{
 "slug": "couchdb",
 "name": "Apache CouchDB",
 "tagline": "Document database with a native HTTP/JSON API and bidirectional replication",
 "category": "database",
 "use_cases": [
  "document-database",
  "offline-sync",
  "replication"
 ],
 "aliases": [
  "apache couchdb"
 ],
 "status": "live",
 "upstream": {
  "vendor": "The Apache Software Foundation",
  "url": "https://couchdb.apache.org",
  "license": "Apache-2.0",
  "license_url": "https://github.com/apache/couchdb/blob/main/LICENSE"
 },
 "image": {
  "os": "Ubuntu 24.04 LTS",
  "cis_level": 1,
  "ports": [
   6984
  ],
  "artifacts": [
   "/etc/lynxroute/sbom.json",
   "/etc/lynxroute/cis-report.html",
   "/usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
  ]
 },
 "clouds": {
  "aws": {
   "status": "restricted",
   "restricted_on": "2026-08-24"
  },
  "azure": {
   "status": "live",
   "version": "3.5.2",
   "last_build": "2026-06-25",
   "offer_id": "couchdb",
   "plan_id": "payg-gen2",
   "image_urn": "lynxroute:couchdb:payg-gen2:latest",
   "listing_url": "https://azuremarketplace.microsoft.com/en-us/marketplace/apps/lynxroute.couchdb?tab=Overview",
   "recommended_vm_size": "Standard_D2s_v3",
   "price_usd_per_vcpu_hour": 0.028,
   "unit": "vcpu-hour"
  },
  "alicloud": {
   "status": "not_offered"
  }
 },
 "urls": {
  "page": "https://lynxroute.com/products/couchdb/",
  "json": "https://lynxroute.com/products/couchdb/product.json"
 },
 "release_notes": [
  {
   "version": "3.5.2",
   "title": "Apache CouchDB 3.5.2 - Initial release (June 2026)",
   "notes": "* Apache CouchDB 3.5.2 on Ubuntu 24.04 LTS\n* CIS Level 1 hardening applied (ansible-lockdown/UBUNTU24-CIS)\n* CVE-scanned before every release\n* Random admin password set at first launch - no admin party, no default credentials\n* Native TLS: HTTPS on port 6984 with a self-signed certificate (replaceable)\n* Anonymous access refused by default (admin-only databases); plain HTTP firewalled to the host\n* Single-node setup with system databases created automatically; Fauxton web UI at /_utils\n* UFW firewall pre-configured (port 6984 and SSH 22 only)\n* fail2ban, auditd, AppArmor pre-configured\n* SBOM (CycloneDX 1.6) at /etc/lynxroute/sbom.json\n* CIS Conformance Report (OpenSCAP) at /etc/lynxroute/cis-report.html\n* IMDSv2 enforced\n",
   "source": "backfill-aws-listing",
   "live": {
    "azure": "2026-06-25"
   }
  }
 ],
 "release_history": [
  {
   "version": "3.5.2",
   "azure": "2026-06-25"
  }
 ],
 "deploy": {
  "azure_cli": "# accept the plan terms once, then:\naz vm image terms accept --publisher lynxroute --offer couchdb --plan payg-gen2\naz vm create -g my-rg -n couchdb --size Standard_D2s_v3 \\\n  --image lynxroute:couchdb:payg-gen2:latest --admin-username azureuser --generate-ssh-keys"
 },
 "description": {
  "what_is": "Apache CouchDB is an open-source, document-oriented NoSQL database written in Erlang/OTP that stores schema-free JSON documents and exposes everything over a native HTTP/JSON REST API. It uses an append-only, crash-resilient storage engine with MVCC (no read locking), secondary indexes through JavaScript MapReduce views and the Mango declarative query language, a real-time changes feed, document attachments, and the built-in Fauxton web administration UI. Its standout feature is incremental, bidirectional replication: CouchDB syncs reliably between servers and with offline-first clients (PouchDB in the browser, Couchbase Lite on mobile), making it a natural fit for edge, mobile, and multi-region data. This image runs CouchDB in single-node mode with the system databases created automatically. Apache-2.0 license, self-hosted entirely in your own AWS account - no vendor lock-in.",
  "image_adds": "Security hardening:\n* Random administrator password generated at first launch - no \"admin party\", no default credentials\n* Native TLS: HTTPS on port 6984 with a self-signed certificate generated at first launch (replaceable with your own CA certificate)\n* Anonymous access refused by default (databases are admin-only until you grant access)\n* Plain HTTP (5984) bound to the host and blocked by the firewall - only HTTPS 6984 is exposed\n* UFW firewall - only port 6984 and SSH on 22 are open\n* fail2ban, AppArmor\n* CVE scan - every image is scanned for vulnerabilities before release\n\nOS hardening (CIS Level 1):\n* CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown\n* auditd, SSH hardening, Kernel hardening, IMDSv2 enforced\n\nCompliance artifacts:\n* SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json\n* CIS Conformance Report at /etc/lynxroute/cis-report.html\n* CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
 },
 "generated_at": "2026-10-31T09:36:34Z"
}