RSS-Bridge - RSS and Atom Feed Generator

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

## Overview

RSS-Bridge is a popular open source application that generates RSS and Atom feeds for websites that do not publish their own. You pick a bridge from a searchable list, fill in a short form, and RSS-Bridge returns a feed URL you paste into any RSS reader, so you can follow sites, video channels and social accounts in one place again. This AMI delivers RSS-Bridge fully installed and reverse-proxied behind nginx with php-fpm, so your personal feed generator is serving within minutes of launch, with no manual PHP, web server or permissions wiring required.

RSS-Bridge is stateless, with no database to run: a single local file cache is all it needs. That keeps the image simple, auditable and comfortable on small instance types.

## Why This AMI vs. Alternatives

• Hardened for the open-proxy risk: Because RSS-Bridge fetches upstream URLs on the requester's behalf, an unprotected instance can be abused by anyone on the internet as an open feed proxy. This image places the entire interface behind an HTTP Basic Auth gate, so only you can generate feeds.
• Secure first boot vs. shared defaults: Many images ship with a published default password. This image generates a unique password on every launch, stored only as a bcrypt hash in a root-only file. No shared or default credential ever exists in the image.
• No database to manage: RSS-Bridge needs only a local file cache, so there is no database server to provision, tune, patch or back up. You eliminate an entire failure domain and reduce monthly infrastructure cost.

## Application Stack

nginx answers on port 80 and passes requests to php-fpm over a local socket. RSS-Bridge runs as pure PHP through its front controller. systemd starts nginx and php-fpm on boot and restarts them on failure. RSS-Bridge's own configuration is hardened with a curated set of bridges and debug mode disabled. The architecture is simple, auditable and runs comfortably on small instance types.

## Security and Hardening

• The entire interface sits behind an HTTP Basic Auth gate whose password is generated uniquely and at random for every instance and stored only as a bcrypt hash
• The image ships with no usable or default credential, so your instance can never be abused as an open feed proxy
• A curated bridge set and disabled debug mode add defence in depth
• An unauthenticated health endpoint is provided for load-balancer and uptime checks
• nginx serves on port 80; TLS termination is recommended via an AWS Application Load Balancer or your own certificate configuration

## Use Cases

• Individuals and researchers turning news sites, blogs, video channels and social accounts that do not publish feeds into clean RSS or Atom feeds for their reader.
• DevOps and product teams generating feeds from release pages, status pages and changelogs that lack native feeds, to pipe into a reader or automation.
• Content and marketing teams aggregating competitor and industry sources that offer no feed into a single monitored stream, entirely within their own AWS account.

## Getting Started

Launch the AMI, retrieve the generated Basic Auth password via SSH, open your browser to the instance's public IP on port 80, and sign in as admin. Pick a bridge, fill in the short form, and RSS-Bridge returns a feed URL to paste into any RSS reader. A built-in health endpoint answers on the web server for load-balancer and uptime checks.

RSS-Bridge is released into the public domain by its authors. This is a repackaged open source software product with additional charges for cloudimg support services. All product and company names are trademarks or registered trademarks of their respective holders.

## cloudimg Support