Self-Hosted Container Reverse Proxies

Express is a minimalist web server framework that provides a foundational runtime environment for building backend web APIs and applications. It operates through a central application object that orchestrates the entire request-response lifecycle, allowing developers to define routes, manage server settings, and process incoming HTTP traffic. The framework is defined by its middleware-based routing engine, which sequences request handlers and logic blocks to process traffic based on path patterns and HTTP methods. This architecture supports a highly modular approach, enabling the creation of isolated, reusable route handlers and mountable router instances. Developers can build hierarchical structures by nesting these routers, facilitating the organization of complex application logic into manageable segments. Beyond core routing, the framework includes a flexible template-driven view engine for rendering dynamic content and provides built-in support for serving static assets. It offers extensive capabilities for request and response manipulation, including parameter parsing, header management, and cookie handling. The system is designed to be extensible, allowing for the integration of third-party middleware and the modification of request and response objects to suit specific application requirements. The framework is installed via standard package managers and includes tools for generating project skeletons to accelerate application initialization.

This project is a comprehensive link management and marketing attribution platform designed for creating, tracking, and analyzing shortened URLs. It functions as a centralized hub for marketing analytics, providing tools to monitor link performance, visualize conversion funnels, and manage affiliate programs through a unified dashboard. The platform distinguishes itself by integrating advanced attribution modeling and partner management directly into the link infrastructure. It supports complex marketing workflows, including automated commission calculations, fraud detection, and payout distribution for affiliates, alongside granular traffic redirection based on device, location, or A/B testing requirements. By utilizing custom domains and reverse proxy configurations, it ensures reliable data collection that bypasses common browser-based tracking restrictions. Beyond core link operations, the system offers extensive programmatic capabilities, including a robust API, SDKs, and event-driven webhooks for real-time integration with external services. It also incorporates enterprise-grade administrative features such as multi-tenant workspace isolation, role-based access control, and single sign-on integration to support collaborative team environments. The platform is built to be deployed within private infrastructure, allowing organizations to maintain full control over their data and system configuration.

Nginx Proxy Manager is a containerized gateway controller that provides a graphical interface for managing web server routing, security certificates, and access control lists. It functions as a centralized dashboard for directing incoming web traffic to internal services, allowing users to map domain names to specific network ports without manual configuration file edits. The project distinguishes itself by automating the lifecycle of SSL certificates through integrated certificate authority clients and ACME challenges. It utilizes a dynamic routing engine based on high-performance web server platforms to modify traffic rules in real time, while an event-driven system monitors database changes to trigger configuration reloads without interrupting active connections. Beyond core routing, the platform supports network access control by implementing authentication layers and IP filtering directly at the gateway level. It maintains persistent state for proxy host definitions and security metadata using a lightweight relational database, ensuring consistent management of infrastructure across isolated backend containers.

FreshRSS is an open-source, self-hosted web feed aggregator designed to collect, organize, and display content from multiple websites in a single, centralized interface. It functions as a comprehensive reader for standard syndication formats, allowing users to track updates from various sources while maintaining full control over their data and privacy. The platform supports multi-user environments, enabling individual account management and personalized reading experiences. The application distinguishes itself through its robust synchronization and extensibility capabilities. It provides a standardized interface for external mobile and desktop clients to sync reading progress and subscription lists, ensuring a consistent experience across devices. Users can extend the core functionality through a hook-based system that allows for custom logic, UI modifications, and theme integration without altering the primary codebase. Additionally, the platform includes advanced content processing tools, such as web scraping and full-text extraction, to generate structured feeds from websites that lack native syndication. Beyond core aggregation, the system offers extensive tools for information management, including advanced search queries, automated filtering rules, and category-based organization. It handles background tasks for content retrieval and database maintenance, ensuring that feeds remain current and storage usage is optimized through configurable retention policies. The platform is built on a modular architecture that supports diverse deployment scenarios, including cloud hosting and reverse proxy configurations. The software is distributed as a self-hosted PHP application, providing comprehensive documentation for installation, server configuration, and administrative maintenance via both a graphical interface and command-line utilities.

v2rayN is a cross-platform graphical management suite designed to centralize the configuration and execution of multiple network proxy protocols. It functions as a unified control plane that abstracts heterogeneous proxy backends, allowing users to manage diverse network routing engines through a single interface. The platform distinguishes itself by providing a consistent management experience across Windows, Linux, and macOS, while orchestrating the lifecycle of independent proxy processes as child services. It supports specific configuration ecosystems, enabling users to organize and switch between different proxy standards while maintaining structured routing rules. Beyond basic connectivity, the software includes tools for defining complex routing logic and granular traffic steering. By utilizing local geographic database assets, it enables precise filtering and regional access control based on destination metadata. The system also coordinates auxiliary utilities and manages the translation of user-defined rules into the specific schema requirements of various underlying proxy engines.

