Base
Hardened build
minimal ports, security patches applied at build time
Outline Server
Azure
Networking
the server half of Outline: hand out one access key per person, revoke it the moment they leave
Overview
Outline Server is the machine side of the Outline access system from Jigsaw. It runs a Shadowsocks instance for client traffic and a REST management API that the Outline Manager application drives, so an administrator creates one access key per person or device and shares it. The Outline client applications for Windows, macOS, Linux, Android and iOS connect with nothing but that key, and any key can be revoked on its own without disturbing anyone else. There is no web interface: the server is administered from Outline Manager or from the command line, which keeps the surface it exposes deliberately small.
Why the cloudimg image
Outline protects its management API with a long random URL path and a self signed certificate rather than a password, so those two secrets decide the security of the whole server. The cloudimg image generates both on the first boot of every machine and never at build time, so no two deployments can share an API path, a private key or a certificate, and it ships with zero access keys so nothing is ever shared between customers. The container is pinned by registry digest and the automatic updater that the upstream installer normally adds is deliberately absent, so the version you certify is the version that keeps running. Two ports are open by design and everything else the server runs, including its internal metrics endpoints, stays bound to the loopback interface. A paired deployment guide and 24/7 support are included.
Common uses
- Give a distributed team a private route to the open internet
- Issue a contractor one revocable access key and withdraw it on their last day
- Run your own access server in a region you choose, with no third party account
More in Networking
3S
3proxy - Secure HTTP, HTTPS and SOCKS Proxy
Networking
The image builds the official 3proxy binary (pinned at build from the upstream release) and runs it under systemd as the...
Ap
accel-ppp - Remote Access VPN Server
Networking
The image builds accel-ppp 1.14.0 from the upstream source tag (commit 048d31cb, dated 25 January 2026), verified agains...
AdGuard Home - Network-wide Ad Blocking DNS
Networking
This image runs AdGuard Home, the open source network-wide DNS server that blocks ads, trackers and malicious domains fo...
Aw
Anubis Web AI Firewall - Block AI Scraper Bots
Networking
The image installs the latest stable Anubis release, resolved at build time from the official GitHub release package and...
Apache Guacamole
Networking
This image runs Apache Guacamole, the open source clientless remote desktop gateway.
Apache ShenYu
Networking
This image runs Apache ShenYu, the high performance, reactive open source API gateway built on Java and Spring WebFlux.