Sold by: cloudimg
Deployed on AWS
Free Trial
AWS Free Tier
This product has charges associated with it for seller support. Run your own self hosted, authenticated backup repository server in minutes. Rest Server is the open source REST backend for restic: point any restic client at it over HTTPS and read and write backup repositories entirely within your own account. This image ships Rest Server behind nginx TLS with per instance HTTP basic authentication and private repositories, secure by default and never an open, anonymous server. Backed by 24/7 cloudimg expert support.
Overview
Image
Rest Server and nginx running
Image
Per instance authentication enforced
Image
restic backup round-trip
This is a repackaged open source software product wherein additional charges apply for cloudimg support services.
Rest Server is a high performance open source HTTP server that implements the restic REST backend protocol. This image turns an instance and its dedicated data volume into a self hosted backup repository server: point any restic client at it over HTTPS and read and write backup repositories exactly as you would against any restic remote, entirely within your own account. The server is fully installed and reverse proxied behind nginx with TLS, so a working backup endpoint is operational within minutes of launch, with no manual package installation, no dependency troubleshooting and no proxy configuration required.
Application stack: rest-server binds to the loopback interface only, and nginx is the single network facing surface. nginx terminates TLS on port 443 and fronts the entire REST backend with HTTP basic authentication, with restic uploads of large pack files streamed unbuffered. Repository data lives on a dedicated data volume, separate from the operating system disk, so your backups have room to grow and are easy to reason about. An unauthenticated GET /healthz on port 80 and 443 is available for load balancer probes, and systemd manages the service for automatic restarts and clean logging.
Secure by default with no shared credentials: Rest Server can be run with authentication disabled, which means an unprotected deployment is an open, anonymous repository server. This image never exposes it that way. It requires HTTP basic authentication on every request against a bcrypt htpasswd file, and enables private repositories so each user is confined to their own namespace. Nothing secret is baked into the image. On the first boot of every instance, a unique username and password and a unique self signed TLS certificate are generated, and the credentials are written to a root only file on the instance. The service is configured to refuse to start until a credential is present, so requests are authenticated from the very first call.
Common uses include a private, self hosted backup destination for laptops, servers and containers using restic; a fast REST backend that avoids per request cloud storage costs; and a repository server you fully control. Because it speaks the standard restic REST protocol, existing restic clients and automation work unchanged.
Get started: read the generated credentials, then point restic at the authenticated HTTPS URL of this instance and run restic init, restic backup and restic snapshots. cloudimg engineers can help you design repository layout, append only and private repository patterns, TLS with your own domain and certificate, and rollout across your fleet after purchase.
This is a repackaged open source software product with additional charges for cloudimg support services. Rest Server and restic are trademarks of their respective owners. All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.
Highlights
- Rest Server, the open source restic REST backend, fully installed as a hardened systemd service behind nginx TLS. Point any restic client at it over HTTPS and read and write backup repositories within your own account, with repository data on a dedicated data volume that is independently resizable from the OS disk.
- Secure by default and never an open server: on first boot every instance generates its own HTTP basic authentication credentials and its own TLS certificate. rest-server binds to loopback only and is reachable exclusively through nginx TLS with per instance basic authentication and private repositories, so unauthenticated requests are rejected and no shared or baked in credential ships in the image.
- 24/7 expert technical support from cloudimg with a one hour average response time for critical issues. Our engineers help with restic client setup, repository and namespace layout, append only and private repository patterns, nginx TLS with custom domains, data volume sizing, and Rest Server version upgrades.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
Ubuntu 24.04
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free for 7 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier for more details.
Dimension | Description | Cost/hour |
|---|---|---|
m5.large Recommended | m5.large | $0.08 |
t2.micro | t2.micro instance type | $0.04 |
t3.micro | t3.micro instance type | $0.04 |
c5a.12xlarge | c5a.12xlarge instance type | $0.24 |
c5a.16xlarge | c5a.16xlarge instance type | $0.24 |
c5a.24xlarge | c5a.24xlarge instance type | $0.24 |
c5a.2xlarge | c5a.2xlarge instance type | $0.24 |
c5a.4xlarge | c5a.4xlarge instance type | $0.24 |
c5a.8xlarge | c5a.8xlarge instance type | $0.24 |
c5a.large | c5a.large instance type | $0.08 |
Vendor refund policy
Refunds available on request.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Initial release.
Additional details
Usage instructions
Connect via SSH on port 22 as the default login user for your operating system variant (the user guide lists it per variant; Ubuntu 24.04 uses ubuntu). Retrieve the per instance credentials with: sudo cat /root/rest-server-aws-credentials.txt. That file contains the restic username and password, the HTTPS endpoint URL (https://<instance-public-ip>/), and a ready to paste restic repository example. To back up to this server from any machine with the restic client: because the TLS certificate is self signed per instance, either copy this instance's certificate /etc/nginx/tls/rest-server.crt and trust it, or pass restic --insecure-tls, then set the repository, for example export RESTIC_REPOSITORY="rest:https://<user>:<password>@<instance-public-ip>/restic/myrepo" and export RESTIC_PASSWORD=<a strong repository encryption password>, then run restic init, restic backup /path and restic snapshots. rest-server binds to loopback only; nginx terminates TLS on port 443 and enforces the per instance basic auth with private repositories, so the server is never an open, anonymous relay. An unauthenticated request returns 401. Repository data lives on a dedicated data volume mounted at /var/lib/restic. An unauthenticated GET /healthz on ports 80 and 443 is available for load balancer probes.
Resources
Vendor resources
Support
Vendor support
cloudimg provides 24/7 technical support for this Rest Server product by email (support@cloudimg.co.uk ) and live chat. We help with deployment and first boot configuration, pointing restic clients at the server from workstations, servers and CI, repository and namespace layout, append only and private repository patterns, credential rotation and adding users with htpasswd, configuring nginx TLS with your own domain and CA signed certificate, data volume sizing and management, Rest Server version upgrades and patch guidance, performance tuning and troubleshooting. Critical issues receive a one hour average response time. For billing, subscription changes, or refund requests, contact support@cloudimg.co.uk .
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Transforms data from RESTful responses into Knowledge Graph structures based on RML Mappings
KEY4C V3.0 JWT HTTP REST API Service is a cloud-based security platform designed to simplify and strengthen JWT authentication for your applications.
With KEY4C, no need to manage cryptographic keys on your own servers.
Enjoy secure signing, rigorous token validation, improved performance, and a scalable architecture with all in one solution.
Start today and build a secure, efficient authentication system with ease.
> Free Trial: Generate up to 1,000 JWT tokens over 90 days at no cost.
This product has charges associated with it for deployment, configuration, and ongoing support. Self-hosted fake REST API from a JSON file. Create a full CRUD API in seconds for prototyping, testing, and frontend development.
This product has charges associated with it for deployment, configuration, and ongoing support. Self-hosted email testing tool for development. Catch all outgoing emails with a web UI, REST API, and SMTP server on EC2.
SecuPi deidentificatoin at rest and client side encryption allows organizations to easily govern and control all data access and data processing transactions while enforcing end to end data security on their cloud data platforms, analytical workloads and data consumers, ensuring that cleartext data is NEVER accessible globally, and can only be decrypted locally, on a need to know basis, at a defined location. Minimum contract period is 12 months.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.