Base
Hardened build
minimal ports, security patches applied at build time
Traefik with CrowdSec Security Engine on Ubuntu 24.04 LTS
Azure
Security
edge reverse proxy with a collaborative intrusion prevention engine built in
Overview
Traefik with CrowdSec Security Engine is an edge appliance that terminates inbound HTTP and HTTPS traffic, routes it to your backend services, and defends it at the same time. Traefik handles routing, load balancing and automatic certificate issuance, while the CrowdSec Security Engine reads Traefik's own access log, recognises probing, crawling and brute force patterns through its behavioural scenarios, and records a ban decision. A bouncer middleware inside Traefik enforces those decisions on the very next request, so an attacking source is refused at the edge rather than reaching your application. Detection and enforcement run entirely on the instance against local decisions, with no external service required.
Why the cloudimg image
The cloudimg image ships the loop already wired and proven, not two packages left for you to integrate: Traefik's access log is the engine's input, the CrowdSec collection that parses it is installed, and the bouncer middleware is vendored on disk so it loads without reaching the internet. Every secret is unique to your instance, minted on first boot: the engine's local API credential, the bouncer API key, and the dashboard password. The service refuses to start at all if any placeholder credential is still in effect, so an image can never serve traffic with a shared secret. Certificate storage and access logs sit on a dedicated data volume, the dashboard is authenticated and never exposed openly, and the paired deployment guide is verified against a running instance. Backed by 24/7 cloudimg support.
Common uses
- Publish internal services behind one hardened entry point
- Block scanners and brute force traffic before it reaches an application
- Terminate TLS with automatic certificates for multiple backends
See it running
Real screenshots taken while testing this image against its deployment guide.
More in Security
2F
2FAuth on Ubuntu 24.04 LTS
Security
2FAuth is a free, open source, self hosted web app for managing your two factor authentication accounts.
Ad
acme-dns on Ubuntu 24.04 LTS
Security
The image installs acme-dns 2.0.2 from the official upstream release (github.com/acme-dns/acme-dns, the project formerly...
addy.io on Ubuntu 24.04
Security
Mail sent to an alias is forwarded to your real inbox, and you can reply from the alias so the other side never learns w...
AliasVault on Ubuntu 24.04
Security
AliasVault is an open source, end to end encrypted password manager combined with a private email alias service that you...
Apache SpamAssassin
Security
This image runs Apache SpamAssassin, the long established open source anti spam platform, fully configured and security ...
Apache Syncope on Ubuntu 24.04
Security
Apache Syncope is an open source identity management and identity governance platform.