Overview
Matomo Dashboard
Matomo Dashboard
Matomo Website Analytics
This is a repackaged open source software product wherein additional charges apply for professional support, enterprise security hardening, automated deployment configuration, performance optimization, and ongoing maintenance services provided by ORHAKSS LLC.
WHAT YOU ARE PAYING FOR
- Professional AMI configuration and optimization for AWS EC2
- Security hardening with SSH hardening and UFW firewall
- Automated first-boot deployment with unique credential generation
- Technical support for deployment and configuration
ABOUT MATOMO
Matomo is the leading open-source web analytics platform, used by over 1 million websites across more than 190 countries. As a privacy-first alternative to Google Analytics, Matomo gives organizations complete ownership of their visitor data with no third-party sharing, no data sampling, and full GDPR compliance out of the box. From real-time visitor tracking and heatmaps to conversion funnels, A/B testing, and custom reports, Matomo delivers enterprise-grade analytics without the enterprise price tag. Licensed under the GNU General Public License v3, Matomo is free to self-host and extend.
TECHNICAL SPECIFICATIONS
- Matomo 5.11.1 (Latest Stable Release)
- Ubuntu 24.04 LTS with security support until 2029
- Apache 2.4 with PHP 8.3 FPM and OPcache
- MySQL 8.0 with security hardening and localhost-only binding
- Certbot pre-installed for free SSL via Let's Encrypt
- UFW firewall pre-configured
AUTOMATED FIRST-BOOT DEPLOYMENT
Each instance launched from this AMI goes through a one-time automated initialization that creates a unique database user and password, updates Matomo configuration, sets the trusted host to the instance public IP, generates a unique administrator account, and writes all credentials to ~/credentials.txt. The system is fully operational within 2-3 minutes of launch.
GETTING STARTED
- Launch an EC2 instance from this AMI with an SSH key pair
- Open ports 22, 80, and 443 in your security group
- Wait 2-3 minutes for first-boot to complete
- SSH in and run: cat ~/credentials.txt
- Open http://YOUR_IP in your browser and sign in
RECOMMENDED INSTANCE TYPES
Small websites and development: t3.small or t3.medium Growing businesses: t3.large or t3.xlarge High-traffic analytics: t3.2xlarge or larger
SSL AND CUSTOM DOMAIN SETUP
After pointing your domain to the instance Elastic IP: sudo certbot --apache -d yourdomain.com HTTPS will be configured automatically with auto-renewal enabled.
SYSTEM REQUIREMENTS AND DEPENDENCIES
- Minimum recommended instance type: t3.small (2 vCPU, 2 GB RAM)
- Minimum storage: 20 GB EBS volume recommended
- An EC2 key pair is required for SSH access
- Ports 22, 80, and 443 must be open in the security group
- IMDSv2 is used during first-boot to retrieve instance metadata
- No external packages or dependencies are downloaded at launch time
PRODUCT LIMITATIONS
- Single-node deployment - high availability and clustering not included by default
- HTTPS is not pre-configured - an SSL certificate must be installed post-launch
- SMTP is not pre-configured - email settings must be configured in Matomo admin
- OS and application updates are the responsibility of the customer
- An Elastic IP is recommended for production use
SUPPORT
Contact: contact@orhakssllc.com Website: https://orhakssllc.com
ABOUT ORHAKSS LLC
ORHAKSS LLC delivers production-grade cloud deployment solutions on AWS, specializing in hardened AMIs with enterprise security configurations, automated initialization systems, and professional support services.
MATOMO LICENSE
Matomo is free and open-source software licensed under the GNU General Public License v3.0. Charges on this listing apply exclusively to the professional AMI configuration, security hardening, automated deployment infrastructure, and support services provided by ORHAKSS LLC.
Highlights
- Production-ready Matomo 5.11.1 on Ubuntu 24.04 LTS - automated first-boot generates unique credentials per instance, configures the trusted host to the instance public IP, and creates the admin account with zero manual intervention.
- Enterprise security hardening included: key-only SSH access, root login disabled, UFW firewall pre-configured, MySQL localhost-only binding, and no shared default credentials across instances.
- The leading open-source alternative to Google Analytics trusted by over 1 million websites - full privacy, GDPR compliance, real-time analytics, heatmaps, and conversion tracking under your control, supported by ORHAKSS LLC.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Dimension | Description | Cost/month |
|---|---|---|
Matomo 5.11.1 - Initial Release | Matomo 5 on Ubuntu 24.04 LTS by ORHAKSS LLC | $200.00 |
Vendor refund policy
This product is billed based on actual EC2 instance usage hours. You may terminate your instance at any time to stop all charges. No refunds are issued for partial usage periods already billed. For billing questions or disputes, contact contact@orhakssllc.com before opening a claim through AWS Marketplace.
