{
 "slug": "redmine",
 "name": "Redmine",
 "tagline": "Project management and issue tracker with wikis, Gantt and time tracking",
 "category": "business-apps",
 "use_cases": [
  "issue-tracking",
  "project-management",
  "wiki"
 ],
 "aliases": [],
 "status": "live",
 "upstream": {
  "vendor": "Jean-Philippe Lang / Redmine community",
  "url": "https://www.redmine.org",
  "license": "GPL-2.0",
  "license_url": "https://raw.githubusercontent.com/redmine/redmine/master/doc/COPYING"
 },
 "image": {
  "os": "Ubuntu 24.04 LTS",
  "cis_level": 1,
  "ports": [
   80,
   443
  ],
  "artifacts": [
   "/etc/lynxroute/sbom.json",
   "/etc/lynxroute/cis-report.html",
   "/usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
  ]
 },
 "clouds": {
  "aws": {
   "status": "live",
   "version": "7.0.2",
   "last_build": "2026-10-02",
   "entity_id": "prod-vi2ddr5n6ubv4",
   "ami_alias": "/aws/service/marketplace/prod-vi2ddr5n6ubv4/latest",
   "listing_url": "https://aws.amazon.com/marketplace/pp/prodview-gvepablupryfw",
   "recommended_instance_type": "t3.medium",
   "price_usd_per_hour": 0.05,
   "free_trial_days": 5,
   "unit": "instance-hour"
  },
  "azure": {
   "status": "live",
   "version": "7.0.2",
   "last_build": "2026-10-02",
   "offer_id": "redmine",
   "plan_id": "payg-gen2",
   "image_urn": "lynxroute:redmine:payg-gen2:latest",
   "listing_url": "https://azuremarketplace.microsoft.com/en-us/marketplace/apps/lynxroute.redmine?tab=Overview",
   "recommended_vm_size": "Standard_D2s_v3",
   "price_usd_per_vcpu_hour": 0.028,
   "unit": "vcpu-hour"
  },
  "alicloud": {
   "status": "not_offered"
  }
 },
 "urls": {
  "page": "https://lynxroute.com/products/redmine/",
  "json": "https://lynxroute.com/products/redmine/product.json"
 },
 "release_notes": [
  {
   "version": "7.0.2",
   "title": "Redmine 7.0.2",
   "notes": "* Redmine updated 7.0.1 -> 7.0.2, a maintenance release now on Rails 8.1.4. GPL-2.0 unchanged and no database migration is required\n* Security: fixes private issue subjects leaking through the REST API include=children option, private project names and role assignments leaking through group memberships, and a DOM-based XSS via clipboard HTML paste\n* Fixes a Ghostscript process left running when PDF thumbnail generation times out, a concurrency problem in project deletion, and issue creation failing when the default assignee is no longer assignable\n* Adds an administration page listing all webhooks, and speeds up icon rendering and large key/value custom field lists\n* Rebuilt on the current CIS Level 1 hardened Ubuntu 24.04 LTS base to pick up the latest Ubuntu security updates\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-10-02",
    "azure": "2026-10-02"
   }
  },
  {
   "version": "7.0.1",
   "title": "Redmine 7.0.1",
   "notes": "* Redmine updated to 7.0.1 (from 7.0.0) - maintenance release on the Rails 8.1 line, now Rails 8.1.3.1. GPL-2.0 unchanged and no database migration is required\n* Security: fixes a stored XSS in the Textile formatter, a visibility bypass on the nested issue-relations endpoints, an authorization bypass on child-project member inheritance, API requests that could affect the user session, and a lost-password page that revealed whether an email address was registered\n* Fixes the lost-password page being unreachable when two-factor authentication is required, user deletion with an OAuth2 authorization present, Git 2.55 compatibility, note anchors shifting when a journal note is deleted, and slow text formatting on issues carrying many attachments\n* Adds relative default values for date custom fields, the project in the REST wiki-page list response, and grants issue-category read access through view_issues instead of manage_categories\n* Rebuilt on the current CIS Level 1 hardened Ubuntu 24.04 LTS base to pick up the latest Ubuntu security updates\n",
   "source": "backfill-git",
   "live": {
    "aws": "2026-08-27",
    "azure": "2026-08-27"
   }
  },
  {
   "version": "7.0.0",
   "title": "Redmine 7.0.0",
