Base
Hardened build
minimal ports, security patches applied at build time
Onetime Secret on Ubuntu 24.04 LTS
Azure
Security
Onetime Secret, a self hosted service for sharing sensitive information through one time links that reveal a secret exactly once and then self destruct.
Overview
Onetime Secret is an open source, self hosted service for sharing passwords and other sensitive information safely. Instead of pasting a secret into email or chat where it lingers forever, you paste it once and get back a short lived one time link; the recipient opens the link a single time to reveal the secret, after which it is permanently burned and the link stops working. Secrets carry a time to live so anything unread also expires on its own, and an optional administrator dashboard lets an operator review activity. It suits any team that needs to hand over credentials, keys or private notes without leaving a lasting copy behind.
Why the cloudimg image
cloudimg delivers Onetime Secret hardened behind an nginx reverse proxy that binds the application and its Redis store to loopback, served over TLS with a self signed certificate regenerated on first boot so no key material is ever shared between instances. The image is secure by default with no known credential baked in: on each instance's first boot the application root secret, the Redis password and the administrator account password are all generated to unique random values and written to a root only file. Every deployment carries a paired deployment guide and 24/7 support.
Common uses
- Share passwords and API keys through links that self destruct after one view
- Hand credentials to contractors or customers without a lasting email trail
- Run a private, self hosted alternative to public paste and secret services
See it running
Real screenshots taken while testing this image against its deployment guide.
More in Security
KeePass Password Manager
Security
KeePass is a free, open source password manager that stores all your passwords in a highly encrypted database. The datab...
CrowdSec
Security
This image runs CrowdSec, the free and open source collaborative behavioural security engine.
Ollama GPU-Accelerated LLM Server
Security
This image runs Ollama 0.30, the easiest way to run open large language models locally - pull and serve Llama, Mistral, ...
OWASP ZAP
Security
This image runs OWASP ZAP (the Zed Attack Proxy), the world's most widely used open source web-application security scan...
step-ca
Security
This image runs step-ca, the open source online certificate authority from Smallstep for secure, automated X.509 and ACM...
Trivy Security Scanner
Security
This image runs Trivy, the open source, Apache-2.0 licensed all-in-one security scanner from Aqua Security.