azukaar/Cosmos-Server
Cosmos Server
Cosmos-Server is a self-hosted server platform that combines an authentication gateway, a reverse proxy with dynamic rate limiting, and a Docker container orchestrator into a single management interface. It provides automatic HTTPS certificate management with wildcard support through DNS challenges, and secures self-hosted applications with token-based session management and plugin-based authentication middleware.
The platform distinguishes itself by integrating these capabilities into a unified system where the reverse proxy enforces authentication, rate limiting, and TLS termination before traffic reaches backend services. It includes a health-check and auto-recovery system that monitors service endpoints and automatically restarts failing containers, along with a dynamic rate-limiting engine that adjusts per-client limits in real time and applies exponential backoff or bans for abusive patterns.
Cosmos-Server handles the full lifecycle of TLS certificates via the ACME protocol, automates DNS record creation and deletion for domain validation, and manages Docker container deployment with networking, volume mounts, and restart policies. It also offers programmatic server management through SDKs in JavaScript, TypeScript, or Go, as well as a Terraform provider for infrastructure-as-code deployments.
Features
- Self-Hosted Infrastructure - Hosts personal and business data on self-managed infrastructure, restoring ownership and privacy without sacrificing convenience.
- Self-Hosted Server Platforms - Ships a unified self-hosted server platform combining authentication, reverse proxy, rate limiting, and container orchestration.
- Centralized App Authentication Layers - Adds user login, token management, and access control to applications using a ready-to-use centralized authentication system.
- Self-Hosted Authentication Gateways - Provides a self-hosted authentication gateway that adds login, token management, and access control to applications.
- Docker Container Orchestrators - Manages the full lifecycle of Docker containers with networking, volume mounts, and restart policies.
- Containerized Service Orchestration - Deploys and manages Docker containers with automated networking, volume mounts, and restart policies.
- Reverse Proxies with Integrated Security - Routes all internal traffic through a central proxy that enforces authentication, rate limiting, and TLS termination before reaching backend services.
- Self-Hosted Server Platforms - Ships a unified self-hosted server platform combining authentication, reverse proxy, rate limiting, and container orchestration.
- DNS Record Automations - Automates DNS record creation and deletion for domain validation during certificate issuance, supporting multiple DNS provider APIs.
- DNS Challenge Automation - Automates DNS record creation and deletion for ACME DNS challenges to issue wildcard TLS certificates.
- Automatic Container HTTPS - Generates and renews TLS certificates for applications with wildcard support through DNS challenges.
- Rate Limiting & Abuse Prevention - Protects APIs by dynamically adjusting rate limits and throttling or banning abusive clients based on behavior.
- Endpoint Protection Measures - Adjusts rate limits dynamically, throttles abusive users, and enforces bans to safeguard server resources without manual tuning.
- DNS Challenge Automation - Automates DNS record creation and deletion for ACME DNS challenges to issue wildcard TLS certificates.
- Self-Hosted Security Tools - Applies enterprise-grade security measures to protect applications and data on a personal server.
- TLS Certificate Configuration - Obtains and renews TLS certificates from Let's Encrypt automatically, including wildcard certificates via DNS challenges.
- Session Token Issuance - Issues signed JSON Web Tokens for user sessions with configurable expiration and refresh mechanisms to maintain secure access.
- User Authentication Systems - Handles user login, token storage, and access checks so applications do not need to build their own authentication system.
- Dynamic Rate Limiters - Adjusts per-client rate limits in real time by tracking request frequency and applying exponential backoff or bans for abusive patterns.
- ACME Certificate Lifecycle Managers - Manages the full lifecycle of TLS certificates via the ACME protocol with automatic renewal and wildcard DNS challenge resolution.
- Auto-Recovery Systems - Monitors service endpoints with periodic probes and automatically restarts or reconfigures failing containers to maintain uptime.
- API Rate Limiting - Adjusts rate limits based on user behavior and throttles or bans abusive clients to maintain API health.
- Authentication Middlewares - Inserts authentication checks as middleware layers that validate tokens and session data before any application logic executes.
- Programmatic Server Setups - Configures and deploys servers programmatically using SDKs in JavaScript, TypeScript, or Go, or through a Terraform provider.
- Dynamic Rate Limiting - Applies dynamic rate limiting that adjusts per-client limits in real time and bans abusive patterns.
- Dynamic - Applies dynamic rate limiting that adjusts per-client limits in real time and bans abusive patterns.
- Automated Server Maintenance - Runs routine server tasks and deployments automatically to reduce manual intervention and maintenance effort.
- Automated Server Configurations - Runs routine server tasks intelligently without manual intervention, simplifying ongoing administration.
- Plugin-Based Authentication Middleware - Implements plugin-based authentication middleware that validates tokens and sessions before application logic executes.
