{
 "slug": "appwrite",
 "name": "Appwrite",
 "tagline": "Backend-as-a-service with auth, databases, storage, functions and messaging",
 "category": "developer-platform",
 "use_cases": [
  "backend-as-a-service",
  "mobile-backend",
  "authentication"
 ],
 "aliases": [],
 "status": "live",
 "upstream": {
  "vendor": "Appwrite",
  "url": "https://appwrite.io",
  "license": "BSD-3-Clause",
  "license_url": "https://github.com/appwrite/appwrite/blob/main/LICENSE"
 },
 "image": {
  "os": "Ubuntu 24.04 LTS",
  "cis_level": 1,
  "ports": [
   443
  ],
  "artifacts": [
   "/etc/lynxroute/sbom.json",
   "/etc/lynxroute/cis-report.html",
   "/usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
  ]
 },
 "clouds": {
  "aws": {
   "status": "live",
   "version": "2.6.2",
   "last_build": "2026-10-25",
   "entity_id": "prod-obx7b34op6nwe",
   "ami_alias": "/aws/service/marketplace/prod-obx7b34op6nwe/latest",
   "listing_url": "https://aws.amazon.com/marketplace/pp/prodview-7eo26yqn5fioc",
   "recommended_instance_type": "m6i.xlarge",
   "price_usd_per_hour": 0.05,
   "free_trial_days": 5,
   "unit": "instance-hour"
  },
  "azure": {
   "status": "live",
   "version": "1.9.6",
   "last_build": "2026-07-27",
   "offer_id": "appwrite",
   "plan_id": "payg-gen2",
   "image_urn": "lynxroute:appwrite:payg-gen2:latest",
   "listing_url": "https://azuremarketplace.microsoft.com/en-us/marketplace/apps/lynxroute.appwrite?tab=Overview",
   "recommended_vm_size": "Standard_D4s_v3",
   "price_usd_per_vcpu_hour": 0.028,
   "unit": "vcpu-hour"
  },
  "alicloud": {
   "status": "not_offered"
  }
 },
 "urls": {
  "page": "https://lynxroute.com/products/appwrite/",
  "json": "https://lynxroute.com/products/appwrite/product.json"
 },
 "release_notes": [
  {
   "version": "2.6.2",
   "title": "Appwrite 2.6.2",
   "notes": "* Appwrite updated 1.9.6 -> 2.6.2, the second major generation of the platform. BSD-3-Clause unchanged\n* New Console, now served at the site root. PostgreSQL is the database, with ClickHouse for usage metrics and function execution logs\n* New since 1.9: S3-compatible Storage API, passkeys, interval schedules for functions, image metadata stripping and automatic crop focus for previews\n* Security: the 2.6.2 hardening of API keys, sessions, realtime, GraphQL, storage and outbound requests; patched Brotli and PHP 8.5.12 runtime\n* A self-hosted instance holds one organization; create projects inside it and invite teammates\n* Certbot pre-installed - enable HTTPS with one command: sudo certbot --nginx -d yourdomain.com\n* Rebuilt on the current CIS Level 1 hardened Ubuntu 24.04 LTS base for the latest Ubuntu security updates\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-10-25"
   }
  },
  {
   "version": "1.9.6",
   "title": "Appwrite v1.9.6",
   "notes": "* Re-release of Appwrite 1.9.6. The application version is unchanged; this build refreshes the underlying operating system image\n* Certbot pre-installed - enable HTTPS with one command: sudo certbot --nginx -d yourdomain.com\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base, picking up every operating-system security update published since the previous build\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-09-04",
    "azure": "2026-07-27"
   }
  },
  {
   "version": "1.9.6",
   "title": "Appwrite 1.9.6",
   "notes": "* Appwrite 1.9.6 - open-source Backend-as-a-Service: auth, databases, storage, functions, and messaging over a REST/GraphQL/Realtime API (patch update from 1.9.5)\n* Certbot pre-installed - enable a trusted HTTPS certificate with one command: sudo certbot --nginx -d yourdomain.com\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-09-04",
    "azure": "2026-07-27"
   }
  },
  {
   "version": "1.9.5",
   "title": "Appwrite 1.9.5",
   "notes": "* Appwrite 1.9.5 - open-source Backend-as-a-Service: auth, databases, storage, functions, and messaging over a REST/GraphQL/Realtime API (patch update from 1.9.0)\n* Certbot pre-installed - enable a trusted HTTPS certificate with one command: sudo certbot --nginx -d yourdomain.com\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-06-30",
