Base
Hardened build
minimal ports, security patches applied at build time
multiOTP on Ubuntu 24.04
Azure
Security
multiOTP, an OATH certified open source strong authentication server for TOTP and HOTP one time passwords, with a per instance admin password generated on first boot.
Overview
multiOTP is an open source, OATH certified strong two factor authentication server. It issues and validates time based and counter based one time passwords (TOTP and HOTP) as well as Mobile OTP, provisions users to authenticator apps with QR codes, and keeps its users and tokens in a simple local store, all driven from a command line utility and a bundled web administration interface. It gives teams a self hosted second factor they own inside their own cloud account, ready to plug into VPNs, RADIUS front ends and login flows.
Why the cloudimg image
A default administrator login turns an authentication server into a liability, so cloudimg makes multiOTP secure by default. On the first boot of every instance a unique administrator password is generated and applied to two gates in lock step, the web administration interface and the reverse proxy that fronts it, then written to a file only the root user can read, so no default credential is ever reachable and no two instances share one. The image ships the open source LGPL edition only, never the commercial appliance, fully patched with unattended security upgrades enabled and the admin interface behind an authenticated reverse proxy. It comes with a paired deployment guide and 24/7 cloudimg support.
Common uses
- A self hosted TOTP and HOTP one time password server
- Second factor for VPNs, RADIUS and login flows
- Provisioning users to authenticator apps with QR codes
See it running
Real screenshots taken while testing this image against its deployment guide.
More in Security
KeePass Password Manager
Security
KeePass is a free, open source password manager that stores all your passwords in a highly encrypted database. The datab...
CrowdSec
Security
This image runs CrowdSec, the free and open source collaborative behavioural security engine.
Ollama GPU-Accelerated LLM Server
Security
This image runs Ollama 0.30, the easiest way to run open large language models locally - pull and serve Llama, Mistral, ...
OWASP ZAP
Security
This image runs OWASP ZAP (the Zed Attack Proxy), the world's most widely used open source web-application security scan...
step-ca
Security
This image runs step-ca, the open source online certificate authority from Smallstep for secure, automated X.509 and ACM...
Trivy Security Scanner
Security
This image runs Trivy, the open source, Apache-2.0 licensed all-in-one security scanner from Aqua Security.