Base
Hardened build
minimal ports, security patches applied at build time
SnapPass on Ubuntu 24.04 LTS
Azure
Security
SnapPass shares a password or key by a link that works exactly once and is destroyed the moment it is read.
Overview
SnapPass is a self hosted one time secret service. You paste a password, an API key or any short piece of text, choose how long it may live, and SnapPass gives you back a link. The first person to open that link sees the secret once and SnapPass destroys it in the same moment, so the link is dead from then on; if nobody opens it, the secret expires on its own. It replaces the habit of pasting credentials into chat and email, where they sit in a searchable history indefinitely.
Each secret is encrypted under a key generated just for it. Only the ciphertext is kept in the datastore and the decryption key lives nowhere except inside the link you send, so the datastore on its own reveals nothing. A small web interface covers the whole flow, and a simple API covers the same ground for scripts and automation.
Why the cloudimg image
cloudimg builds this image for the promise the software makes rather than merely installing it. The datastore is configured in memory only, deliberately, so no secret material is written to a file that could outlive the secret, and TLS is terminated from first boot because the link itself carries the decryption key. The web server records no request address in its logs and the application access log is switched off, and a first boot check performs a complete end to end exchange with a marked test value then searches the web server logs, the system logs, the system journal and the datastore directory for it, refusing to finish booting if it finds anything. Creating secrets requires a sign in unique to each instance while reading a link does not, so links can be shared outside your organisation. Every instance generates its own application secret key, datastore password, sign in password and certificate on first boot and none of them exists in the image, which serves nothing on a routable port until those exist. Fully patched with unattended security upgrades, paired with a step by step deploy guide, and backed by 24/7 cloudimg support.
Common uses
- Send a password or API key by a link that works once and then expires
- Share credentials with contractors or customers with no chat or email trail
- Run a private, self hosted alternative to public one time secret websites
See it running
Real screenshots taken while testing this image against its deployment guide.
More in Security
2F
2FAuth on Ubuntu 24.04 LTS
Security
2FAuth is a free, open source, self hosted web app for managing your two factor authentication accounts.
Ad
acme-dns on Ubuntu 24.04 LTS
Security
The image installs acme-dns 2.0.2 from the official upstream release (github.com/acme-dns/acme-dns, the project formerly...
addy.io on Ubuntu 24.04
Security
Mail sent to an alias is forwarded to your real inbox, and you can reply from the alias so the other side never learns w...
AliasVault on Ubuntu 24.04
Security
AliasVault is an open source, end to end encrypted password manager combined with a private email alias service that you...
Apache SpamAssassin
Security
This image runs Apache SpamAssassin, the long established open source anti spam platform, fully configured and security ...
Apache Syncope on Ubuntu 24.04
Security
Apache Syncope is an open source identity management and identity governance platform.