Overview
AppXen GraphQL - Hasura GraphQL Engine with PostgreSQL
Hasura GraphQL Engine, packaged to run in production from first boot in your own AWS account: instant, real-time GraphQL APIs over a PostgreSQL database, with automatic HTTPS (Caddy + Let's Encrypt or self-signed), a generated admin secret, a firewall, and automatic security updates. Model your tables in the web console and get queries, mutations, and live subscriptions with fine-grained access control. One instance serves every query: there is no per-request metering and no usage cap.
What you get
- Hasura GraphQL Engine v2, community edition, behind automatic TLS
- PostgreSQL 16 with a persistent volume, reachable only on the private container network
- The Hasura console, locked by an admin secret generated on first boot
- Telemetry off and development mode off
- Hardened Ubuntu 24.04 base (ufw, key-only SSH, unattended security updates)
Recommended instance: t3.small (2 vCPU / 2 GiB) or larger.
This is independent software packaged by AppXen and is not affiliated with or endorsed by Hasura or the Hasura GraphQL Engine project.
Highlights
- Instant, real-time GraphQL APIs over PostgreSQL 16, with the Hasura console locked by an admin secret generated on first boot, behind automatic HTTPS.
- Production-hardened Ubuntu 24.04 base: firewall, key-only SSH, automatic security updates, and container images rebuilt with the latest OS patches at every release.
- One appliance in your own AWS account serves every query: no per-request metering, no usage cap, your data in your VPC.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Dimension | Cost/hour |
|---|---|
t3.small Recommended | $0.069 |
t3.medium | $0.069 |
t3.large | $0.069 |
t3a.small | $0.069 |
t3a.medium | $0.069 |
t3a.large | $0.069 |
Vendor refund policy
Refunds are available on a case-by-case basis. To request a refund, email support@appxen.ai within 30 days of the charge; we typically respond within 1 business day. Annual subscriptions are refundable pro rata on request to support@appxen.ai within 30 days of purchase.
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
First release: Hasura GraphQL Engine v2.51.0 community edition with PostgreSQL 16, automatic HTTPS, a generated admin secret, firewall, automatic security updates, and container images rebuilt with the latest OS patches.
Additional details
Usage instructions
Getting started
- Launch with ports 80, 443, 22 open (limit 22 to your own address).
- Wait ~2 minutes for first boot.
- Browse https://<public-ip>/console (the certificate is self-signed until you add a domain, so your browser will warn once).
- Sign in with the admin secret. Read it over SSH: sudo grep HASURA_GRAPHQL_ADMIN_SECRET /opt/appliance/.env At first boot the same value is the "Admin pass" in /opt/appliance/credentials.txt. Hasura asks for the secret only, so the user name in that file does not apply.
The admin secret has full access to your data. Keep it on the server side; give browsers and mobile apps Hasura roles and permissions instead.
Using the API The GraphQL endpoint is https://<public-ip>/v1/graphql and admin calls send the header x-hasura-admin-secret: <secret>. Create tables in the console's Data tab and Hasura exposes them at once, with subscriptions for live queries.
Custom domain & trusted TLS Point a domain you own at the instance (A record to the public IP) and set EC2 user-data when launching:
APPLIANCE_DOMAIN=yourdomain.comOn first boot the appliance will obtain a free Let's Encrypt certificate for that domain.
Your PostgreSQL database Hasura keeps its metadata and your tables in one PostgreSQL 16 database named hasura (user hasura). It listens on the private container network only: no host port is published, so it is not reachable from the internet.
- From another container in the same Compose project the connection string is postgres://hasura:<DB_PASSWORD>@db:5432/hasura. Read the password with sudo grep DB_PASSWORD /opt/appliance/.env.
- SQL shell: cd /opt/appliance && sudo docker compose exec db psql -U hasura hasura
- To reach it from your own machine, add ports: ["127.0.0.1:5432:5432"] to the db service in /opt/appliance/docker-compose.yml, run sudo docker compose up -d, and open an SSH tunnel to port 5432. Never publish it on 0.0.0.0.
Backups cd /opt/appliance && sudo docker compose exec -T db pg_dump -U hasura -Fc hasura > ~/hasura.dump saves your tables and Hasura's metadata. Copy the file off the instance (for example to S3), and snapshot the EBS volume for a full image. Restore with sudo docker compose exec -T db pg_restore -U hasura -d hasura --clean --if-exists < ~/hasura.dump from /opt/appliance.
Updating The Hasura and PostgreSQL images on this instance are AppXen builds of the upstream images: the upstream release plus the operating system security updates available when the AMI was built. They are built into the AMI when it is made and have no registry to pull from, so docker compose pull does not update them. To move to a newer release, take a backup (above), launch the newest AppXen GraphQL AMI and restore the backup into it. Hasura migrates its own catalog on start; a downgrade needs a restored backup. Ubuntu security updates for the host install automatically.
This is independent software packaged by AppXen and is not affiliated with or endorsed by Hasura or the Hasura GraphQL Engine project.
Support Email support@appxen.ai or visit https://appxen.ai/appliances/hasura
Resources
Vendor resources
Support
Vendor support
Email support@appxen.ai for help with this appliance; we typically respond within one business day. The deployment and operations guide, including first sign-in, backups and updates, is at
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
