SecureAnyCloud
Deployment guide

identity secrets

Overview

This page is the entry point for the SecureAnyCloud Hardened Authentik, Vaultwarden & Identity, Secrets and PKI AMIs AWS Marketplace listing. The listing is a single product that offers several products and releases as separate software versions. Subscribe once, and then choose the version you want from the Software version list at launch. Open its guide below for the full setup and connection walk-through.

What you get with every version:

  • A fully patched base. SecureAnyCloud builds every image on a fully patched base, with the latest security updates applied at build time.
  • Secure by default. Administrator passwords, database credentials and application secrets are generated uniquely on the first boot of each instance, so no default login exists and no two instances share a secret.

Pricing is metered hourly per EC2 instance type and is the same for every version in this listing. The recommended instance type is m5.large.

How to pick a version

  • Open the listing on AWS Marketplace and choose View purchase options, then Subscribe. One subscription covers every product and release in the listing, and the free trial starts with it.
  • When the subscription is active, choose Launch your software.
  • Choose One-click launch from AWS Marketplace, or choose Launch from EC2 Console for full control. In Version, choose the product and release you want. Each version is a separate software version, named <product> <release> on <operating system> - <date>, for example acme-dns 2.0.2 on Ubuntu 24.04 - YYYY-MM-DD. The date is when that version was added to the listing.
  • Choose your Region, an instance type (m5.large is recommended), your EC2 key pair and a security group that opens the ports in the product's guide. Then choose Launch.
  • After launch, open the product's guide below for first login.

You can run several products from the same subscription. Launch one instance per product, each from its own software version.

Versions in this listing, newest release first:

  • acme-dns: 2.0.2 on Ubuntu 24.04
  • addy.io: 1.7.3 on Ubuntu 24.04
  • AliasVault: 0.31.1 on Ubuntu 24.04
  • Apache Directory Server: 2.0.0.AM27 on Ubuntu 24.04
  • Authelia: 4.39.28 on Ubuntu 24.04
  • Authelia with LLDAP: 4.39.28 on Ubuntu 24.04
  • Authgear: 2026-10-23.0 on Ubuntu 24.04
  • Casdoor: 4.24.0 on Ubuntu 24.04
  • Certimate: 0.4.36 on Ubuntu 24.04
  • Cryptgeon: 2.9.3 on Ubuntu 24.04
  • Databunker: 0.8.36 on Ubuntu 24.04
  • Enclosed: 1.16.1 on Ubuntu 24.04
  • FreeIPA Identity Management: 4.13.4 on AlmaLinux 9
  • Gravitee Access Management: 4.13.2 on Ubuntu 24.04
  • Hanko: 3.1.2 on Ubuntu 24.04
  • Headwind MDM: 5.41.1 on Ubuntu 24.04
  • Hockeypuck OpenPGP Keyserver: 2.4.1 on Ubuntu 24.04
  • Keycloak: 26.8.1 on Ubuntu 24.04
  • Keycloak with OpenLDAP: 26.8.1 on Ubuntu 24.04
  • LDAP Account Manager: 9.7 on Ubuntu 24.04
  • LemonLDAP::NG: 2.23.4 on Ubuntu 24.04
  • LTB Self Service Password: 1.8.2 on Ubuntu 24.04
  • MaxKey: 4.2.0 on Ubuntu 24.04
  • multiOTP: 5.10.2.2 on Ubuntu 24.04
  • Onetime Secret: 0.26.19 on Ubuntu 24.04
  • OPAL: 0.9.9 on Ubuntu 24.04
  • OpenBao: 2.7.2 on Ubuntu 24.04
  • OpenFGA: 1.22.1 on Ubuntu 24.04
  • OTS: 1.23.1 on Ubuntu 24.04
  • Password Pusher: 2.17.1 on Ubuntu 24.04
  • Pocket ID: 2.19.2 on Ubuntu 24.04
  • privacyIDEA: 3.14 on Ubuntu 24.04
  • PrivateBin: 2.1.0 on Ubuntu 24.04
  • Rauthy: 0.37.2 on Ubuntu 24.04
  • Vaultwarden: 1.37.4 on Ubuntu 24.04

Security model

Every version in this listing follows the same model:

