NginxProxyManager-CrowdSec
This is a drop in replacement for jlesage/nginx-proxy-manager This fork includes the OpenResty Crowdsec Bouncer Please see the crowdsec_support branch for the…
Platform availability
Available on 1 of 9 platforms
- Unraid
- TrueNAS (not listed)
- Umbrel (not listed)
- ZimaOS (not listed)
- Proxmox (not listed)
- Helm (not listed)
- Mac (not listed)
- Windows (not listed)
- Linux (not listed)
Health score?A 0-100 score computed nightly from four factors: maintained (40%: recent commits and steady activity), popular (25%: GitHub stars, log scale), easy to install (20%: platforms, install notes, setup guides, Docker image) and light to run (15%: minimum RAM, ARM support). When the source code has been checked, a fifth factor, security check (20%: automated scan for committed secrets, unsafe desktop-app settings, known-vulnerable dependencies and project hygiene; any serious finding caps it at 20), is added. Factors without data are left out and the rest are rescaled.
46/100 Fair
- Maintained
- No data
- Popular
- No data
- Easy to install
- 351 install platform, install notes, Docker image
- Light to run
- 602 GB minimum RAM, runs on ARM
Based on 2 of 4 factors.
Availability: platform listings confirmed today, links checked 5 days ago
No GitHub repository data collected yet.
Resources & Compatibility
Minimum requirements: 2 GB RAM, 1 CPU core(s). ARM (e.g. Raspberry Pi) is supported.
Checked 15 days ago - source: Docker Hub image tags and published docs
First-install notes
- Let the first start finish before login On first run, the app creates the default admin account and settings by itself. If the UI does not appear, check the logs because startup errors are retried every second and can leave you without a working login. source
- DNS challenge needs extra cert plugins If you use Let's Encrypt with a DNS provider challenge, make sure the app can install the matching Certbot plugin over the network. Without that plugin, it cannot prove domain ownership, so certificates cannot be issued or renewed automatically. source
- Backend API uses port 3000 The backend API listens on port 3000, which is like the app's internal control channel. If you need to reach the NPM API from another machine or container, make sure that port is reachable; otherwise API calls fail even when the website works. source
Fetched 15 days ago - each note links to its source
Variants
Alternatives (7)
- BunkerWeb - BunkerWeb is a self-hosted, open-source web application firewall and NGINX-based web server that protects services with secure-by-default s…
- Fossorial Pangolin - Open-source identity-based remote access platform using WireGuard, offering unified management, tunneled connections, granular access contr…
- Haproxy - HAProxy is a TCP proxy and a HTTP reverse proxy.
- Træfik Proxy - The Cloud Native Application Proxy Simplify networking complexity while designing, deploying, and operating applications.
- nginx-ui
- npmplus - NPMplus is an improved fork of Nginx Proxy Manager that provides a web interface for managing reverse proxy rules, SSL certificates, and ap…
- zoraxy - Beyond Reverse Proxy: Your Ultimate Homelab Network Tool - Reverse Proxy - Redirection - Geo-IP & Blacklist - Global Area Network - Web SSH…
Checked 12 days ago - source: AlternativeTo
Common questions
What should I do if the Nginx Proxy Manager web UI does not appear after the first start?
Let the first start finish before trying to log in. If the UI still does not appear, check the logs because startup errors are retried every second and can leave you without a working login.
Which port must be reachable for another machine or container to call the NPM API?
The backend API listens on port 3000. If that port is not reachable, API calls can fail even when the website works.
Can I create separate users who only manage their own proxy hosts?
Yes, Nginx Proxy Manager supports multiple users who can be configured to view or manage their own hosts. Full access permissions are also available.
Has anyone successfully used CrowdSec to monitor Nginx Proxy Manager logs in Docker?
One self-hoster reported setting CrowdSec up to monitor Nginx Proxy Manager logs via Docker. They said it appeared to be doing something, but they had not been able to test a manual ban from their own network.
Answers sourced from github.com, nginxproxymanager.com, www.reddit.com
Community
- better security for NGINX Proxy Manager exposed sites. (Docker) (reddit)
- r/selfhosted on Reddit: Guide - Crowdsec, Nginx Proxy manager ... (reddit)
- Nginx Proxy Manager + Crowdsec in Docker : r/selfhosted - Reddit (reddit)
- Any beginner guides to installing CrowdSec for Nginx Proxy ... - Reddit (reddit)
- r/selfhosted on Reddit: How do I install CrowdSec on my NGINX Proxy ... (reddit)
Collected 14 days ago - public community threads