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
RELEASE: Matomo 5.11.1 on Ubuntu 24.04 LTS Release Date: June 2026 Prepared by: ORHAKSS LLC
INCLUDED SOFTWARE VERSIONS
- Matomo 5.11.1 (Latest Stable)
- Ubuntu 24.04.4 LTS
- PHP 8.3 with OPcache and required extensions
- MySQL 8.0
- Apache 2.4
- Certbot pre-installed
- UFW firewall pre-configured
AUTOMATED FIRST-BOOT SYSTEM
Each new instance launch triggers a one-time initialization sequence:
- Waits for MySQL to become fully available before proceeding
- Retrieves instance metadata (ID and public IP) via IMDSv2
- Falls back to private IP if no public IP is assigned
- Creates a unique MySQL database user with a randomly generated password
- Updates Matomo config with new database credentials
- Updates trusted_hosts to the instance public IP
- Generates admin password using bcrypt with MD5 pre-hash per Matomo standard
- Creates a fresh admin account with unique username and password
- Writes all credentials to ~/credentials.txt with owner-only permissions
- Creates a lock file to prevent re-execution on subsequent reboots
SECURITY HARDENING APPLIED
- SSH PermitRootLogin: disabled
- SSH PasswordAuthentication: disabled
- MySQL root: auth_socket (no password)
- MySQL bind-address: 127.0.0.1
- Apache ServerTokens: Prod
- Apache ServerSignature: Off
- UFW: active, ports 22/80/443 only
- No hardcoded credentials in AMI
- No shared passwords across instances
- IMDSv2 enforced
KNOWN LIMITATIONS
- HTTPS not pre-configured - SSL certificate required after launch
- SMTP not pre-configured - email settings must be configured in Matomo admin
- Single-node only - no built-in HA or clustering
- Elastic IP not included by default
OPEN SOURCE NOTICE
Matomo is free and open-source software licensed under the GNU General Public License v3.0. Source code is available at https://github.com/matomo-org/matomo
SUPPORT
Email: contact@orhakssllc.com Website: https://orhakssllc.com
Additional details
Usage instructions
CONNECTING TO YOUR INSTANCE
After launching, wait 2-3 minutes for first-boot to complete.
Connect via SSH: ssh -i your-key.pem ubuntu@YOUR_PUBLIC_IP
Retrieve your login credentials: cat ~/credentials.txt
The file contains your Matomo admin username, password, and database details.
ACCESSING MATOMO
Open a browser and go to: http://YOUR_PUBLIC_IP
Sign in with the username and password from credentials.txt. Change your administrator password immediately after first login.
SECURITY GROUP REQUIREMENTS
- TCP 22 - SSH administration
- TCP 80 - Web access
- TCP 443 - HTTPS after SSL setup
Restrict port 22 to your own IP address for better security.
RECOMMENDED INSTANCE TYPES
Small site / development: t3.small or t3.medium Growing business: t3.large or t3.xlarge High-traffic analytics: t3.2xlarge or larger
SSL AND DOMAIN CONFIGURATION
- Assign an Elastic IP to keep a stable address
- Point your domain DNS A record to the Elastic IP
- Run the following command on the instance: sudo certbot --apache -d yourdomain.com
- HTTPS will be fully configured with auto-renewal
CHECKING SERVICE STATUS
sudo systemctl status apache2 sudo systemctl status mysql sudo systemctl status php8.3-fpm
RESTARTING SERVICES
sudo systemctl restart apache2 sudo systemctl restart php8.3-fpm sudo systemctl restart mysql
VIEWING FIRST-BOOT LOG
sudo cat /var/log/matomo-first-boot.log
IMPORTANT NOTES
- credentials.txt is readable only by the ubuntu user (chmod 600)
- The first-boot script runs only once - rebooting will not regenerate credentials
- Each launched instance receives completely unique credentials
- Root SSH login is permanently disabled - always connect as ubuntu
- Password-based SSH is disabled - an EC2 key pair is always required
- For production use, an Elastic IP and SSL certificate are strongly recommended
Support
Vendor support
Technical support for this product is provided by ORHAKSS LLC.
Support contact: Email: contact@orhakssllc.com Website: https://orhakssllc.com
Support scope includes: Instance launch and configuration guidance First-boot initialization troubleshooting Credentials retrieval assistance Matomo web interface access issues Apache, PHP, and MySQL service diagnostics AWS security group and networking guidance SSL certificate installation walkthrough
Support scope does not include: Custom Matomo plugin or theme development Third-party integration debugging Data migration from other analytics platforms Analytics strategy or reporting consulting
Response times may vary based on request complexity and business hours.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.