    "azure": "2026-07-11"
   }
  },
  {
   "version": "1.9.0",
   "title": "Appwrite 1.9.0",
   "notes": "* Appwrite 1.9.0 on Ubuntu 24.04 LTS\n* CIS Level 1 hardening applied (ansible-lockdown/UBUNTU24-CIS)\n* CVE-scanned before every release\n* Unique data-encryption key and service secrets generated at first boot\n* MongoDB and Redis bound to the internal container network only\n* Self-signed TLS on 443; first registered Console user becomes the root admin\n* UFW firewall pre-configured (ports 443, 22 only)\n* fail2ban, auditd, AppArmor pre-configured\n* SBOM (CycloneDX 1.6) at /etc/lynxroute/sbom.json\n* CIS Conformance Report (OpenSCAP) at /etc/lynxroute/cis-report.html\n* IMDSv2 enforced\n",
   "source": "backfill-aws-api",
   "live": {
    "aws": "2026-06-09",
    "azure": "2026-06-29"
   }
  }
 ],
 "release_history": [
  {
   "version": "2.6.2",
   "aws": "2026-10-25"
  },
  {
   "version": "1.9.6",
   "aws": "2026-09-04",
   "azure": "2026-07-27"
  },
  {
   "version": "1.9.5",
   "aws": "2026-06-30",
   "azure": "2026-07-11"
  },
  {
   "version": "1.9.0",
   "aws": "2026-06-09",
   "azure": "2026-06-29"
  }
 ],
 "deploy": {
  "aws_cli": "# subscribe once on the AWS Marketplace listing, then:\naws ec2 run-instances \\\n  --image-id resolve:ssm:/aws/service/marketplace/prod-obx7b34op6nwe/latest \\\n  --instance-type m6i.xlarge --key-name my-key --security-group-ids sg-xxxxxxxx",
  "azure_cli": "# accept the plan terms once, then:\naz vm image terms accept --publisher lynxroute --offer appwrite --plan payg-gen2\naz vm create -g my-rg -n appwrite --size Standard_D4s_v3 \\\n  --image lynxroute:appwrite:payg-gen2:latest --admin-username azureuser --generate-ssh-keys"
 },
 "description": {
  "what_is": "Appwrite is an open-source Backend-as-a-Service (BaaS) platform that gives developers a production backend without writing one. Its PHP/Swoole API server runs as a Docker Compose stack and exposes authentication (email/password, OAuth, phone, magic URL), databases (collections and documents), file storage, serverless functions in multiple runtimes, scheduled tasks, messaging, and realtime subscriptions over REST and GraphQL APIs plus a web Console. Official SDKs cover web, Flutter, Apple, Android, and server languages (Node, Python, PHP, and more). Application data, sessions, and queues persist in MongoDB and Redis, both reachable only on the internal container network. Licensed BSD-3-Clause with no vendor lock-in, Appwrite lets you self-host a Firebase or Supabase-style backend entirely inside your own AWS account - user data, auth flows, and function execution never leave your VPC.",
  "image_adds": "Security hardening:\n* Unique data-encryption key and service secrets generated at first boot - no shipped \"your-secret-key\" defaults\n* MongoDB and Redis bound to the internal container network only - never published to the host or the public interface\n* Self-signed TLS served on 443 by an nginx perimeter at first boot; the application speaks plain HTTP only inside the host\n* No admin baked into the image - the first user you register in the Console becomes the root admin, and further Console sign-ups close automatically\n* A loading page is shown while the stack initialises, so the first visit never lands on a broken or error screen\n* UFW firewall pre-configured (TCP 443 and SSH 22 only)\n* fail2ban, auditd, and AppArmor pre-configured\n* CVE scan - every image is scanned for vulnerabilities before release\n\nOS hardening (CIS Level 1):\n* CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown\n* auditd, SSH hardening, kernel hardening, IMDSv2 enforced\n\nCompliance artifacts:\n* SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json\n* CIS Conformance Report at /etc/lynxroute/cis-report.html\n* CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md\n\nBSD-3-Clause license - fully auditable, no vendor lock-in."
 },
 "generated_at": "2026-10-31T09:36:34Z"
}