Overview
The NZBGet downloads dashboard
The NZBGet Web UI downloads tab: the live download queue with status, category, age, size and estimated time, plus add, pause, resume, reorder and delete controls, served in the browser behind nginx.
The NZBGet downloads dashboard
Full application settings
Live server messages
This is a repackaged open source software product wherein additional charges apply for cloudimg support services.
Overview
NZBGet is a fast, efficient free and open-source Usenet (NZB) binary downloader with a lightweight C++ core and a full-featured browser-based web interface. This AMI runs the nzbget daemon and exposes its complete functionality through the browser - giving you a private, self-hosted Usenet download manager you run and control in your own AWS account. It is delivered fully installed and secured so a working downloader is operational within minutes of launch. NZBGet connects to your own Usenet provider, so a Usenet subscription is required to download.
Why This Image vs a Manual Install
This image eliminates the manual package setup, config templating, reverse-proxy configuration, and credential hardening that a manual install requires. NZBGet ships with a well-known default nzbget/tegbzn6789 control login; this image never keeps it. What typically requires several steps across package management, service configuration, and security hardening is completed for you at image build time. Launch the instance, read your unique credential, point NZBGet at your Usenet provider, and start downloading.
Application Stack
nzbget is installed from the distribution repository and runs as an unprivileged system user under a hardened systemd unit. Its Web UI and JSON-RPC interface are bound to the loopback interface only and fronted by an nginx reverse proxy on port 80. systemd starts the daemon and the web server on boot and restarts them on failure. The download queue, temporary directories and the completed downloads library live on a dedicated data volume, independently resizable and separate from the OS disk.
Security Hardening
This image follows a defence-in-depth approach:
- Network isolation: the Web UI and JSON-RPC interface bind exclusively to the loopback interface; only the nginx reverse proxy is exposed
- Authentication enforced: every Web UI and JSON-RPC request is authenticated - nothing is served anonymously
- No default or shared credentials: the well-known default control password is removed and a cryptographically random control password is generated on each instance's first boot and written only to a root-only file
- Least privilege: the daemon runs as an unprivileged system user with NoNewPrivileges, PrivateTmp, and ProtectHome set
- Dedicated data volume: the download queue and library live on their own disk, surviving OS-disk changes and resizable independently
- Automatic restart: systemd monitors both nzbget and nginx and restarts them on failure
Buyers requiring formal compliance documentation should contact cloudimg to discuss specific requirements.
Concrete Use Cases
- Automated media library building: A home-lab or small studio fetching NZB releases via RSS feeds and post-processing scripts, storing completed downloads on a resizable EBS volume for a media server to index
- Large dataset retrieval from Usenet: Research and data teams pulling large public datasets distributed as NZB archives, with par2 verification and automatic unpacking handled by the downloader
- Reliable background downloading: DevOps or archival teams running a headless, self-hosted downloader on a dedicated EC2 instance with scheduled bandwidth limits and category-based organisation
AWS Integration
Deploy on any EC2 instance type. Use the unauthenticated health endpoint with an Application Load Balancer for availability monitoring. Back up your configuration and download library using EBS snapshots or AWS Backup. Resize the dedicated download volume independently of the OS disk as your library grows. NZBGet connects outbound to your Usenet provider over NNTP/NNTPS - there is no inbound download port to open.
Getting Started
Read your credential from the root-only file, open the web interface in your browser, sign in, and add your Usenet provider under Settings then News Servers. Add NZB files by upload or URL, organise downloads into categories, schedule bandwidth, and automate fetching via RSS subscriptions with rules.
cloudimg Support
24/7 technical support by email and chat. Help with deployment, reverse-proxy termination with your own domain and certificate, Web UI configuration, Usenet provider setup, categories and RSS automation, and backup planning for your download library.
Highlights
- Prebuilt and secure in minutes: unlike a manual install that requires package setup, config templating, reverse-proxy configuration and removing the well known nzbget/tegbzn6789 default login, this image completes every build and hardening step at image creation time. Launch an instance and reach a working, authenticated Web UI without editing a single configuration file.
- Secure by default with unique credentials: every instance generates its own cryptographically random control password on first boot and the well known default login is removed, so no two deployments share a credential. The Web UI and JSON-RPC interface bind exclusively to the loopback interface and are unreachable from the network directly; all traffic passes through nginx, and authentication is enforced on every request.
- Efficient Usenet downloader with dedicated storage and 24/7 support: add NZB files by upload or URL, organise them into categories, schedule bandwidth and automate downloads from RSS feeds, all from the browser. The download queue and completed library live on a dedicated independently resizable data volume. Backed by 24/7 cloudimg technical support via email and chat.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Free trial
- ...
Dimension | Description | Cost/hour |
|---|---|---|
m5.large Recommended | m5.large | $0.08 |
t3.micro | t3.micro instance type | $0.04 |
t2.micro | t2.micro instance type | $0.04 |
c6in.metal | c6in.metal instance type | $0.24 |
i7i.metal-48xl | i7i.metal-48xl instance type | $0.24 |
r7i.large | r7i.large instance type | $0.08 |
r6id.32xlarge | r6id.32xlarge instance type | $0.24 |
m8ib.8xlarge | m8ib.8xlarge instance type | $0.24 |
r5d.12xlarge | r5d.12xlarge instance type | $0.24 |
r7iz.metal-32xl | r7iz.metal-32xl instance type | $0.24 |
Vendor refund policy
Refunds available on request.
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Initial release of NZBGet as a ready-to-use self-hosted Usenet downloader, running the nzbget daemon with its web interface served behind nginx, secured with a unique control credential generated on each instance's first boot and a dedicated data volume for the download library.
Additional details
Usage instructions
Connect via SSH on port 22 as the default login user for your operating system variant (for the Ubuntu 24.04 variant the user is ubuntu). Read the per-instance control credential with: sudo cat /root/nzbget-credentials.txt. Open the web interface in a browser at http://<instance-public-ip>/ and sign in with the username and password from that file. An unauthenticated health endpoint is available at http://<instance-public-ip>/healthz. Configure your own Usenet provider under Settings then News Servers. Completed downloads are saved under /var/lib/nzbget/completed on the dedicated data volume. NZBGet connects outbound to your Usenet provider over NNTP/NNTPS, so there is no inbound download port. The instance security group opens ports 22 and 80. The services run under systemd: systemctl status nzbget nginx.
Resources
Vendor resources
Support
Vendor support
cloudimg Support
cloudimg provides 24/7 technical support for this product by email and live chat.
Contact: support@cloudimg.co.uk
What we help with:
- Deployment and initial configuration
- Reverse-proxy termination with your own domain and TLS certificate
- Web UI configuration, Usenet provider setup, categories, and RSS automation
- Backup planning for your download library using EBS snapshots or AWS Backup
- Performance tuning and troubleshooting
- Updates and security patching guidance
Refunds: For refund requests, contact support@cloudimg.co.uk with your AWS account ID and subscription details.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.