   "notes": "* MAJOR upgrade from Redmine 6.1.3 to 7.0.0 - upstream migrated the application to Rails 8.1 on Ruby 3.2; a new instance is built from scratch, so no in-place migration is required\n* New webhooks integration - Redmine can trigger external webhooks on events; disabled by default, configured under the Integration tab\n* Redesigned header and navigation, improved right-to-left language support, and new file-type icons for attachments\n* File previews extended to office documents, AVIF and SVG\n* Performance work on @mention resolution, autocomplete caching and workflow transition lookups\n* Bundled PostgreSQL (localhost-only), Nginx TLS reverse proxy on 443\n* Certbot pre-installed - enable HTTPS with one command: sudo certbot --nginx -d yourdomain.com\n* First boot rotates the default admin password and writes it to /root/redmine-credentials.txt\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-07-23",
    "azure": "2026-07-25"
   }
  },
  {
   "version": "6.1.3",
   "title": "Redmine 6.1.3 - Initial release (June 2026)",
   "notes": "* Redmine 6.1.3 on Ubuntu 24.04 LTS (Ruby on Rails 7.2, Puma, PostgreSQL)\n* CIS Level 1 hardening applied (ansible-lockdown/UBUNTU24-CIS)\n* CVE-scanned before every release\n* Default admin password rotated to a unique value at first boot\n* Per-instance PostgreSQL password and Rails secret generated at first boot\n* PostgreSQL bound to localhost; Nginx TLS on 443 with Certbot pre-installed\n* UFW firewall pre-configured (ports 22, 80, 443 only)\n* fail2ban, auditd, AppArmor pre-configured\n* SBOM (CycloneDX 1.6) at /etc/lynxroute/sbom.json\n* CIS Conformance Report (OpenSCAP) at /etc/lynxroute/cis-report.html\n* IMDSv2 enforced\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-06-22"
   }
  }
 ],
 "release_history": [
  {
   "version": "7.0.2",
   "aws": "2026-10-02",
   "azure": "2026-10-02"
  },
  {
   "version": "7.0.1",
   "aws": "2026-08-27",
   "azure": "2026-08-27"
  },
  {
   "version": "7.0.0",
   "aws": "2026-07-23",
   "azure": "2026-07-25"
  },
  {
   "version": "6.1.3",
   "aws": "2026-06-22"
  }
 ],
 "deploy": {
  "aws_cli": "# subscribe once on the AWS Marketplace listing, then:\naws ec2 run-instances \\\n  --image-id resolve:ssm:/aws/service/marketplace/prod-vi2ddr5n6ubv4/latest \\\n  --instance-type t3.medium --key-name my-key --security-group-ids sg-xxxxxxxx",
  "azure_cli": "# accept the plan terms once, then:\naz vm image terms accept --publisher lynxroute --offer redmine --plan payg-gen2\naz vm create -g my-rg -n redmine --size Standard_D2s_v3 \\\n  --image lynxroute:redmine:payg-gen2:latest --admin-username azureuser --generate-ssh-keys"
 },
 "description": {
  "what_is": "Redmine is a mature, flexible open-source project management and issue-tracking web application written in Ruby on Rails (Rails 7.2), served by the Puma application server behind an Nginx reverse proxy and backed by PostgreSQL. A single instance manages multiple projects and subprojects with per-project role-based access control, issue tracking with fully customizable trackers, statuses and workflows, Gantt charts and a calendar, time tracking, per-project wikis, forums and document management, news and file repositories, multiple-database SCM integration (Git, Subversion, Mercurial), email notifications, a REST API, LDAP-ready authentication, and multi-language support. Project data, issues, attachments and history persist in the bundled PostgreSQL database within your own AWS account - a self-hosted alternative to hosted project-tracking SaaS, with no per-seat fees. GPL-2.0 license, no vendor lock-in.",
  "image_adds": "Security hardening:\n* Default admin password rotated to a unique random value at first boot (no admin/admin)\n* Per-instance PostgreSQL password and Rails secret generated at first boot\n* PostgreSQL bound to 127.0.0.1 only; the Puma application server listens on a localhost socket\n* Nginx TLS reverse proxy on 443; HTTP on 80 redirects to HTTPS\n* Certbot pre-installed - trusted HTTPS with Let's Encrypt in one command\n* UFW firewall - ports 22, 80, 443 only\n* fail2ban, AppArmor\n* CVE scan - every image is scanned for vulnerabilities before release\n\nOS hardening (CIS Level 1):\n* CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown\n* auditd, SSH hardening, Kernel hardening, IMDSv2 enforced\n\nCompliance artifacts:\n* SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json\n* CIS Conformance Report at /etc/lynxroute/cis-report.html\n* CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
 },
 "generated_at": "2026-10-31T09:36:34Z"
}