Base
Hardened build
minimal ports, security patches applied at build time
Nginx Proxy Manager with Authelia SSO on Ubuntu 24.04 LTS
Azure
Application Infrastructure
Nginx Proxy Manager with Authelia single sign on already wired in as its forward authentication provider, so proxied applications are protected the moment they are published.
Overview
Nginx Proxy Manager is an open source web interface for running a reverse proxy: you add a host, point it at a backend, and it manages the proxy configuration and free TLS certificates for you. Authelia is an open source authentication and two factor single sign on server built to sit in front of proxied applications, so visitors sign in once at a central login portal instead of each application handling its own accounts.
Running one behind the other is the standard self hosted single sign on pattern, and the work in it is the forward authentication wiring that connects them: the authorisation subrequest, the redirect to the login portal and back, and the identity headers passed on to the backend. This appliance ships that wiring already built, with a login portal and a protected example host created and working, so publishing a protected application is adding a host and pasting in one block of configuration.
Why the cloudimg image
cloudimg ships both components integrated and proves the integration rather than asserting it: the instance refuses to finish its first boot unless it can observe, on that instance, an unauthenticated request being redirected to the login portal, a wrong password rejected, and an authenticated session passing through to the backend with the resolved identity attached. It is secure by default and no credential is ever shared between customers: the well known default proxy manager login does not exist, and the proxy manager administrator, the single sign on administrator, the token, session and storage encryption secrets, and the interim certificate private key are all generated uniquely on each instance at first boot. The authentication server is bound to the loopback interface and is never reachable from outside the instance, both datastores sit on a dedicated volume, the base is fully patched with unattended security upgrades enabled, and every deployment is paired with a step by step deploy guide, backed by 24/7 cloudimg support.
Common uses
- Put single sign on in front of internal applications that have no authentication of their own
- Publish and protect several services behind one reverse proxy and one login portal
- Give a team one central login with two factor authentication for everything you proxy
See it running
Real screenshots taken while testing this image against its deployment guide.
More in Application Infrastructure
1Panel Server Management Panel on Ubuntu 24.04
Application Infrastructure
1Panel is an open source, web based control panel for managing a Linux server from the browser.
Apache Directory Server on Ubuntu 24.04 LTS
Application Infrastructure
Apache Directory Server (ApacheDS) is an extensible, embeddable LDAP v3 and Kerberos directory server written in Java by...
Ad
Apache Dubbo on Ubuntu 24.04 LTS
Application Infrastructure
Apache Dubbo is an RPC and microservice framework; this image ships the Dubbo Admin console with a ZooKeeper registry, h...
Apache Seata Server on Ubuntu 24.04 LTS
Application Infrastructure
Apache Seata is an open source distributed transaction solution for microservices.
Apache ShenYu on Ubuntu 24.04 LTS
Application Infrastructure
Apache ShenYu is a high-performance, reactive API gateway built for microservices.
Apache Solr 9 Ubuntu 24.04
Application Infrastructure
Apache Solr is the leading open-source search platform built on Apache Lucene, full-text search, faceted navigation, ric...