Base
Hardened build
minimal ports, security patches applied at build time
Wiredoor Ingress as a Service on Ubuntu 24.04
Azure
Networking
Wiredoor, self hosted ingress as a service: publish services from private networks to the internet over WireGuard tunnels, no inbound firewall rule required.
Overview
Wiredoor is an open source ingress as a service platform. It solves the problem of reaching a service that has no public address, an application on a home lab, a machine behind carrier grade NAT, a Kubernetes cluster with no load balancer, an IoT gateway on a customer site. A lightweight client on the private machine dials outbound to the Wiredoor server over an encrypted WireGuard tunnel, and Wiredoor's built in reverse proxy then publishes that service on a public domain or path with TLS, access control by IP range, optional OAuth2 protection and access logs.
Because the tunnel is established outbound, nothing inbound is ever opened on the private network, and both HTTP services and raw TCP services can be exposed through the same server.
Why the cloudimg image
The cloudimg image runs the upstream release as its official container stack pinned by digest, so the version never drifts under you. It ships genuinely closed: the image contains no configuration file, no container and an empty data volume, so no WireGuard server key, no token signing secret, no TLS key and no administrator credential exist in it at all. Every one of those is minted on the first boot of your own instance and the administrator password is written to a root only file, and the externally reachable service is held behind a bootstrap gate until that has happened, so nothing answers a request before the instance has its own secrets. WireGuard module loading and IP forwarding are made persistent so tunnels survive a reboot, and a bundled checker proves the generated credential authenticates while anonymous and forged requests are refused. Paired with a tested deploy guide and backed by 24/7 cloudimg support.
Common uses
- Expose a service behind NAT or a home lab to the internet
- Give a private Kubernetes or Docker environment public ingress
- Reach on site gateways and IoT estates without inbound firewall rules
See it running
Real screenshots taken while testing this image against its deployment guide.
More in Networking
3S
3proxy - Secure HTTP, HTTPS and SOCKS Proxy
Networking
The image builds the official 3proxy binary (pinned at build from the upstream release) and runs it under systemd as the...
Ap
accel-ppp - Remote Access VPN Server
Networking
The image builds accel-ppp 1.14.0 from the upstream source tag (commit 048d31cb, dated 25 January 2026), verified agains...
AdGuard Home - Network-wide Ad Blocking DNS
Networking
This image runs AdGuard Home, the open source network-wide DNS server that blocks ads, trackers and malicious domains fo...
Aw
Anubis Web AI Firewall - Block AI Scraper Bots
Networking
The image installs the latest stable Anubis release, resolved at build time from the official GitHub release package and...
Apache Guacamole
Networking
This image runs Apache Guacamole, the open source clientless remote desktop gateway.
Apache ShenYu
Networking
This image runs Apache ShenYu, the high performance, reactive open source API gateway built on Java and Spring WebFlux.