Containerized Matomo 5 on Alma Linux 10 by Elyxia Global Limited

Elyxia Global Limited brings you a fully configured Matomo 5 image on AlmaLinux 10. This ready-to-deploy AMI gives you working analytics in minutes rather than an afternoon spent assembling PHP, a database, a web server and a scheduled processing job. Matomo shows you how visitors find and use your site, which pages hold their attention, where they leave, and which campaigns actually convert. The difference from hosted analytics is where the data lives: it stays on your own instance, so it is never sold on, never shared with a third party and never used to build a profile of your visitors elsewhere. That is what makes Matomo a practical answer to GDPR and similar obligations rather than a risk to be managed. The AlmaLinux 10 base ensures your system runs on a secure, enterprise-grade Linux distribution known for stability and long-term support. Whether you are measuring one site or many, Matomo gives you the reports without the trade-off, and its open-source licence means you keep full control of your data with no per-visit fee.

Pre-bundled with this AMI: Matomo 5.13.0, AlmaLinux 10, MariaDB 11.4, PHP 8.2, Apache web server, Caddy reverse proxy, Docker and Docker Compose

The application runs in containers. Matomo and its database are managed by Docker Compose on the instance, which means application updates can be delivered without replacing the AMI, and the database runs on an isolated internal network with no port exposed to the internet. Your configuration and your downloaded geolocation data are kept in separate storage that an application update does not touch.

Your Matomo is installed and ready when the instance finishes starting. There is no setup wizard to work through. The administrator account is created for you and its password is shown once, in the summary at the end of installation.

A first site is already created, named My website. Rename it to your own site under Administration, Websites, Manage, and Matomo gives you the tracking code to paste into your pages.

The exact Matomo version is fixed in the image. An installation that downloads whatever release is current on the day gives you an instance nobody can describe afterwards. This image names the version, so every instance of a given build is running exactly the same code as every other.

Scheduled report processing is already running. It is what keeps your dashboard fast as traffic grows, it is pointed at your own instance, and it keeps working after you associate a domain name.

Exclusive Fixes and Resolutions by Elyxia Global Limited:

• Ready to Use the Moment You Sign In: Matomo is installed, your administrator account exists and your first site is created before you open the page. Matomo publishes no command line installer, so images built the usual way hand you an eight step browser setup wizard instead.
• Your Database Is Closed to the Internet: the database runs on a private network inside the instance with no published port. Images built the usual way leave it listening on every network interface, with only a firewall rule between it and the internet.
• Report Processing Points at Your Own Site: scheduled report processing runs against your instance and keeps running after you attach your own domain name. Built the usual way, the scheduled job is written with the address of the machine that built the image, which is not yours.
• Private Files Stay Private: your configuration file, which holds the database password and the key that signs every sign-in, is refused over the web, along with the cache and internal directories. Only your pages and the tracking endpoint answer.
• Attaching Your Domain Does Not Take the Site Down: Matomo refuses any request arriving under a name it has not been told to trust. Our domain tool adds your domain to that list and keeps the internal name, so the site stays reachable and your reports keep processing.

Use your own domain name with a free SSL certificate. One command requests a Let`s Encrypt certificate, renews it automatically, and redirects HTTP to HTTPS.

The instance needs only three inbound ports: 22 for SSH, 80 and 443 for Matomo and certificate issuance. This image does not include a local mail server, so Matomo sends through an SMTP server that you provide, configured under Administration, System, General settings.

Disclaimer: The respective trademarks mentioned in the offering are owned by the respective companies. We do not provide the commercial license of any of these products. Many of the products have a free, demo, or open source license as applicable. Elyxia Global Limited provides image-related support, migration and plugin development, drop us an email at support@elyxia.uk .