  • No default login. Administrator passwords, database passwords and application secrets are generated on the first boot of each instance and written to a root-only file. No two instances share a secret.
  • Only the documented ports. Each guide lists the ports that the product needs. Open only those in your security group.
  • Backend services on localhost. Databases and caches listen on 127.0.0.1 only. Never open database ports (3306, 5432, 6379) to the internet.
  • Patched base. The operating system is fully patched when the image is built.
  • HTTPS on first boot for AliasVault 0.31.1 on Ubuntu 24.04, Authelia 4.39.28 on Ubuntu 24.04, Authelia with LLDAP 4.39.28 on Ubuntu 24.04, Authgear 2026-10-23.0 on Ubuntu 24.04, Casdoor 4.24.0 on Ubuntu 24.04, Certimate 0.4.36 on Ubuntu 24.04, Cryptgeon 2.9.3 on Ubuntu 24.04, Databunker 0.8.36 on Ubuntu 24.04, Enclosed 1.16.1 on Ubuntu 24.04, FreeIPA Identity Management 4.13.4 on AlmaLinux 9, Gravitee Access Management 4.13.2 on Ubuntu 24.04, Hanko 3.1.2 on Ubuntu 24.04, Headwind MDM 5.41.1 on Ubuntu 24.04, Hockeypuck OpenPGP Keyserver 2.4.1 on Ubuntu 24.04, Keycloak 26.8.1 on Ubuntu 24.04, Keycloak with OpenLDAP 26.8.1 on Ubuntu 24.04, LDAP Account Manager 9.7 on Ubuntu 24.04, LTB Self Service Password 1.8.2 on Ubuntu 24.04, LemonLDAP::NG 2.23.4 on Ubuntu 24.04, MaxKey 4.2.0 on Ubuntu 24.04, OPAL 0.9.9 on Ubuntu 24.04, OTS 1.23.1 on Ubuntu 24.04, Onetime Secret 0.26.19 on Ubuntu 24.04, OpenBao 2.7.2 on Ubuntu 24.04, OpenFGA 1.22.1 on Ubuntu 24.04, Password Pusher 2.17.1 on Ubuntu 24.04, Pocket ID 2.19.2 on Ubuntu 24.04, PrivateBin 2.1.0 on Ubuntu 24.04, Rauthy 0.37.2 on Ubuntu 24.04, Vaultwarden 1.37.4 on Ubuntu 24.04, acme-dns 2.0.2 on Ubuntu 24.04, addy.io 1.7.3 on Ubuntu 24.04, multiOTP 5.10.2.2 on Ubuntu 24.04 and privacyIDEA 3.14 on Ubuntu 24.04. These versions serve HTTPS with a per-instance certificate from first boot. The other versions serve HTTP, and their guide shows how to add a certificate on the instance or behind an Application Load Balancer with AWS Certificate Manager.
  • TLS on first boot for Apache Directory Server 2.0.0.AM27 on Ubuntu 24.04. This version encrypts client connections with its own protocol over TLS (not HTTPS), using a per-instance certificate from first boot. Its guide gives the port and explains how to trust the certificate.

Choose your product

Product Software version OS Guide

acme-dns acme-dns 2.0.2 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

addy.io addy.io 1.7.3 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

AliasVault AliasVault 0.31.1 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Apache Directory Server Apache Directory Server 2.0.0.AM27 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Authelia Authelia 4.39.28 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Authelia with LLDAP Authelia with LLDAP 4.39.28 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Authgear Authgear 2026-10-23.0 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Casdoor Casdoor 4.24.0 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Certimate Certimate 0.4.36 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Cryptgeon Cryptgeon 2.9.3 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Databunker Databunker 0.8.36 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Enclosed Enclosed 1.16.1 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

FreeIPA Identity Management FreeIPA Identity Management 4.13.4 on AlmaLinux 9 AlmaLinux 9 Open guide →

Gravitee Access Management Gravitee Access Management 4.13.2 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Hanko Hanko 3.1.2 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Headwind MDM Headwind MDM 5.41.1 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Hockeypuck OpenPGP Keyserver Hockeypuck OpenPGP Keyserver 2.4.1 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Keycloak Keycloak 26.8.1 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Keycloak with OpenLDAP Keycloak with OpenLDAP 26.8.1 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

LDAP Account Manager LDAP Account Manager 9.7 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

LemonLDAP::NG LemonLDAP::NG 2.23.4 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

LTB Self Service Password LTB Self Service Password 1.8.2 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

MaxKey MaxKey 4.2.0 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

multiOTP multiOTP 5.10.2.2 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Onetime Secret Onetime Secret 0.26.19 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

OPAL OPAL 0.9.9 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

OpenBao OpenBao 2.7.2 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

OpenFGA OpenFGA 1.22.1 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

OTS OTS 1.23.1 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Password Pusher Password Pusher 2.17.1 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Pocket ID Pocket ID 2.19.2 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

privacyIDEA privacyIDEA 3.14 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

PrivateBin PrivateBin 2.1.0 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Rauthy Rauthy 0.37.2 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Vaultwarden Vaultwarden 1.37.4 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

How to tell which version you launched

The version you chose is shown on the instance's launch record in the EC2 console (AMI name and description) and in your AWS Marketplace subscription.

On the instance itself, the login message after SSH names the product and its credentials file. Open the matching guide above for the rest of the walk-through.

Support

SecureAnyCloud provides 24/7 support for every version in this listing via the AWS Marketplace support channel. Raise a ticket through the Marketplace console or email sales@secureanycloud.com.

All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.

Deploy on AWS

Launch Hardened Authentik, Vaultwarden & Identity, Secrets and PKI AMIs with 24/7 support from SecureAnyCloud.

View this image

Need Help?

Our support team is available 24/7.

sales@secureanycloud.com

Deploy on AWS