Lutece 7.1

Azure Applications

Lutece is the City of Paris open source web portal and e government application engine for building content driven public sector websites and online services.

Base
Hardened build
minimal ports, security patches applied at build time
Access
Unique credentials
generated on first boot, readable only by root
Verified
Boots working
services pass a health gate before release
Support
24/7, 365 days
by email and live chat, 24 hour response SLA

Overview

Lutece is an open source web portal and application engine created and maintained by the City of Paris to build content driven websites and online public services. Editors manage pages, content and navigation from a back office administration console, while the portal renders the public site from a library of built in features and a large ecosystem of plugins for forms, documents, directories, search and more. Because it is a full application engine rather than a single site template, organisations use Lutece both as a classic content management system for institutional and citizen facing websites and as a platform on which to assemble bespoke e government services on a common, well supported core.

Lutece has run production public sector portals for the City of Paris and other administrations for many years, is released under the permissive BSD licence, and is designed so that new functionality is added as self contained plugins around a stable core. Content and configuration live in a relational database, the administration console is separated from the public portal, and a fine grained rights and workgroup model lets teams share one authoritative site while each editor sees only what they are entitled to.

Why the cloudimg image

Standing up Lutece normally means installing a Java servlet container and a database, assembling the web application from the project's Maven artifacts, wiring the database connection by hand and then loading the schema. cloudimg ships that whole stack assembled and proven, OpenJDK with Apache Tomcat and MySQL on one instance, so the portal and its administration console answer within minutes of first boot. Security is the reason to take this image rather than build it yourself: Lutece's own installation data seeds a well known default administrator, and that credential does not exist anywhere in this image. The image ships with no database, no application account and no connection password, and the servlet container is held back from starting until first boot has created the database, rotated the administrator login to a unique password and written it, together with a unique database password, into a root only file, so no default or shared credential ever exists on a running instance. The database and the servlet container both listen on the loopback interface only, a hardened reverse proxy is the single public listener with no management console or version banner exposed, and the configuration and secret files can never be fetched over the web. The base is fully patched with unattended security upgrades enabled, and every deployment is paired with a step by step deploy guide and backed by 24/7 cloudimg support.

Common uses

  • Publish and manage a content driven institutional or citizen facing website
  • Assemble bespoke e government online services on a common supported core
  • Give editorial teams a shared back office with fine grained rights and workgroups

See it running

Real screenshots taken while testing this image against its deployment guide.

Lutece 7.1 screenshot 1 Lutece 7.1 screenshot 2 Lutece 7.1 screenshot 3 Lutece 7.1 screenshot 4