PostGraphile on Ubuntu 24.04 LTS

PostGraphile builds a powerful, secure and performant GraphQL API from a PostgreSQL schema in seconds. It introspects your tables, views, foreign-key relationships and functions and generates a complete GraphQL API, with no resolvers to write and no schema to maintain by hand, plus a built-in Ruru GraphiQL IDE for exploring and running queries in the browser.

This image delivers PostGraphile fully installed on Node.js and reverse-proxied behind nginx, backed by a bundled PostgreSQL database, so a working GraphQL API is running within minutes of launch, with no manual Node, database or reverse-proxy setup. PostGraphile runs in a production posture, bound to the loopback interface, and a demo schema of related tables, a view and a function is seeded so the generated API and the IDE are populated and immediately queryable on first boot. Point it at your own schema whenever you are ready by editing the configuration and restarting the service.

Because PostGraphile has no built-in login, exposing it directly would be unsafe. This image is hardened for that. The entire surface, both the Ruru IDE and the GraphQL endpoint, is served through nginx behind an HTTP Basic Auth gate whose password is generated uniquely and at random on the first boot of every VM, so no shared or default credential ever ships in the image. Crucially, the GraphQL API connects to PostgreSQL as a dedicated least-privilege role that is granted only the demo schema and is never a superuser and never the table owner, so the API cannot reach beyond the data it is meant to serve. An unauthenticated health endpoint is provided for load-balancer probes.

Systemd manages PostGraphile, nginx and PostgreSQL for automatic restarts and clean logging, the OS is fully patched at build time and continues to receive unattended security updates, and 24/7 cloudimg support is included.

This is a repackaged open source software product with additional charges for cloudimg support services. PostGraphile is distributed under the MIT License. All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.