Umbraco CMS - ASP.NET Content Management

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

## Umbraco CMS on AWS, ready on first boot

Umbraco is a mature open source content management system built on ASP.NET Core, used by editorial and marketing teams who want a friendly authoring experience on top of a .NET stack they already run. This image gives you a working Umbraco back office within minutes of launch, with no installer wizard to complete and no shared credentials to rotate.

## What is in the image

• Umbraco CMS 17.5.3 - the current patch of the Umbraco 17 long term support release, licensed MIT
• .NET 10 - Umbraco runs on the ASP.NET Core 10 runtime, a long term support release, installed from the operating system's own package archive, so it is patched on the normal distribution security stream rather than from a third party vendor feed
• Kestrel behind nginx - the application server is bound to loopback only and is never reachable from the network directly; nginx serves the public site on port 80 and the back office on port 443
• SQLite content database - the database is embedded in the image, so there is no separate database server to license, patch or operate. This suits single instance sites; teams that need a clustered or externally hosted database can repoint the connection string at Microsoft SQL Server
• Two dedicated data disks - one for the content database and cookie signing keys, one for the media library, both independently resizable and separate from the operating system disk

## A unique instance every time

Many community images ship a database that already contains an administrator account, which means every instance launched from that image shares one password. This image ships with no database at all. On first boot a one shot service creates the database from scratch and generates, per instance:

• a random Umbraco administrator password, written to a root only file
• a fresh ASP.NET Core Data Protection key ring, which signs and encrypts the back office authentication cookie. A shared key ring would let a cookie minted on one instance be accepted by another
• a self signed TLS certificate and key for the back office listener

None of these exist in the image, so two instances launched from the same AMI never share an administrator password, a session signing key or a TLS key.

## Security posture

• No default or documented login ships in the image, and the back office rejects an incorrect password with an explicit HTTP 401
• The ASP.NET Core application server listens on 127.0.0.1 only; nginx is the sole network listener
• Credentials are written to a file readable only by root
• The back office is served over HTTPS because its sign in flow requires a browser secure context; port 80 redirects back office paths to HTTPS and serves the public website
• An unauthenticated /healthz endpoint is served by nginx for load balancer probes, so a health check never needs a credential

## Working with AWS

• Attach an Application Load Balancer and an AWS Certificate Manager certificate to replace the self signed certificate with a trusted one for your own domain
• Grow the media disk with an EBS volume modification as the library grows, without touching the database disk
• Schedule AWS Backup snapshots of the two data volumes to protect content and media
• Monitor the instance with the standard Amazon CloudWatch instance metrics

## Get started

A marketing or editorial team that already works in .NET launches this image, reads the generated administrator password over SSH, signs in to the back office and starts modelling document types and publishing pages the same afternoon. Media uploads land on the dedicated media volume, the site is served by nginx, and cloudimg support is available for upgrade, tuning and configuration questions.

## Support

cloudimg provides 24/7 technical support by email and live chat, covering deployment, upgrades, configuration and operational questions for this image. We aim to respond within one business day. Umbraco itself is open source software licensed under the MIT licence; this listing is for the packaging, hardening and support that cloudimg provides around it.

cloudimg is not affiliated with, endorsed by or sponsored by Umbraco HQ. The Umbraco name and logo are trademarks of their respective owner and are used here only to identify the open source software included in this image. This image contains only the MIT licensed Umbraco CMS; Umbraco Cloud and Umbraco's commercial add on products are not included.