Sold by: Perimattic ManageStacks
Deployed on AWS
AWS Free Tier
Karakeep 0.34.1 (AGPL-3.0, formerly Hoarder) with Meilisearch and headless Chrome on Ubuntu 24.04. Admin created at first login, sign-up closed, no AI key included. Pinned, HTTPS.
Overview
This AMI runs Karakeep, the open-source self-hosted bookmark manager (formerly known as Hoarder), on Ubuntu 24.04 LTS. The official Karakeep container image (ghcr.io/karakeep-app/karakeep, version 0.34.1) is pinned and baked into the AMI together with the two services Karakeep's own Docker setup uses: Meilisearch v1.41.0 for full-text search and Karakeep's headless Chrome image (Chrome 157.0.8103.38) for fetching pages and screenshots. Karakeep is an independent open-source project and Perimattic is not affiliated with it; product names are trademarks of their respective owners.
Why Karakeep?
Karakeep saves links, notes and images, fetches and archives each page, makes everything searchable and organises it with lists and tags. It has a web app, browser extensions and mobile apps that you point at your own server.
What Perimattic adds
Secure by default: Karakeep makes the first account an administrator and normally keeps sign-up open. At first login this AMI generates a random 24-character admin password, a search key and the session secret on your server, creates the administrator through Karakeep's own sign-up API, then restarts Karakeep with sign-up closed. Setup checks that the password works, that a wrong password, a stranger's sign-up and anonymous requests are refused and that Meilisearch demands its key, before the site is published. Sign-up is open only for a few seconds, on the loopback interface, before anything is published. There are no default or shared credentials in the image.
HTTPS: Apache is the reverse proxy, with a free Let's Encrypt certificate requested for your domain by certbot. Karakeep, Meilisearch and Chrome listen only inside the instance or the Docker network.
AI tagging is off
Karakeep can tag bookmarks with an AI model, but no provider key is included. Add your own OpenAI key or the address of your own Ollama server to /opt/app/.env to turn it on; the text of your bookmarks is then sent to that provider. With no key, nothing is sent anywhere. Karakeep's new-release check is switched off.
Sizing
Karakeep, Meilisearch and Chrome used about 0.9 GB of memory when idle in our tests, and Chrome uses more while it crawls pages. A t3.medium (4 GB) is the recommended starting size. The bundled Chrome runs as an unprivileged user with Chrome's own sandbox switched off, which is the default of Karakeep's image; keep the instance for bookmarks only.
Licences
Karakeep is licensed under the GNU Affero General Public License v3 (AGPL-3.0). This AMI runs the unmodified upstream image; the source code is at github.com/karakeep-app/karakeep (tag 0.34.1). Meilisearch is MIT licensed for its community edition.
Getting Started Launch the AMI and open ports 22, 80 and 443 in the security group SSH in and answer the setup prompts (domain and admin email) Copy the admin password printed at the end of setup Sign in at https://your-domain and install the extension or app
A domain name with an A record pointing at the instance is required, because Karakeep is served over HTTPS.
Book a free setup consultation at https://cal.com/gaurav-pareek-perimattic/marketplace-setup-consultations or email us at aws-support@perimattic.com .
Support Managed and supported by Perimattic, a cloud infrastructure company with 13+ years of experience serving global clients. We offer free setup assistance, custom integrations, infrastructure consulting, and 24/7 support.
Highlights
- Karakeep 0.34.1 (AGPL-3.0) with Meilisearch search and headless Chrome, pinned and pre-installed: a self-hosted bookmark manager with web, extension and mobile clients.
- Secure first login: the admin is created and checked during setup, sign-up is then closed, secrets are generated per instance, and no AI provider key is included.
- Built on patched Ubuntu 24.04 LTS and supported by Perimattic: free setup assistance at aws-support@perimattic.com.
Details
Sold by
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
Ubuntu 24.04
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier for more details.
- ...
Dimension | Cost/hour |
|---|---|
t3.medium Recommended | $0.03 |
t3.micro | $0.03 |
c3.2xlarge | $0.03 |
c3.4xlarge | $0.03 |
c3.8xlarge | $0.03 |
c3.large | $0.03 |
c3.xlarge | $0.03 |
c4.2xlarge | $0.03 |
c4.4xlarge | $0.03 |
c4.8xlarge | $0.03 |
Vendor refund policy
For any questions or concerns, please contact: Perimattic.com Email: aws-support@perimattic.com
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Initial release.
- Application: Karakeep 0.34.1 (container image pinned, baked into the AMI).
- Base: Ubuntu 24.04 LTS, fully patched at build time, built by an automated EC2 Image Builder pipeline.
- TLS: Apache reverse proxy with a Let's Encrypt certificate requested by certbot at first login.
- Credentials are generated on the instance at first login; none are present in the image.
