TREK on Ubuntu 24.04

Why the cloudimg image

The cloudimg image is a complete deployment rather than a bare install: the planner runs as a managed service behind an nginx reverse proxy on the standard web port, with the application itself bound to loopback so the proxy is the only public listener, and with the websocket upgrade configured so live collaboration works from the first boot instead of failing quietly. Every secret is generated per virtual machine at first boot, never baked into the image: the at rest encryption key, the session signing secret and a one time administrator password written to a root only credentials file. The administrator account is created before the service ever accepts a connection, so nobody can reach a fresh instance and claim it. Mail, single sign on and image search credentials ship empty for you to supply. Because the software is licensed under the AGPL, the exact upstream source it was built from travels with the image, checksummed, alongside the licence and a written offer. A step by step deployment guide is paired with the image, and cloudimg support is available 24/7.