Docmost is an open-source knowledge management system designed as a collaborative documentation platform for teams. It functions as an enterprise wiki that centralizes organizational information into structured, searchable workspaces, enabling users to create, organize, and share content through a hierarchical system of spaces and pages. The platform distinguishes itself by integrating artificial intelligence directly into the documentation lifecycle. It utilizes vector-based semantic search to allow for natural language queries across stored content and provides AI-assisted tools for drafting, summarizing, and refining documents. To support team workflows, it features a block-based editor for rich text authoring and visual diagramming, paired with real-time collaboration capabilities that synchronize changes across multiple users. The system is built for enterprise environments, offering granular access control, multi-factor authentication, and identity provider integration for centralized user management. It also includes programmatic access through a REST API, allowing for the automation of resource management and integration with external software tools. The platform supports flexible deployment with configurable storage backends and automated security certificate management. It is designed to be self-hosted, providing the necessary infrastructure to manage documentation security and lifecycle workflows within an organization.

Hiddify is a cross-platform proxy client designed to manage secure network connections and traffic routing across desktop and mobile operating systems. It functions as a unified proxy manager, providing a centralized interface to configure and control various network proxy protocols for encrypted and private internet access. The application distinguishes itself by integrating local loopback interception, which configures the operating system network stack to route traffic through a local port for granular filtering. It also serves as a self-hosted infrastructure tool, enabling users to automate the deployment of private proxy servers on remote infrastructure through simplified command-line initialization. The system maintains consistency across environments by synchronizing remote server states through declarative configuration files and utilizing an event-driven daemon to monitor proxy health and network state changes. It employs a shared bridge layer to interact with native system APIs and firewall rules, while bundling all necessary dependencies into a singular, self-contained executable package.

This project is a curated collection of deployment files and configurations for hosting a wide variety of open-source services on a home server. It primarily utilizes Docker and Docker Compose to automate the orchestration, lifecycle management, and deployment of containerized applications. The repository provides a comprehensive suite for self-hosted infrastructure, covering network management tools, media streaming, and home automation. It includes specialized configurations for securing internal services via reverse proxies, WireGuard VPN tunnels, and automated SSL/TLS certificate management. The project covers a broad set of capability areas, including system monitoring and observability, deduplicated data backup and recovery, and network traffic management. It also provides deployment patterns for asset tracking, AI-powered video surveillance, and game server administration. The implementation is primarily based on Shell scripts and YAML configuration files.

Shadowsocks-Windows is a desktop proxy manager that provides a graphical interface for configuring system-wide network routing. It functions as a local SOCKS5 or HTTP proxy server, intercepting outbound traffic through system-level injection to route requests through secure, encrypted remote tunnels. The application distinguishes itself through a modular architecture that supports plugin-based transport extensibility, allowing users to integrate external binaries for custom traffic obfuscation and specialized cryptographic protocols. It also enables high-availability networking by automatically rotating between multiple proxy servers based on real-time performance metrics, and supports multi-instance orchestration to manage independent proxy states and configurations simultaneously. Users can exercise granular control over network traffic through custom rule management, including the use of JavaScript-based auto-configuration files and geographic filtering to determine which requests bypass or traverse the proxy. The software further extends its utility by encapsulating connectionless datagrams into stream-oriented tunnels, ensuring that applications requiring UDP can function within the proxy environment.

XX-Net is a cross-platform desktop application that functions as a local proxy server and network traffic router. It intercepts outgoing network requests from a local machine and redirects them through encrypted tunnels to a distributed mesh of cloud-based nodes, facilitating secure and reliable access to external resources. The software distinguishes itself by providing a centralized management interface for coordinating complex proxy infrastructure. It employs rule-based traffic routing, allowing users to define custom logic based on destination addresses and protocols to determine the optimal path for data packets. This approach enables the circumvention of regional or institutional network restrictions while maintaining consistent connection stability. The application includes a comprehensive suite of tools for managing tunnel connections, listening ports, and remote server configurations. Users can adjust system settings, update schedules, and security credentials through a dashboard that supports dynamic configuration changes without requiring a full application restart.

