SQLPage on Ubuntu 24.04 by cloudimg

SQLPage on Ubuntu 24.04 by cloudimg

SQLPage builds data driven web applications entirely in SQL. It is a single compiled binary that reads `.sql` files from a directory, runs them against a database, and renders each result set using a library of pre made web components.

The whole model fits in one sentence: a query whose first column is called `component` selects a component, and the remaining columns are that component's properties. Return `'table' AS component` and you get a sortable, searchable table. Return `'chart' AS component` and you get a chart. There is no HTML to write, no JavaScript framework to learn, no package manager, and no build step. You edit a `.sql` file and reload the page.

That makes SQLPage a fast way to put an interface in front of data that already lives in a database: an internal admin panel, an operational dashboard, a reporting page for a team that knows SQL but does not write front end code, or a prototype you can show someone the same afternoon.

### What this image gives you

• SQLPage 0.45.0, the official upstream release binary, pinned by sha256 content hash and tied to the exact upstream commit the signed release tag points at
• PostgreSQL 16, bound to the loopback interface only, with a role password generated per VM on first boot
• A working four page example application over a demo dataset, so the appliance shows what it does the moment it finishes booting, with nothing to configure first
• An nginx access gateway on port 80, installed as a host package so unattended security upgrades keep the internet facing component patched
• A shipped dependency licence inventory covering all 552 crates in the pinned dependency tree

### Secure by construction

SQLPage has no built in authentication for the pages it serves, because authentication is something the page author writes in SQL. This image therefore treats it as unauthenticated and puts a fail closed gateway in front of it. nginx is default deny at server scope, so every route inherits the gate, including any page you add later. SQLPage and PostgreSQL both bind the loopback interface only, so the gateway is the sole way in.

Nothing is baked into the image. The gateway password and the database password are both generated on the customer's own machine at first boot, and the gateway will not start until first boot has proved, against a throwaway listener using the real credential, that an anonymous request is answered with 401 and that a one character change to the password is rejected. A misconfigured appliance is unreachable, never open.

### Licensing

SQLPage is MIT licensed and free. The cloudimg charge covers packaging, security patching, image maintenance and 24/7 expert support.