Overview
This AMI runs the Trilium Notes server (the community-maintained TriliumNext fork of Trilium) on Ubuntu 24.04 LTS. The container image, triliumnext/trilium, is pinned to v0.106.1 and baked into the AMI, so first start does not depend on a registry. Trilium and TriliumNext are independent projects and Perimattic is not affiliated with them.
Why Trilium?
Trilium builds a personal knowledge base as a tree of notes. Notes can be rich text, Markdown, code, diagrams and more; a note can sit in several places in the tree, notes can be linked, tagged and searched, protected notes are encrypted, and notes can be scripted. The server also lets the Trilium desktop app and mobile apps sync with it.
What Perimattic adds
Pinned, tested version: the image is fixed to v0.106.1, not 'latest', so a rebuild never changes the application behind your back.
First-run page closed for you: a fresh Trilium shows a setup page, and then a set-password page, to whoever opens the site first. During first-login setup this AMI creates the empty notes database and sets a random 24-character password through Trilium's own setup and set-password endpoints, then checks that those endpoints are refused, that a wrong password is refused and that an anonymous request is refused, all before the site is published. There are no default or shared credentials in the image.
HTTPS: Apache is configured as a reverse proxy, with WebSocket support, and a free Let's Encrypt certificate is requested for your domain with certbot. Trilium listens only on the loopback interface.
Patched base: Ubuntu 24.04 LTS built through an automated EC2 Image Builder pipeline, with security updates applied at build time.
What is public, and limits
Trilium has one password and no user names or sign-up. Nothing is readable without the password unless you publish it: a note you mark as shared is served to anyone with its link. Protected notes are encrypted in the database; all other notes are stored unencrypted in the data directory, so protect the volume and its snapshots. The web app can check for newer releases; you can switch that off in Options.
Licence
TriliumNext/Trilium is released under the GNU Affero General Public License v3.0 (AGPL-3.0); this AMI runs the unmodified upstream image.
Getting Started Launch the AMI and open ports 22, 80 and 443 in the security group SSH in and answer the setup prompts (domain and admin email) Open https://your-domain and sign in with the password printed at the end of setup To sync a desktop app, point it at your domain with the same password
A domain name with an A record pointing at the instance is required, because the site is served over HTTPS. Trilium uses about 150 to 170 MB of memory, so a t3.small (2 GB) is a comfortable starting size.
This AMI is built and supported by Perimattic.
Book a free setup consultation at https://cal.com/gaurav-pareek-perimattic/marketplace-setup-consultations or email us at aws-support@perimattic.com .
Support Managed and supported by Perimattic, a cloud infrastructure company with 13+ years of experience serving global clients. We offer free setup assistance, custom integrations, infrastructure consulting, and 24/7 support.
Highlights
- Trilium Notes v0.106.1 (AGPL-3.0, TriliumNext) pinned and pre-installed: a hierarchical, searchable, scriptable notes server that desktop apps can sync with.
- Secure first login: the notes database and a random 24-character password are created through Trilium's own setup endpoints before the site is published, so nobody can claim the first-run page. HTTPS through Apache and Let's Encrypt.
- Built on patched Ubuntu 24.04 LTS and supported by Perimattic: free setup assistance at aws-support@perimattic.com.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
- ...
Dimension | Cost/hour |
|---|---|
t3.small Recommended | $0.03 |
t3.micro | $0.03 |
c3.2xlarge | $0.03 |
c3.4xlarge | $0.03 |
c3.8xlarge | $0.03 |
c3.large | $0.03 |
c3.xlarge | $0.03 |
c4.2xlarge | $0.03 |
c4.4xlarge | $0.03 |
c4.8xlarge | $0.03 |
Vendor refund policy
For any questions or concerns, please contact: Perimattic.com Email: aws-support@perimattic.com
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Initial release.
- Application: Trilium Notes v0.106.1 (container image pinned, baked into the AMI).
