Derek Coleman & Associates Inc logoDerek Coleman & Associates Inc

Home / Docs

Product documentation

Official install, configuration, troubleshooting, and security documentation for Derek Coleman & Associates Inc hardened images across the AWS, Google Cloud, Azure, and Oracle Cloud marketplaces. If a marketplace listing sent you here, you're in the right place.

NGINX

NGINX Web Server (Hardened)

The world's most-deployed web server and reverse proxy, hardened for production.

Install · Configure · Troubleshoot · Security

MySQL Community Server

MySQL Community Server (Hardened)

MySQL Community Server locked to loopback with socket-authenticated root — no root password exists.

Install · Configure · Troubleshoot · Security

PostgreSQL

PostgreSQL 16 (Hardened)

PostgreSQL 16 configured the way DBAs expect: local-only until you decide otherwise.

Install · Configure · Troubleshoot · Security

Apache Kafka

Apache Kafka (KRaft, Hardened)

Single-node KRaft Kafka for evaluation and small pipelines — no ZooKeeper, no exposure by default.

Install · Configure · Troubleshoot · Security

HAProxy

HAProxy (Hardened)

The standard TCP/HTTP load balancer, shipped safe: stats local-only, frontends yours to declare.

Install · Configure · Troubleshoot · Security

OpenSearch

OpenSearch (Hardened)

Search and analytics engine, loopback-bound with the demo-credential trap removed.

Install · Configure · Troubleshoot · Security

ClickHouse

ClickHouse (Hardened)

Column-store analytics at silly speed, from the official repo, local-only by default.

Install · Configure · Troubleshoot · Security

etcd

etcd (Hardened)

The Kubernetes-grade key-value store, single node, loopback-only, fresh member on first boot.

Install · Configure · Troubleshoot · Security

Meilisearch

Meilisearch (Hardened)

Delightful search API with a per-instance master key minted on your first boot — never ours.

Install · Configure · Troubleshoot · Security

Valkey

DCA Hardened Key-Value Store — for Valkey™

Valkey 9.1 on loopback with protected mode on and a password generated on each VM's first boot — none ships in the image.

Install · Configure · Troubleshoot · Security

Keycloak

DCA Hardened Identity Provider — for Keycloak™

Keycloak 26.8 in production mode, console on loopback, and an administrator plus realm keys created on each VM's first boot — none ship in the image.

Install · Configure · Troubleshoot · Security

OpenBao

DCA Hardened Secrets Manager — for OpenBao™

OpenBao 2.7 initialized on each VM's first boot with its own Shamir unseal keys, root token and TLS certificate, behind a loopback TLS listener.

Install · Configure · Troubleshoot · Security

RabbitMQ

DCA Hardened Message Broker

An AMQP message broker based on the open-source RabbitMQ software 4.3 on Erlang/OTP 27: every listener on loopback, a per-VM Erlang cookie and administrator, and no guest account.

Install · Configure · Troubleshoot · Security

Jenkins

DCA Hardened CI Server — for Jenkins®

Jenkins® LTS 2.580 with 70 pinned, checksum-verified plugins, the web UI on loopback, and the setup wizard kept: the unlock password and keys are generated on each VM's first start.

Install · Configure · Troubleshoot · Security

Azure Marketplace deployment? Every Azure offer also has a quick-start page with first-boot credential steps. Product not listed here yet? Email support@dcassociatesgroup.com — the docs set is expanding weekly.