Catalog / Collaboration & files

Nextcloud

File sync, sharing and collaboration suite for teams

CIS Level 1 hardened Ubuntu 24.04 LTS image by Lynxroute · unique credentials at first boot · CVE-scanned · SBOM and CIS report inside

AWS Marketplace35.0.2↗ Azure Marketplace35.0.2↗

Availability and pricing

Cloud	Version	Software price	Last build
AWS Marketplace EC2 AMI · all commercial regions	35.0.2	$0.05/hr Recommended instance: t3.medium · 5-day free trial	2026-10-25	Listing ↗
Azure Marketplace VM image · plan payg-gen2 · Gen2	35.0.2	$0.028/vCPU/hr Recommended VM: Standard_D4s_v3	2026-10-24	Listing ↗

Software price only; cloud infrastructure is billed separately by the provider. Prices in USD.

Image facts

Base OS	Ubuntu 24.04 LTS
Hardening	CIS Level 1, Ubuntu 24.04 LTS (tailored)
License	AGPL-3.0
Upstream	Nextcloud GmbH
Machine-readable	product.json · catalog.json

What is Nextcloud

Nextcloud is the leading open-source self-hosted file sync, share and collaboration platform - a PHP 8 web application served by Nginx with PHP-FPM and MariaDB, backed by Redis for session and file-locking caches. The bundled feature set covers file sync via desktop and mobile apps, end-to-end and server-side encryption, shared links and password-protected drops, calendar (CalDAV), contacts (CardDAV), email (Mail), notes, deck (project management), and Nextcloud Talk video conferencing - plus 100+ optional apps from the community store. A drop-in self-hosted alternative to Google Drive, Dropbox and Microsoft 365 for GDPR-sensitive teams and regulated industries. AGPL-3.0 license - no per-user fees, no vendor lock-in, all data inside your tenant.

What the Lynxroute image adds

Security hardening:

Admin credentials generated at first boot
Certbot pre-installed - HTTPS with Let's Encrypt in one command
MariaDB database accessible from localhost only
Redis unix socket
UFW firewall - ports 22, 80, 443 only
fail2ban, AppArmor

OS hardening (CIS Level 1):

CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown
auditd, SSH hardening, Kernel hardening, IMDSv2 enforced

Compliance artifacts:

SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json
CIS Conformance Report at /etc/lynxroute/cis-report.html
CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md

Deploy

Launch in one command

Credentials are generated at first boot and written to /root/nextcloud-credentials.txt.

AWS CLIAzure CLI

# subscribe once on the AWS Marketplace listing, then:
aws ec2 run-instances \
  --image-id resolve:ssm:/aws/service/marketplace/prod-bxsofmslugqtc/latest \
  --instance-type t3.medium --key-name my-key --security-group-ids sg-xxxxxxxx

# accept the plan terms once, then:
az vm image terms accept --publisher lynxroute --offer nextcloud --plan payg-gen2
az vm create -g my-rg -n nextcloud --size Standard_D4s_v3 \
  --image lynxroute:nextcloud:payg-gen2:latest --admin-username azureuser --generate-ssh-keys

Release notes

Latest release

The most recent release with notes; the full release history is in product.json.

Nextcloud 35.0.2

AWS · 2026-10-25Azure · 2026-10-24

Nextcloud Server updated 34.0.5 -> 35.0.2, a major release. AGPL-3.0 unchanged
New instances deploy 35.0.2 directly on PHP 8.3 and MariaDB 10.11, both meeting the raised Nextcloud 35 minimums
Upgrading an existing 34.x instance: use the built-in updater or occ upgrade; skipping a major version is not supported
Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base, picking up every operating-system security update published since the previous build, including the PHP2Shell fix (USN-8948-1)