Availability and pricing

Cloud	Version	Software price	Last build
AWS Marketplace EC2 AMI · all commercial regions	7.0.2	$0.05/hr Recommended instance: t3.medium · 5-day free trial	2026-10-02	Listing ↗
Azure Marketplace VM image · plan payg-gen2 · Gen2	7.0.2	$0.028/vCPU/hr Recommended VM: Standard_D2s_v3	2026-10-02	Listing ↗

Software price only; cloud infrastructure is billed separately by the provider. Prices in USD.

Image facts

Base OS	Ubuntu 24.04 LTS
Hardening	CIS Level 1, Ubuntu 24.04 LTS (tailored)
License	GPL-2.0
Upstream	Jean-Philippe Lang / Redmine community
Machine-readable	product.json · catalog.json

What is Redmine

Redmine is a mature, flexible open-source project management and issue-tracking web application written in Ruby on Rails (Rails 7.2), served by the Puma application server behind an Nginx reverse proxy and backed by PostgreSQL. A single instance manages multiple projects and subprojects with per-project role-based access control, issue tracking with fully customizable trackers, statuses and workflows, Gantt charts and a calendar, time tracking, per-project wikis, forums and document management, news and file repositories, multiple-database SCM integration (Git, Subversion, Mercurial), email notifications, a REST API, LDAP-ready authentication, and multi-language support. Project data, issues, attachments and history persist in the bundled PostgreSQL database within your own AWS account - a self-hosted alternative to hosted project-tracking SaaS, with no per-seat fees. GPL-2.0 license, no vendor lock-in.

What the Lynxroute image adds

Security hardening:

Default admin password rotated to a unique random value at first boot (no admin/admin)
Per-instance PostgreSQL password and Rails secret generated at first boot
PostgreSQL bound to 127.0.0.1 only; the Puma application server listens on a localhost socket
Nginx TLS reverse proxy on 443; HTTP on 80 redirects to HTTPS
Certbot pre-installed - trusted HTTPS with Let's Encrypt in one command
UFW firewall - ports 22, 80, 443 only
fail2ban, AppArmor
CVE scan - every image is scanned for vulnerabilities before release

OS hardening (CIS Level 1):

CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown
auditd, SSH hardening, Kernel hardening, IMDSv2 enforced

Compliance artifacts:

SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json
CIS Conformance Report at /etc/lynxroute/cis-report.html
CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md

Deploy

Launch in one command

Credentials are generated at first boot and written to /root/redmine-credentials.txt.

AWS CLIAzure CLI

# subscribe once on the AWS Marketplace listing, then:
aws ec2 run-instances \
  --image-id resolve:ssm:/aws/service/marketplace/prod-vi2ddr5n6ubv4/latest \
  --instance-type t3.medium --key-name my-key --security-group-ids sg-xxxxxxxx

# accept the plan terms once, then:
az vm image terms accept --publisher lynxroute --offer redmine --plan payg-gen2
az vm create -g my-rg -n redmine --size Standard_D2s_v3 \
  --image lynxroute:redmine:payg-gen2:latest --admin-username azureuser --generate-ssh-keys

Release notes

Latest release

The most recent release with notes; the full release history is in product.json.

Redmine 7.0.2

AWS · 2026-10-02Azure · 2026-10-02

Redmine updated 7.0.1 -> 7.0.2, a maintenance release now on Rails 8.1.4. GPL-2.0 unchanged and no database migration is required
Security: fixes private issue subjects leaking through the REST API include=children option, private project names and role assignments leaking through group memberships, and a DOM-based XSS via clipboard HTML paste
Fixes a Ghostscript process left running when PDF thumbnail generation times out, a concurrency problem in project deletion, and issue creation failing when the default assignee is no longer assignable
Adds an administration page listing all webhooks, and speeds up icon rendering and large key/value custom field lists
Rebuilt on the current CIS Level 1 hardened Ubuntu 24.04 LTS base to pick up the latest Ubuntu security updates