- Base: Ubuntu 24.04 LTS, fully patched at build time, built by an automated EC2 Image Builder pipeline.
- TLS: Apache reverse proxy with a Let's Encrypt certificate requested by certbot at first login.
- Credentials are generated on the instance at first login; none are present in the image.
- The notes database is created and a generated 24-character password is set during first-login setup through Trilium's own setup endpoints; setup verifies that those endpoints are closed and that wrong-password and anonymous requests are refused before the site is published.
- Application: Trilium Notes v0.106.1 from TriliumNext/Trilium (AGPL-3.0, unmodified upstream image, pinned). Trilium has one password and no sign-up.
- Data: /opt/app/data (document.db); protected notes are encrypted, other notes are not.
Additional details
Usage instructions
-
Launch an Instance
From AWS Marketplace, click Continue to Subscribe and then Continue to Configuration to launch the AMI.
-
Choose the Recommended Instance Type
t3.small (2 GB of memory) is the recommended starting size: Trilium uses about 150 to 170 MB. Choose t3.medium or larger for very large note collections.
-
Configure Security Group
Allow inbound traffic on the following ports:
- 22 (SSH) - terminal access for setup
- 80 (HTTP) - needed to validate your domain for the TLS certificate
- 443 (HTTPS) - access to Trilium Notes
-
Point a domain at the instance
Create a DNS A record (for example notes.example.com) pointing to the instance's public IP before you log in.
-
Connect to the Instance
ssh -i <your-key.pem> ubuntu@<public-ip>
-
First-Login Setup
The first SSH login runs a guided setup:
- Prompts for your domain and admin email and checks the DNS A record
- Generates a random 24-character password on your server
- Starts Trilium, creates the empty notes database and sets the password through Trilium's own setup endpoints
- Checks that the setup endpoints are closed, that a wrong password and anonymous requests are refused
- Configures Apache as an HTTPS reverse proxy and requests a Let's Encrypt certificate
- Prints the URL and the password; they are also stored in /opt/app/access.txt (root only)
If a step fails, fix the problem shown and log in again: the setup resumes where it stopped.
-
Access Trilium Notes
Open https://<your-domain> and enter the generated password (view it again with: sudo cat /opt/app/access.txt). Trilium has one password and no user names. Change it in Options > Password if you wish.
-
Credentials
Generated on your server, never shared between customers. View them again with:
sudo cat /opt/app/access.txt
-
Manage the Services
cd /opt/app sudo docker compose ps sudo docker compose restart
Trilium has a single password and no sign-up. Only notes you mark as shared are readable without it. Notes live in /opt/app/data (document.db); back it up or snapshot the volume before upgrades.
Thank you for subscribing.
Need Support or Customization? Perimattic's team can help with setup issues, custom features and integrations:
Email us: aws-support@perimattic.com WhatsApp: +91-92142 66896 Learn more: <www.perimattic.com >
We offer free setup assistance, custom development and integrations, and infrastructure consulting.
Resources
Support
Vendor support
Support by Perimattic
Perimattic provides 24/7 support for all AWS Marketplace products. Our team has 13+ years of cloud infrastructure expertise serving global clients.
Contact Channels: Email: aws-support@perimattic.com WhatsApp: +91-92142 66896 Website: <www.perimattic.com >
What We Help With: Initial setup and configuration assistance (free) Troubleshooting connectivity, performance, and backup issues Custom development and integrations Infrastructure consulting and architecture review Migration planning from other solutions Automation solutions and scaling guidance
Instance Sizing Guidance: t2.medium or t3.medium: Development environments, small applications m5.large: Production workloads with moderate traffic m5.xlarge: High-traffic production deployments and larger datasets
For workload-specific sizing recommendations, contact our team for a free consultation.
Refunds and Issues: If you experience any issues or need to request a refund, contact us at aws-support@perimattic.com and we will respond promptly.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.