Base
Hardened build
minimal ports, security patches applied at build time
Scirius Community Edition on Ubuntu 24.04 LTS
Azure
Security
Scirius Community Edition, the web management interface for the Suricata IDS ruleset, with current threat intelligence fetched on first boot rather than frozen into the image.
Overview
Scirius Community Edition is a web interface dedicated to Suricata ruleset management, developed by Stamus Networks. It lets you manage the rule sources and feeds that Suricata detects with, whether public feeds such as the Emerging Threats Open ruleset or your own custom sources, compose them into a single ruleset with per category and per rule control and transformations, and push that composed ruleset to a running Suricata engine, keeping your intrusion detection signatures organised, versioned and current from one place.
It suits security engineers and network defence teams who run Suricata and want a managed, repeatable way to curate what the engine detects, rather than hand editing rule files. This appliance ships the rule management core: the event analytics dashboards that upstream builds on an Elasticsearch datastore are intentionally not enabled, so no Elasticsearch or OpenSearch is installed.
Why the cloudimg image
cloudimg delivers Scirius installed alongside the Suricata engine and reverse proxied behind nginx, with the application server and the rule reload pipeline already wired, so ruleset management answers within minutes of launch. The image is secure by default: no administrator and no shared secret ship in it, and on the first boot of every instance a fresh Django secret key is generated, the database is initialised empty, a unique administrator plus a REST API token are created and written to a file only the root user can read, and the current Emerging Threats Open ruleset is fetched and pushed to Suricata so day one signatures are up to date. No two deployments ever share a login. The image is hardened, fully patched, pinned to a known version, paired with a step by step deploy guide and backed by 24/7 support.
Common uses
- Curating and versioning the Suricata ruleset from public and custom rule sources
- Composing per category and per rule detection policy and pushing it to a running Suricata engine
- A self hosted, repeatable way to keep intrusion detection signatures current
See it running
Real screenshots taken while testing this image against its deployment guide.
More in Security
2F
2FAuth on Ubuntu 24.04 LTS
Security
2FAuth is a free, open source, self hosted web app for managing your two factor authentication accounts.
Ad
acme-dns on Ubuntu 24.04 LTS
Security
The image installs acme-dns 2.0.2 from the official upstream release (github.com/acme-dns/acme-dns, the project formerly...
addy.io on Ubuntu 24.04
Security
Mail sent to an alias is forwarded to your real inbox, and you can reply from the alias so the other side never learns w...
AliasVault on Ubuntu 24.04
Security
AliasVault is an open source, end to end encrypted password manager combined with a private email alias service that you...
Apache SpamAssassin
Security
This image runs Apache SpamAssassin, the long established open source anti spam platform, fully configured and security ...
Apache Syncope on Ubuntu 24.04
Security
Apache Syncope is an open source identity management and identity governance platform.