
- AWSAvailable on Amazon Web Services
- Azure· soonComing soon on Microsoft Azure
- GCP· nextGoogle Cloud is next on the roadmap
ERPNext ERP with Indian GST
ERPNext 16.52.1 on Frappe 16.54.0 with India Compliance 16.11.0, MariaDB 10.11, nginx with HTTPS and Webmin on Ubuntu 24.04 LTS. Run accounting, invoicing, inventory, purchasing and CRM with GST invoices (CGST, SGST and IGST), GSTIN checks, 18,000+ HSN and SAC codes, and GSTR-1, GSTR-3B and HSN summary reports. The image ships with no sample company or invoices: the first sign-in opens the setup wizard, with India, INR and the Asia/Kolkata time zone preselected.
- Version
- v16.52.1
- Operating system
- Ubuntu 24.04 LTS
- Architecture
- x86_64
- Support
- Email support
What's installed
Every package and version on the image. Nothing else is installed.
- ERPNext 16.52.1
- Frappe 16.54.0
- India Compliance 16.11.0
- Python 3.14.10
- MariaDB 10.11.14
- Node.js 24.22 LTS
- nginx 1.24.0
- Webmin 2.670
LicensingOpen source (GPL-3.0), no licence key required
Deploy anywhere
ERPNext ERP with Indian GST on AWS.
Google Cloud is next on the roadmap. One clean-room build, one first-boot credential model, one patch cadence — identical on every cloud you run. Every identifier below is the real one; copy it and launch.
- AWSAvailable
Amazon Web Services
AMI · v16.52.1
AWS AMI IDShown for your region on the AWS Marketplace launch page once you subscribe.
- Released
- Root volume
- gp3 · 40 GiB
Instance types- t3.xlarge
- t3a.xlarge
- t3.large
- m6a.xlarge
Regions34 regions· show all· hide
- us-east-1
- af-south-1
- ap-east-1
- ap-east-2
- ap-northeast-1
- ap-northeast-2
- ap-northeast-3
- ap-south-1
- ap-south-2
- ap-southeast-1
- ap-southeast-2
- ap-southeast-3
- ap-southeast-4
- ap-southeast-5
- ap-southeast-6
- ap-southeast-7
- ca-central-1
- ca-west-1
- eu-central-1
- eu-central-2
- eu-north-1
- eu-south-1
- eu-south-2
- eu-west-1
- eu-west-2
- eu-west-3
- il-central-1
- me-central-1
- me-south-1
- mx-central-1
- sa-east-1
- us-east-2
- us-west-1
- us-west-2
5-day free trial, then from $0.03/hr software charge (larger instance sizes cost more) plus your own EC2 costs, billed by AWS.
Subscriptions are open to AWS India (AISPL) accounts. Outside India? Ask us for a private build.
Getting started
From launch to signed in, step by step.
Subscribe on AWS Marketplace and launch in your region with TCP
22,80and443open (keep9000closed).Wait up to 15 minutes for first boot, then SSH in as
ubuntuwith your key pair and runsudo pc-credentials showto read this instance's random passwords (they are not the instance ID).Open
https://<instance-public-ip>/, accept the one-time self-signed certificate warning and sign in asAdministratorwith theerpnextpassword. The setup wizard creates your own company; add your GSTIN under GST Settings afterwards.Webmin is local only: run
ssh -i key.pem -N -L 18000:127.0.0.1:8000 ubuntu@<instance-public-ip>, then openhttp://localhost:18000/and sign in asadminwith thewebminpassword.Change passwords with
sudo bash /home/ubuntu/iscripts/pass_erpnext.shorpass_webmin.sh; check the server withsudo systemctl is-active nginx mariadb supervisor webmin. Live GST portal, e-invoice and e-way bill filing needs your own eligible credentials.Back up the application with
sudo pc-backup create /var/backups/application.tar.gzand copy the file off the server.
Security posture
What this image does and does not ship with, one fact per line.
Clean-room build on Canonical's official Ubuntu 24.04 LTS image: ERPNext, Frappe and India Compliance come from their official repositories, and nothing is copied from any third-party image.
MariaDB listens only on the server itself.
No password or key ships in the image: on first boot every instance creates its own random passwords, HTTPS certificate and server keys, which you read over SSH with `sudo pc-credentials show`.
Webmin listens only on the server itself and is reached through an SSH tunnel, SSH is key-only, and build-time SSH keys, host keys, machine ID, shell history and logs were removed before imaging.
Replace the self-signed certificate with a trusted one before production use, and restrict port 22 to trusted IP ranges in your security group.