Catalog / Search

Meilisearch

Typo-tolerant search engine with instant results and a simple REST API

CIS Level 1 hardened Ubuntu 24.04 LTS image by Lynxroute · unique credentials at first boot · CVE-scanned · SBOM and CIS report inside

AWS Marketplace1.55.0↗ Azure Marketplace1.54.3↗
Availability and pricing
CloudVersionSoftware priceLast build
AWS Marketplace
EC2 AMI · all commercial regions
1.55.0$0.05/hr
Recommended instance: t3.medium · 5-day free trial
2026-10-23Listing ↗
Azure Marketplace
VM image · plan payg-gen2 · Gen2
1.54.3$0.028/vCPU/hr
Recommended VM: Standard_D2s_v3
2026-10-02Listing ↗

Software price only; cloud infrastructure is billed separately by the provider. Prices in USD.

Image facts
Base OSUbuntu 24.04 LTS
HardeningCIS Level 1, Ubuntu 24.04 LTS (tailored)
LicenseMIT
UpstreamMeili SAS
Machine-readableproduct.json · catalog.json
What is Meilisearch

Meilisearch is a fast, typo-tolerant open-source search engine written in Rust and shipped as a single statically linked binary, purpose-built for the search-as-a-feature use case. It serves a REST API over indexed documents with sub-50ms query latency and supports prefix search, typo tolerance, faceting and filtering, sorting, geo search, synonyms, stop words, and semantic and hybrid search via vector embeddings. Documents and indexes are persisted to an embedded LMDB store on the local filesystem. Applications integrate through official client SDKs (JavaScript, Python, PHP, Ruby, Go, Rust, Java, .NET and more), authenticating with the master key or scoped API keys minted from it. This image runs the single-node Community Edition, which is fully MIT licensed - a self-hosted search backend for any application, with no per-query fees and no vendor lock-in.

What the Lynxroute image adds

Security hardening:

  • Strong random master key generated per instance at first boot (production mode - the API rejects unauthenticated calls)
  • Engine bound to 127.0.0.1 only; nginx terminates TLS on 443 and reverse-proxies to it; HTTP redirects to HTTPS
  • certbot and the nginx plugin pre-installed - enable a Let's Encrypt certificate with one command
  • Anonymous analytics disabled
  • UFW firewall - ports 80 and 443 only; SSH on 22
  • fail2ban, AppArmor
  • CVE scan - every image is scanned for vulnerabilities before release

OS hardening (CIS Level 1):

  • CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown
  • auditd, SSH hardening, Kernel hardening, IMDSv2 enforced

Compliance artifacts:

  • SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json
  • CIS Conformance Report at /etc/lynxroute/cis-report.html
  • CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md
Deploy

Launch in one command

Credentials are generated at first boot and written to /root/meilisearch-credentials.txt.

# subscribe once on the AWS Marketplace listing, then:
aws ec2 run-instances \
  --image-id resolve:ssm:/aws/service/marketplace/prod-qikf334yguj6m/latest \
  --instance-type t3.medium --key-name my-key --security-group-ids sg-xxxxxxxx
# accept the plan terms once, then:
az vm image terms accept --publisher lynxroute --offer meilisearch --plan payg-gen2
az vm create -g my-rg -n meilisearch --size Standard_D2s_v3 \
  --image lynxroute:meilisearch:payg-gen2:latest --admin-username azureuser --generate-ssh-keys
Release notes

Latest release

The most recent release with notes; the full release history is in product.json.

Meilisearch 1.55.0

AWS · 2026-10-23
  • Meilisearch Community Edition updated 1.54.3 -> 1.55.0. MIT unchanged
  • Fixes a search panic on raw Unicode input; showPerformanceDetails now reports facet timing
  • A binaryQuantization value of null is now rejected instead of silently corrupting embeddings
  • Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base, picking up every operating-system security update published since the previous build