Awesome GitHub RepositoriesReverse Proxy Integrations

Headscale is a self-hosted control plane for private mesh networking that enables the creation of secure, encrypted peer-to-peer networks. By acting as a centralized coordination server, it manages device authentication, cryptographic key exchange, and network topology, allowing distributed infrastructure to communicate without relying on third-party services. It implements a zero-trust security architecture, verifying device and user identity before granting access to internal resources. The project distinguishes itself by providing a fully independent, self-hosted alternative for managing n

NetBird is a zero-trust networking platform that builds secure, encrypted peer-to-peer overlay networks using the WireGuard protocol. It functions as a software-defined perimeter, connecting distributed infrastructure across cloud environments and physical locations while hiding network resources from the public internet. By integrating with external identity providers, the platform enforces granular access control and identity-based segmentation for every user and device. The platform distinguishes itself through extensive automation and programmatic management capabilities. It provides a ce

Kuboard-press is a visual management interface for Kubernetes clusters that enables the orchestration of workloads and system objects without manual text file editing. It provides a centralized dashboard for importing and monitoring multiple clusters, using a visual interface to manage namespaces and containerized workloads. The project differentiates itself through hierarchical microservices visualization, which maps flat cluster workloads into a layered structure to represent architectural relationships. It also includes dedicated container operation tools for accessing logs, opening intera

Calibre is a comprehensive suite for digital library management, serving as a centralized hub for organizing, converting, and editing e-book collections. It functions as a multi-purpose platform that combines a relational database for metadata tracking with a powerful processing engine capable of transforming document formats and restructuring internal markup. Beyond local management, the software acts as a content server, enabling users to host their libraries over a network for remote access and reading via standard web browsers. The project distinguishes itself through its deep extensibili

Gotify is a self-hosted notification server designed to centralize the receipt and dispatch of real-time messages. It provides a RESTful API and a WebSocket gateway, allowing users to programmatically send alerts and push notifications to connected clients. By maintaining a private infrastructure, the platform ensures full control over message history, data retention, and access management. The system distinguishes itself through a modular, plugin-based architecture that allows for the extension of core functionality, including custom HTTP endpoints and webhook event processing. It supports g

KeeWeb is a web-based password manager and vault that allows users to open and edit encrypted databases through a browser interface. It functions as a cross-platform tool for managing password vaults using the KeePass database format. The application provides a self-hosted password vault that can be deployed as a single HTML file or via Docker. It integrates with remote storage providers using OAuth to synchronize encrypted database files across multiple devices. The system includes capabilities for secure credential generation, two-factor authentication management through time-based one-tim

Online IDE powered by Visual Studio Code ⚡️

Gunicorn is a production-grade WSGI HTTP server designed for deploying Python web applications. It functions as a process manager that utilizes a pre-fork worker model, where a master process initializes the application and spawns multiple child processes to handle incoming requests in parallel. This architecture ensures high performance and stability by isolating application execution within persistent worker processes. The server distinguishes itself through its flexible concurrency models and robust process lifecycle management. It supports interchangeable worker types, including synchrono

ExternalDNS is a controller that automatically synchronizes Kubernetes resource states with external DNS providers. It monitors cluster resources such as services, ingresses, and gateway APIs to dynamically create and update DNS records, enabling automated service discovery and external traffic management. The project features a provider-agnostic interface that supports a wide array of cloud-managed vendors and on-premises providers, as well as an extension system for custom providers via webhooks and sidecars. It implements a reconciliation loop that uses resource annotations and custom reso

gh-proxy is an HTTP reverse proxy designed to accelerate the download of GitHub releases, archives, and project files. It functions as a gateway and content cache that forwards requests to GitHub servers to reduce latency and increase delivery speeds. The project provides specialized support for private repository proxying by extracting authentication tokens directly from the request URL. It also implements access control mechanisms, including the use of blocked user lists to restrict unauthorized proxy usage. Traffic management is handled through file size limits that redirect oversized req

Romm is a self-hosted game library manager and ROM management web interface. It serves as a central server for storing and categorizing game files and emulator firmware, providing a web-based browser to organize collections through automated library scanning and metadata retrieval. The project distinguishes itself by integrating a web-based emulator frontend that uses WebAssembly to play games directly in the browser. It further provides a game save synchronization server that uses SSH-based synchronization to transfer save states and progress between the server and registered handheld device

TrustedProxy is an HTTP proxy trust manager and Laravel middleware designed to validate request headers and manage session consistency for applications operating behind load balancers or reverse proxies. It serves as a request environment handler that ensures secure client IP detection and accurate URL generation. The system prevents header spoofing by allowing the definition of trusted IP addresses and ranges. It validates that incoming requests originate from authorized intermediaries before modifying the request object to reflect the original client IP and protocol. The project covers tra

