imagor
imagor is available in the NetActuate Marketplace as a one-click, open-source appliance you can deploy into any NetActuate PoP. Fast, secure image processing server: resize, crop and convert images on the fly. It is grouped under the Media & Streaming category.
What It Does
imagor is an open-source, self-hosted image processing server built on libvips, one of the fastest image processing libraries available. It resizes, crops, smart-crops, rotates, watermarks, filters and converts images on the fly, and it is URL-compatible with Thumbor so existing image URLs keep working.
Key features
- On-the-fly resize, crop, smart-crop, fit-in, padding, rotate and flip
- Filters for quality, format, blur, sharpen, grayscale, brightness, contrast, watermark and more
- HMAC-signed URLs (IMAGOR_SECRET) so only your application can request transforms
- Built on libvips for fast, low-memory processing of JPEG, PNG, WebP, AVIF, GIF, TIFF and animated images
- Loads source images over HTTP(S); headless and stateless, ideal behind a CDN or cache
- Single self-contained container, no external database to run
Use cases
- A self-hosted image CDN origin that generates responsive image variants
- Replacing a hosted Thumbor or SaaS image service with infrastructure you control
- Media and publishing sites that need thumbnails and derivatives on demand
Why run it on the NetActuate edge Running imagor in a PoP near your audience shortens the path for image delivery and keeps transformation and your source media on infrastructure you control. Pair it with a cache in front and it becomes a fast, private image CDN origin.
Deployed from the NetActuate marketplace, imagor boots pre-configured from your seeded values: the IMAGOR_SECRET signing secret is set at first boot (generated into your secret list if you do not provide one), so signed URLs work immediately. The service serves plain HTTP on the instance IP and exposes /healthcheck; put TLS termination in front for public use.
Vendor and Project
imagor is an open-source project, offered here under the Open Source listing with best-effort community support.
- Project home: github.com
NetActuate supports the underlying infrastructure. Application-level support follows the listing SLA class (open-source, best effort).
Sizing
| vCPU | RAM | Disk | |
|---|---|---|---|
| Minimum | 1 | 1 GB | 20 GB |
| Recommended | 2 | 2 GB | 40 GB |
No VPU (hardware acceleration) is required for this appliance. Choose a size at deploy based on your expected load.
Configuration Fields
When you deploy, you provide these fields. They are written into the appliance at first boot.
| Field | Required | Default | Notes |
|---|---|---|---|
| Signing secret | No | generated | HMAC signing secret for imagor URLs (wired to IMAGOR_SECRET). Generated for you and stored in your secret list if not provided; never echoed back. Any printable, non-whitespace characters are accepted (8 to 128 chars). Stored write-only in your account secret list |
| HTTP port | No | 8000 | Published host port for the imagor HTTP endpoint (default 8000). |
Using the Appliance
Deploy in minutes
- Check it is up. Browse to http://YOUR_VM_IP:8000/healthcheck ; it returns HTTP 200 when imagor is serving. The instance also serves a built-in landing page at http://YOUR_VM_IP:8000/ .
- Sign your image URLs. imagor requires HMAC-signed URLs. Compute the signature with your signing secret (IMAGOR_SECRET, from your secret list) over the URL path, per https://docs.imagor.net/ . For example a signed request looks like http://YOUR_VM_IP:8000/<hash>/300x200/https://example.com/photo.jpg .
- Point your app at it. Use imagor as the image origin for your site or CDN and request resized, cropped or converted variants on demand.
Exposure posture: the appliance serves plain HTTP on the seeded port. Unsigned or wrongly-signed image requests are rejected (HTTP 403) because a signing secret is set. For public/production use, put a TLS-terminating proxy (or a real hostname with a certificate) and ideally a cache in front.
FAQ
Is there a software license fee? No. imagor is open source and free to run. You pay only for the NetActuate infrastructure and bandwidth.
Where is the web interface?
On port 8000 at path /healthcheck by default.
Who supports it? NetActuate operates the underlying infrastructure. The application itself is community-supported open source (best-effort SLA class).
Version and Changelog
| Version | Status | Released |
|---|---|---|
| 1.9.1 | Current (default) | 2026-07-13 |
Deploy
- Deploy in the portal: Deploy imagor
- View the listing: portal.netactuate.com/platform/marketplace/l/imagor
- Public listing: netactuate.com/marketplace/imagor
Need Help?
Contact support@netactuate.com or open a support ticket from the portal.