Base
Hardened build
minimal ports, security patches applied at build time
Pomerium on Ubuntu 24.04 LTS
Azure
Security
pomerium, an open source identity aware access proxy, serving TLS with unique secrets generated on first boot.
Overview
Pomerium is an open source identity aware access proxy. It sits in front of your internal applications and authenticates every request against your own identity provider, then enforces per route authorization policy, so you grant access by identity and context rather than by network location.
Why the cloudimg image
cloudimg delivers Pomerium hardened, fully patched and preconfigured, terminating TLS on first boot with a per VM self signed certificate and a unique shared secret and cookie secret generated on first boot, so no secret ever ships in the image. You wire up your own OIDC provider, then gate any upstream. Paired with a step by step deploy guide and backed by 24/7 support.
Common uses
- Identity aware access to internal web applications
- A zero trust reverse proxy in front of your own upstreams
- OIDC single sign on gateway for self hosted tools
More in Security
KeePass Password Manager
Security
KeePass is a free, open source password manager that stores all your passwords in a highly encrypted database. The datab...
CrowdSec
Security
This image runs CrowdSec, the free and open source collaborative behavioural security engine.
Ollama GPU-Accelerated LLM Server
Security
This image runs Ollama 0.30, the easiest way to run open large language models locally - pull and serve Llama, Mistral, ...
OWASP ZAP
Security
This image runs OWASP ZAP (the Zed Attack Proxy), the world's most widely used open source web-application security scan...
step-ca
Security
This image runs step-ca, the open source online certificate authority from Smallstep for secure, automated X.509 and ACM...
Trivy Security Scanner
Security
This image runs Trivy, the open source, Apache-2.0 licensed all-in-one security scanner from Aqua Security.