshots taken while testing this image against its deployment guide.

KitchenOwl screenshot 1 KitchenOwl screenshot 2 KitchenOwl screenshot 3 KitchenOwl screenshot 4

Description

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

## KitchenOwl by cloudimg

KitchenOwl is an open source, self hosted app for managing a household's food. Several people share the same shopping list and items check off in real time as anyone shops, so the list stays current whoever is at the store. You keep a collection of recipes, add their ingredients to the list in one tap, and plan meals across the week on a calendar that can fill the shopping list for you. It also tracks grocery expenses so a household can split the cost. The all in one KitchenOwl container serves the Flask API and the built Flutter web app on one origin, so the same account works from the web and the mobile apps.

## Secure by default, no known credential

KitchenOwl's upstream token signing secret is a well known fixed value. cloudimg generates a fresh unique signing secret on the first boot of every instance, before the app starts, and seeds a single administrator account with a per instance random password written to a root only file, so no two deployments share a credential and the upstream default never governs a running instance. Open self sign up is disabled and onboarding closes once the administrator exists, so members are added by the administrator rather than by anyone who finds the URL.

## What is included

* The AGPL-3.0 licensed KitchenOwl all in one container, pinned by image digest and captured into the instance so it starts in seconds

* A SQLite database created empty on first boot, on a dedicated data volume, so there is nothing else to deploy

* nginx reverse proxy on port 80 with WebSocket upgrade for realtime shopping list sync; the app is bound to loopback

* A unique token signing secret and a per instance admin account generated per instance on first boot, never baked into the image

* The latest security patches applied at build time and unattended security upgrades enabled

## Licensing

KitchenOwl is free and open source under the AGPL-3.0 license; there is no per user or per seat software fee. The cloudimg charge covers packaging, security patching, image maintenance and 24/7 expert support. CPU only, no GPU required.

## Support

Every deployment is paired with a step by step guide and backed by 24/7 cloudimg support with a guaranteed 24 hour response SLA. Guide: https://www.cloudimg.co.uk/guides/kitchenowl-aws/. Support: support@cloudimg.co.uk.

KitchenOwl is an independent open source project; this image is produced by cloudimg and is not affiliated with or endorsed by it.

Related technologies

grocery listshopping listrecipe managermeal planningmeal plannerhouseholdself hostedkitchenshared listopen source