One console to operate your entire fleet.
Forget maintaining ten scripts scattered across every AMI. imaxe discovers, installs and orchestrates specialized modules — TLS, mail, backups, monitoring — all idempotent, auditable and versioned.
No installers. No restarts. No surprises.
Each module is distributed from modules.imaxe.cloud, verified by SHA-256 and activated with an rename atomic.
Detect the host
Identifies the AMI, the region and the modules already active on the instance.
SHA-256
Downloads the module and checks its signature before touching anything on the system.
Atomic rename
Swaps the binary in a single operation: either it's there or it isn't — never halfway.
Auditable
Every action is logged and versioned, ready for review or rollback.
15 modules, a single binary
TLS
Issue and renew free <strong>Let's Encrypt</strong> certificates for your server and reload them without interrupting service. One command gets it going; from then on it renews itself.
View documentationSystem
Keeps the operating system <strong>up to date and properly set up</strong>: updates (and unattended upgrades), language, time zone, machine name and synchronized time. All with a handful of clear commands.
View documentationSSH
Manage your server's remote access without editing files by hand: <strong>authorized keys</strong>, <strong>host keys</strong>, active sessions and <strong>sshd hardening</strong>, all with a configuration check before reloading.
View documentationConfigure the server's <strong>outbound mail</strong> through a smarthost (SES, a corporate relay…) and confirm it works with a test send. One command sets it up; from then on, your system notifications actually go out.
View documentationAlerts
Publishes the instance's important notices —intrusions, a full disk, a service down— to a <strong>shared SNS topic</strong>. The operator and the other modules use it as their <strong>single channel</strong>: severity threshold, deduplication and a retry queue if SNS does not answer.
View documentationSecrets
Generates, reads and rotates the <strong>instance's secrets</strong> (passwords, passphrases, keys) with a CSPRNG and <code>0600</code> permissions. Idempotent across mass-produced AMIs: <code>generate</code> creates the secret only if it doesn't exist, and <code>get</code> gives clean output for a <em>pipe</em>.
View documentationFirewall
Check the status of <strong>ufw</strong>, block abusive IPs by hand, and open or close ports with a single command. Automatic bans are handled by <strong>fail2ban</strong>; this is for your manual blocks and port rules.
View documentationFail2ban
Check and manage <strong>fail2ban</strong> bans from a single command: see which jails are active, who is banned, ban or unban IPs by hand and unblock in a pinch. Without remembering the syntax of <code>fail2ban-client</code>.
View documentationInventory
Probes the machine and writes a <strong>readable inventory</strong> with the operating system, the installed software and its versions, the database and the imaxe product in <code>/etc/imaxe/info.yaml</code>. No secrets, no surprises: one command and you know exactly what you have.
View documentationLynis
Runs a <strong>CIS hardening</strong> audit on your server and returns an actionable report: a hardening index, the <strong>warnings</strong> to resolve and concrete suggestions, each with its <em>test id</em> so you know exactly what to touch.
View documentationIntegrity
Monitor <strong>file integrity</strong> with AIDE: it stores a reference snapshot (baseline) of the system and alerts you to any added, deleted or modified file. One command checks the state; you decide when to accept the changes as normal.
View documentationrkhunter
Scans the system with <strong>rkhunter</strong> for rootkits, backdoors and altered files, and gives you a clear summary of the <strong>warnings</strong>. Manages the properties baseline and keeps the signatures up to date with a single command.
View documentationClamAV
Scan files and directories for <strong>malware</strong> with the <strong>ClamAV</strong> engine, isolate what's infected in quarantine and keep the signatures current with <strong>freshclam</strong>. One command scans; another updates — no surprises.
View documentationAudit
Query <strong>auditd</strong> events and manage the <strong>CIS</strong> audit rules with readable commands — without memorizing the syntax of <code>auditctl</code> or <code>ausearch</code>. See who logged in, what was touched and which rules are loaded at a glance.
View documentationMemcached
Works out and applies the <strong>cache size</strong>, threads and connections that suit your instance, manages the <strong>SASL credentials</strong> and the <strong>TLS certificate</strong>, and shows the service status live — all without hand-editing <code>memcached.conf</code>.
View documentationDrama-free operations
Idempotent
Run the same command a thousand times: the result is always the same desired state.
Verified
SHA-256 signature on every module. Nothing is activated without confirming its integrity.
Versioned
Each module declares its version. Pin, update or roll back with precision.
Auditable
Structured logs of every action, ready for your SIEM or a post-mortem review.
Install imaxe on any AMI
It comes preinstalled on our images. On any other, a single command gets it running.