100 Days of Code is a structured challenge framework and journal template designed to help participants build a consistent daily coding habit. At its core, it provides a forkable GitHub repository that individuals copy to their own account, giving them an immediate, pre-configured system for committing to code for at least one hour every day for 100 consecutive days. The project functions as both a personal accountability tool and a social motivation platform, with its architecture built around Markdown-based journal entries and a GitHub fork workflow that eliminates setup overhead. The frame

SpaceBarChat is an open-source, self-hosted chat server that implements the Discord client-server protocol, allowing existing Discord clients and bots to connect without modification. It provides a complete communication platform for real-time messaging, voice, and video, all running on your own infrastructure with data stored in a PostgreSQL database that automatically synchronizes its schema with the application source code. The platform is built on a three-service architecture that separates API, Gateway, and CDN processes, communicating via Unix domain sockets or RabbitMQ for coordination

FileBrowser is an open-source, self-hosted file management interface that runs as a single binary with no external dependencies. It provides a web-based interface for browsing, uploading, editing, and sharing files on a remote server, with a core architecture built on JWT-based stateless authentication and a rule-based path permission engine that controls access at the directory level. The project distinguishes itself through a comprehensive access control system that supports multi-provider authentication including OIDC, LDAP, external JWT, and two-factor authentication, alongside granular p

This project is an Ansible-based deployment tool that automates the setup of a fully configured Matrix homeserver using Docker containers. It orchestrates the entire Matrix server stack, including the homeserver itself, a PostgreSQL database, and reverse proxy integration with Traefik for automatic SSL certificate management, all from a single configuration file. The deployment supports connecting a Matrix installation to external messaging platforms like Discord, Slack, Telegram, and WhatsApp through dedicated bridges that run as isolated Docker containers. It also provides the ability to de

Serge is a self-hosted web chat interface for running large language models locally using the llama.cpp inference engine. It loads GGUF-format model files directly on your own machine, removing the need for internet connectivity or external API keys, and streams responses to the browser in real time via WebSocket connections. The project is packaged for containerized deployment using Docker and Docker Compose, with a Traefik reverse proxy that handles HTTP and WebSocket routing along with automatic TLS certificate management. Ready-made Kubernetes manifests are also provided, enabling deploym

The Snyk CLI is a command-line security scanner that detects known vulnerabilities across open-source dependencies, proprietary application code, container images, and infrastructure-as-code configuration files. It also serves as a platform management tool, allowing users to configure organizations, users, SSO, and reporting from the terminal rather than the web dashboard. The CLI integrates directly into development workflows, enabling scanning within IDEs, build pipelines, and version control systems. It implements static analysis with interfile data flow analysis to find complex security f

OpenPanel is a self-hosted product analytics platform designed for tracking user behavior and visualizing product metrics on private infrastructure. It provides a comprehensive system for collecting events across web, mobile, and server environments while ensuring complete ownership of data. The platform distinguishes itself through a privacy-first approach, utilizing cookieless event tracking and regional data residency to simplify regulatory compliance. It integrates large language models via the Model Context Protocol, enabling users to query behavioral data and analyze trends using natura

Colanode ist eine Local-First-Kollaborationsplattform, die für gemeinsam genutzte Dokumente, Chats und Datenbanken entwickelt wurde. Sie bietet eine selbstgehostete Suite für Team-Zusammenarbeit und Wissensmanagement, die es Benutzern ermöglicht, die volle Kontrolle über ihre Daten und Privatsphäre auf ihrer eigenen Infrastruktur zu behalten. Die Plattform zeichnet sich durch eine Synchronisierungs-Engine aus, die WebSockets für die Echtzeit-Datenübertragung nutzt, sowie durch einen Local-First-Ansatz, der sicherstellt, dass die Arbeit auch offline fortgesetzt werden kann. Sie integriert KI-gestützten Abruf durch vektorbasierte semantische Suche, was es Benutzern ermöglicht, Informationen basierend auf der Bedeutung über Dokumente und Nachrichten hinweg zu finden. Das System deckt ein breites Spektrum an Funktionen ab, einschließlich kollaborativer Rich-Text-Bearbeitung, hierarchischer Inhaltsmodellierung und strukturierter Datenbankverwaltung mit Ansichten wie Kanban-Boards und Kalendern. Es verwaltet Medien über einen S3-kompatiblen Dokumentenspeicher und organisiert Entitäten in flexiblen Eltern-Kind-Beziehungen. Die Software ist über Docker Compose oder Kubernetes mittels Helm-Charts bereitstellbar und unterstützt die Integration mit externen Reverse-Proxys für das Routing von Produktions-Traffic.