Dawarich is a self-hosted location history manager and travel journaling platform. It functions as a personal travel archive that collects GPS coordinates and movement data, providing a private alternative to proprietary tracking services. The system utilizes a PostgreSQL geospatial database to store coordinates, visits, and custom geofence boundaries. The project distinguishes itself as a geospatial data converter and visualization tool, capable of transforming location history between formats such as GPX, KML, and GeoJSON. It allows users to organize GPS tracks and geotagged photos into named trips and interactive timelines, while offering tools to visualize route polylines, activity heatmaps, and global exploration maps. Broad capabilities include real-time and historical location tracking with transport mode detection, as well as quantitative travel statistics such as tax residency calculations and movement analysis. The system also supports photo geodata integration by extracting GPS metadata from image libraries to correlate visual memories with specific locations. The software supports self-hosting on private infrastructure with compatibility for both AMD64 and ARM64 server architectures.

Sing-box is a universal proxy engine and traffic router designed to manage complex network connectivity across multiple operating systems. It functions as a configuration-driven core that intercepts system-level traffic, allowing for transparent proxying through encrypted tunnels. By normalizing diverse network protocols into a unified interface, the engine enables consistent traffic forwarding and protocol translation regardless of the underlying environment. The project distinguishes itself through a declarative configuration pipeline that validates and merges modular settings into a unified internal state before execution. It employs a rule-based traffic dispatcher that evaluates incoming packets against hierarchical criteria to determine optimal routing paths dynamically. This is complemented by an asynchronous domain name resolution pipeline, which provides granular control over how network requests are mapped and filtered, ensuring that traffic handling remains both accurate and performant. Beyond its core routing capabilities, the platform includes a comprehensive security layer for managing encrypted connections, including support for advanced handshake options and certificate validation. It also provides tools for monitoring real-time traffic and connection status, alongside flexible management of routing rule sets that can be sourced from local or remote locations. The software is designed to be installed as a background service, providing a stable and scalable infrastructure for controlled network communication.

nginxconfig.io is a web-based NGINX configuration generator designed to build and optimize server configuration files through a visual interface. It functions as a management tool to help avoid manual syntax errors when defining server blocks. The project provides specialized utilities for implementing Gzip and Brotli compression, configuring caching strategies, and managing the deployment and renewal of SSL certificates. It also includes a reverse proxy configurator for defining routing rules and backend application server mappings to distribute network traffic. Additional capabilities cover web server security hardening through the application of encryption profiles and security-focused HTTP headers to protect against common vulnerabilities.

This application provides a comprehensive interface for managing network traffic through a core proxy engine. It supports multiple traffic interception methods, including system-wide proxy settings and virtual network interfaces, allowing users to route TCP and UDP traffic based on specific domain, IP, port, or process criteria. The system facilitates complex network configurations through proxy chaining, rule-based routing, and the aggregation of multiple remote subscription sources. Beyond core networking, the tool includes developer-focused utilities for configuration management and system diagnostics. Users can modify configuration objects using a sandboxed scripting engine or automate imports via URL-based protocols and custom response headers. The application also offers administrative service modes for elevated privilege management and provides tools for visual interface customization, including support for custom style sheets and icon management.

BabyBuddy is a self-hosted infant care tracking application designed for logging feedings, diaper changes, and growth metrics to monitor child development. It functions as a private data store for sensitive health and activity records, providing a containerized environment for managing childcare data across different hardware architectures. The system integrates with home automation hubs and provides a RESTful API to enable programmatic recording and querying of care data. It supports collaborative caregiver management, allowing multiple family members or professional caregivers to share access to logs and health records. The application covers a broad range of care tracking capabilities, including growth measurement monitoring for weight and height, activity duration tracking via stopwatches, and the generation of chronological activity timelines and care summaries. It also includes data portability through record import and export features. Deployment options include containerized images, virtual private servers, and home automation add-ons, with support for S3-compatible file storage and reverse proxy authentication.

