Perimattic Managed NetBox - Network Source of Truth on AWS

This AMI runs NetBox, the open-source infrastructure resource modeling (IPAM and DCIM) application, with PostgreSQL 17 and two Valkey instances on Ubuntu 24.04 LTS. The container image is the community netbox-docker project's netboxcommunity/netbox image, pinned to NetBox 4.7.4 (image release v4.7.4-5.1.1), with PostgreSQL 17.11 and Valkey 9.1.3, baked into the AMI so first start does not depend on a registry. That image is maintained by the netbox-docker community, not by NetBox Labs. NetBox is an independent open-source project and Perimattic is not affiliated with it; NetBox is a trademark of its owner and other product names are trademarks of their respective owners.

Why NetBox?

NetBox is a source of truth for network and data centre infrastructure: IP address management (prefixes, VRFs, VLANs), sites, racks, devices, cables, circuits, virtualization, with a REST and GraphQL API, custom fields, webhooks, scripts and reports.

What Perimattic adds

Superuser created for you, nothing readable anonymously: during first-login setup a random 24-character password is generated on your server and the superuser, using the email you enter, is created by NetBox's own initialisation before the site is published, with the password given to that one command only. LOGIN_REQUIRED is on, so no data is visible without logging in; NetBox has no public registration. Setup then checks that the password works, that a wrong password and anonymous web and API requests are refused and that exactly one account exists. The secret key and API token pepper (64 characters each), the database password and both Valkey passwords are generated per instance. There are no default or shared credentials in the image.

HTTPS: Apache is configured as a reverse proxy and a free Let's Encrypt certificate is requested for your domain with certbot. NetBox serves only your domain name (ALLOWED_HOSTS) and listens only on the loopback interface; PostgreSQL and both Valkey instances are password protected and reachable only inside the Docker network. The anonymous census, release check, Copilot button and metrics endpoint are off.

Patched base: Ubuntu 24.04 LTS built through an automated EC2 Image Builder pipeline, with security updates applied at build time.

Limits you should know

No mail server is configured; set the EMAIL_* variables in /opt/app/docker-compose.yml if you want NetBox to send email. The first login runs NetBox's database migrations and takes eight to nine minutes (475 to 562 seconds in our tests); later starts take about a minute.

NetBox runs five containers (web, background worker, PostgreSQL and two Valkey instances). In our tests they used about 0.95 GB and the instance about 1.4 to 1.5 GB in use. It also ran on a t3.small (2 GB), but with only about 500 MB free, so a t3.medium (4 GB) is the recommended size. The web server runs two worker processes; raise GRANIAN_WORKERS in /opt/app/.env for more concurrency on a larger instance.

Licence

NetBox and the netbox-docker project are released under the Apache License 2.0; this AMI runs the unmodified community image. PostgreSQL is released under the PostgreSQL License and Valkey under the BSD 3-Clause licence.

Getting Started Launch the AMI and open ports 22, 80 and 443 in the security group SSH in and answer the setup prompts (domain and admin email) Open https://your-domain  and sign in as admin with the password printed at the end of setup

A domain name with an A record pointing at the instance is required, because the site is served over HTTPS.

This AMI is built and supported by Perimattic.

Book a free setup consultation at https://cal.com/gaurav-pareek-perimattic/marketplace-setup-consultations  or email us at aws-support@perimattic.com .

Support Managed and supported by Perimattic, a cloud infrastructure company with 13+ years of experience serving global clients. We offer free setup assistance, custom integrations, infrastructure consulting, and 24/7 support.