- A random admin password is generated at first login and the administrator is created through Karakeep's sign-up API, after which sign-up is closed; setup verifies that a wrong password, a stranger's sign-up and anonymous requests are refused before the site is published.
- Application: Karakeep 0.34.1 (AGPL-3.0, unmodified official image) with Meilisearch v1.41.0 and Karakeep's Chrome image 157.0.8103.38-r1 (all pinned). No AI provider key is installed (AI tagging is off); the new-release check is off.
- Meilisearch and Chrome are reachable only inside the Docker network; the search key and session secret are generated per instance.
Additional details
Usage instructions
-
Launch an Instance
From AWS Marketplace, click Continue to Subscribe and then Continue to Configuration to launch the AMI.
-
Choose the Recommended Instance Type
t3.medium (4 GB of memory) is the recommended starting size: Karakeep, Meilisearch and Chrome used about 0.9 GB when idle in our tests, and Chrome needs more while it crawls pages. A t3.small (2 GB) was not tested.
-
Configure Security Group
Allow inbound traffic on the following ports:
- 22 (SSH) - terminal access for setup
- 80 (HTTP) - needed to validate your domain for the TLS certificate
- 443 (HTTPS) - access to Karakeep
-
Point a domain at the instance
Create a DNS A record (for example bookmarks.example.com) pointing to the instance's public IP before you log in.
-
Connect to the Instance
ssh -i <your-key.pem> ubuntu@<public-ip>
-
First-Login Setup
The first SSH login runs a guided setup:
- Prompts for your domain and admin email and checks the DNS A record
- Generates a random 24-character admin password and search key, and the session secret, on your server
- Starts Karakeep, Meilisearch and Chrome and creates the administrator through Karakeep's own sign-up API, then restarts Karakeep with sign-up closed
- Checks that the password works, that a wrong password, a stranger's sign-up and anonymous requests are refused, and that Meilisearch demands its key
- Configures Apache as an HTTPS reverse proxy and requests a Let's Encrypt certificate
- Prints the URL and the admin credentials; they are also stored in /opt/app/access.txt (root only)
If a step fails, fix the problem shown and log in again: the setup resumes where it stopped.
-
Access Karakeep
Open https://<your-domain> and sign in with your admin email and the generated password (view it again with: sudo cat /opt/app/access.txt). Sign-up is closed. AI tagging is off until you add your own OPENAI_API_KEY (or OLLAMA_BASE_URL) to /opt/app/.env and run: cd /opt/app && sudo docker compose up -d
-
Credentials
Generated on your server, never shared between customers. View them again with:
sudo cat /opt/app/access.txt
-
Manage the Services
cd /opt/app sudo docker compose ps sudo docker compose restart
Bookmarks and saved pages are in /opt/app/data and the search index in /opt/app/meili_data: back up all of /opt/app or snapshot the volume before upgrades. To add a user, set DISABLE_SIGNUPS=false in /opt/app/.env, run docker compose up -d, register, then set it back to true and run it again.
Thank you for subscribing.
Need Support or Customization? Perimattic's team can help with setup issues, custom features and integrations:
Email us: aws-support@perimattic.com WhatsApp: +91-92142 66896 Learn more: <www.perimattic.com >
We offer free setup assistance, custom development and integrations, and infrastructure consulting.
Resources
Support
Vendor support
Support by Perimattic
Perimattic provides 24/7 support for all AWS Marketplace products. Our team has 13+ years of cloud infrastructure expertise serving global clients.
Contact Channels: Email: aws-support@perimattic.com WhatsApp: +91-92142 66896 Website: <www.perimattic.com >
What We Help With: Initial setup and configuration assistance (free) Troubleshooting connectivity, performance, and backup issues Custom development and integrations Infrastructure consulting and architecture review Migration planning from other solutions Automation solutions and scaling guidance
Instance Sizing Guidance: t2.medium or t3.medium: Development environments, small applications m5.large: Production workloads with moderate traffic m5.xlarge: High-traffic production deployments and larger datasets
For workload-specific sizing recommendations, contact our team for a free consultation.
Refunds and Issues: If you experience any issues or need to request a refund, contact us at aws-support@perimattic.com and we will respond promptly.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Linkding 1.47.0 (MIT) on Ubuntu 24.04: a self-hosted bookmark manager with tags, full-text search, archiving and a REST API, behind HTTPS with a generated administrator password and no sign-up page.
Linkwarden 2.16.3 (AGPL-3.0) with PostgreSQL 17 on Ubuntu 24.04, with HTTPS. The administrator is created before the site is published and registration is closed, so strangers cannot sign up.
Keycloak 26.8.1 with PostgreSQL on Ubuntu 24.04 in production mode behind HTTPS, with a generated administrator password. A self-hosted identity and access management server, ready after one SSH login.
Production-ready GitLab CE with full root access, automated backups, and security hardening - a self-hosted DevOps platform with Git hosting, CI/CD, and project management on AWS.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.