Clash-rules provides a standardized, declarative system for managing network traffic routing across desktop and mobile proxy clients. It functions as a centralized configuration provider that uses structured rule sets to categorize outgoing requests, allowing users to define whether specific connections should be proxied, rejected, or routed directly. The project distinguishes itself through its comprehensive, curated rulesets that enable granular control over network behavior. By employing domain-pattern matching, CIDR-based network analysis, and application-specific signatures, it ensures consistent traffic management across diverse environments. It also supports automated synchronization, allowing proxy clients to fetch updated routing logic from external sources without manual intervention. The platform covers a broad range of traffic management capabilities, including regional content access, local network optimization, and malicious traffic filtering. These features allow for the systematic blocking of advertising and tracking domains while ensuring that private, local, and internal network resources bypass proxy tunnels to maintain direct connectivity.

This project is a comprehensive educational curriculum and resource for full-stack web development. It provides a structured collection of source code, implementation guides, and practical exercises designed to teach core front-end and back-end programming principles, including database connectivity and interface design. The repository serves as a practical guide for building integrated web applications using modern JavaScript frameworks. It demonstrates essential development patterns such as component-based user interface composition, reactive state management, and asynchronous data fetching. By providing complete project files, the resource enables learners to explore how different layers of a web application interact, from client-side rendering to server-side logic. The curriculum covers a broad range of technical capabilities, including performance optimization techniques like static site generation and request caching. It also addresses the modern development workflow by incorporating tools for hot module replacement, reverse proxy routing, and automated environment configuration. These examples help developers understand how to manage application processes and maintain consistent code quality throughout the development lifecycle.

Nginx is a high-performance HTTP server and reverse proxy designed to handle high-concurrency traffic through an efficient, event-driven architecture. It functions as a versatile traffic management gateway and content delivery accelerator, providing the infrastructure necessary to route client requests, balance loads across backend servers, and serve static assets with minimal resource consumption. The project distinguishes itself through a master-worker process model that separates configuration management from request processing, ensuring stable operations under heavy load. Its modular request pipeline and hierarchical configuration system allow for granular control over network behaviors, while shared memory zones enable efficient state synchronization across worker processes. These capabilities are complemented by advanced traffic shaping, including multi-stage rate limiting and burst request buffering, which protect backend services from traffic spikes. Beyond its core routing and serving functions, the software includes comprehensive tools for content caching, TLS termination, and dynamic application integration. It supports complex page composition through subrequest fetching and maintains high availability via active health monitoring of backend nodes. The system is extensible through a modular framework that allows for custom logic integration at both build and runtime. The software provides native support for Windows and Unix-like environments, offering command-line tools for operational management and diagnostic logging. Configuration is managed through a flexible, nested directive system that supports modular inheritance for complex application environments.

Baserow is a self-hosted, no-code relational database platform built on PostgreSQL. It provides a spreadsheet-like interface for structuring and managing data without writing code, while exposing all database resources via a REST API to support headless architectures. The platform distinguishes itself by integrating large language models and embedding servers to power AI assistants and automated data generation. It further extends its utility as a no-code application builder, allowing users to create custom internal portals, dashboards, and business tools using visual logic and managed data. The system covers a broad range of capabilities, including business process automation with visual triggers, collaborative workspace management, and flexible data visualization through kanban boards, calendars, and timelines. It also supports advanced extensibility via a plugin system for custom field types and view filters, and executes user-defined scripts within a secure webassembly sandbox. Deployment is supported across various environments using Docker Compose, Helm charts for Kubernetes, and cloud infrastructure templates.

Traefik is a cloud-native edge router and API gateway designed to manage service communication and traffic flow across distributed infrastructure. It functions as a dynamic service proxy that automatically discovers backend services and configures routing rules in real time, eliminating the need for manual restarts or complex configuration updates. By integrating directly with container orchestrators and service registries, it maintains a consistent state for network traffic, load balancing, and security policy enforcement. The project distinguishes itself through its deep integration with diverse infrastructure providers, including container runtimes, cloud platforms, and service meshes. It utilizes a declarative configuration model that allows users to define routing and security policies as version-controlled code, facilitating GitOps workflows and automated infrastructure synchronization. Additionally, it features a specialized AI gateway that provides content guarding and semantic response caching to optimize performance and ensure regulatory compliance for AI-driven services. Beyond core routing, the platform offers a comprehensive suite of tools for API lifecycle management, including performance monitoring, distributed tracing, and integrated web application firewall protection. It also provides API mocking capabilities, allowing developers to simulate production-like environments for testing and integration. These features are unified under a centralized control plane that supports federated governance across hybrid and multi-cloud environments.