Base
Hardened build
minimal ports, security patches applied at build time
Rauthy on Ubuntu 24.04 LTS
Azure
Security
Rauthy, a self hosted OpenID Connect provider and identity server that runs from a single binary with no external database.
Overview
Rauthy is an open source OpenID Connect (OIDC) provider and identity and access management server. It lets you run your own single sign on for your applications: it issues signed OIDC and OAuth2 tokens, manages users, clients, roles, scopes and sessions, and supports passwords, passkeys and WebAuthn multi factor from a clean admin console. Rauthy is a single self contained server with an embedded database, so a full identity provider is up and answering with no separate database to run.
It suits teams that want a private, low footprint alternative to heavier identity platforms, securing internal tools and customer facing apps with standards based OIDC.
Why the cloudimg image
cloudimg delivers Rauthy hardened and fully patched, served over TLS with a self signed certificate regenerated on first boot so no key material is ever shared between instances. The identity server binds to loopback behind an nginx reverse proxy, and the image carries no known login: on the first boot of every instance a one shot service generates a random admin password, unique encryption keys and unique internal secrets for that instance, boots the server against an empty database so it creates the admin with that per instance password, and writes it to a file only the root user can read. Every deployment is paired with a step by step deploy guide and backed by 24/7 cloudimg support.
Common uses
- Self hosted single sign on for internal tools and apps
- Standards based OIDC and OAuth2 identity provider
- Passkey and multi factor authentication for your users
See it running
Real screenshots taken while testing this image against its deployment guide.
More in Security
KeePass Password Manager
Security
KeePass is a free, open source password manager that stores all your passwords in a highly encrypted database. The datab...
CrowdSec
Security
This image runs CrowdSec, the free and open source collaborative behavioural security engine.
Ollama GPU-Accelerated LLM Server
Security
This image runs Ollama 0.30, the easiest way to run open large language models locally - pull and serve Llama, Mistral, ...
OWASP ZAP
Security
This image runs OWASP ZAP (the Zed Attack Proxy), the world's most widely used open source web-application security scan...
step-ca
Security
This image runs step-ca, the open source online certificate authority from Smallstep for secure, automated X.509 and ACM...
Trivy Security Scanner
Security
This image runs Trivy, the open source, Apache-2.0 licensed all-in-one security scanner from Aqua Security.