Typesense

Typo-tolerant search engine with instant results and geo search

CIS Level 1 hardened Ubuntu 24.04 LTS image by Lynxroute · unique credentials at first boot · CVE-scanned · SBOM and CIS report inside

AWS Marketplace30.2↗ Azure Marketplace30.2↗

Availability and pricing

Cloud	Version	Software price	Last build
AWS Marketplace EC2 AMI · all commercial regions	30.2	$0.05/hr Recommended instance: t3.medium · 5-day free trial	2026-08-24	Listing ↗
Azure Marketplace VM image · plan payg-gen2 · Gen2	30.2	$0.028/vCPU/hr Recommended VM: Standard_D2s_v3	2026-08-26	Listing ↗

Software price only; cloud infrastructure is billed separately by the provider. Prices in USD.

Image facts

Base OS	Ubuntu 24.04 LTS
Hardening	CIS Level 1, Ubuntu 24.04 LTS (tailored)
License	GPL-3.0
Upstream	Typesense Inc.
Machine-readable	product.json · catalog.json

What is Typesense

Typesense is a fast, typo-tolerant open-source search engine written in C++ - a single-binary alternative to Algolia and a more developer-friendly alternative to Elasticsearch for the search-as-a-feature use case. It serves a REST API over indexed documents with sub-50ms query latency, supports typo correction, faceting, filtering, geo search, vector search (HNSW) and federated multi-collection queries. Operators get an instant-search JavaScript client, dashboard UI and import tooling for JSON/JSONL/CSV. Documents and search indexes are persisted to RocksDB on the local filesystem with snapshotting and follower replication for HA setups. GPL-3.0 license - drop-in for any application that today calls Algolia or Elasticsearch, with no per-query fees and no vendor lock-in.

What the Lynxroute image adds

Security hardening:

Unique API key generated per instance at first boot
UFW firewall - port 8108 open only; SSH on 22
fail2ban, AppArmor

OS hardening (CIS Level 1):

CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown
auditd, SSH hardening, Kernel hardening, IMDSv2 enforced

Compliance artifacts:

SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json
CIS Conformance Report at /etc/lynxroute/cis-report.html
CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md

Deploy

Launch in one command

Credentials are generated at first boot and written to /root/typesense-credentials.txt.

AWS CLIAzure CLI

# subscribe once on the AWS Marketplace listing, then:
aws ec2 run-instances \
  --image-id resolve:ssm:/aws/service/marketplace/prod-s5r3zlqfkchl2/latest \
  --instance-type t3.medium --key-name my-key --security-group-ids sg-xxxxxxxx

# accept the plan terms once, then:
az vm image terms accept --publisher lynxroute --offer typesense --plan payg-gen2
az vm create -g my-rg -n typesense --size Standard_D2s_v3 \
  --image lynxroute:typesense:payg-gen2:latest --admin-username azureuser --generate-ssh-keys

Release notes

Latest release

The most recent release with notes; the full release history is in product.json.

Typesense v30.2

AWS · 2026-08-24Azure · 2026-08-26

Log rotation no longer stops the search server. The previous logrotate config signalled typesense-server with SIGHUP, which it treats as a shutdown request; it exited 0, and the vendor unit's `Restart=on-failure` does not fire on a clean exit. Rotation now uses `copytruncate`, and a drop-in sets `Restart=always`. Also corrects `recommended_instance_type` to t3.medium, which is what the listing already advertised and one of the offer's priced dimensions. Typesense 30.2 itself is unchanged.
Rebuilt on the current CIS Level 1 hardened Ubuntu 24.04 LTS base.