azukaar/Cosmos-Server

Features

• Self-Hosted Infrastructure - Hosts personal and business data on self-managed infrastructure, restoring ownership and privacy without sacrificing convenience.
• Self-Hosted Server Platforms - Ships a unified self-hosted server platform combining authentication, reverse proxy, rate limiting, and container orchestration.
• Centralized App Authentication Layers - Adds user login, token management, and access control to applications using a ready-to-use centralized authentication system.
• Self-Hosted Authentication Gateways - Provides a self-hosted authentication gateway that adds login, token management, and access control to applications.
• Docker Container Orchestrators - Manages the full lifecycle of Docker containers with networking, volume mounts, and restart policies.
• Containerized Service Orchestration - Deploys and manages Docker containers with automated networking, volume mounts, and restart policies.
• Reverse Proxies with Integrated Security - Routes all internal traffic through a central proxy that enforces authentication, rate limiting, and TLS termination before reaching backend services.
• Self-Hosted Server Platforms - Ships a unified self-hosted server platform combining authentication, reverse proxy, rate limiting, and container orchestration.
• DNS Record Automations - Automates DNS record creation and deletion for domain validation during certificate issuance, supporting multiple DNS provider APIs.
• DNS Challenge Automation - Automates DNS record creation and deletion for ACME DNS challenges to issue wildcard TLS certificates.
• Automatic Container HTTPS - Generates and renews TLS certificates for applications with wildcard support through DNS challenges.
• Rate Limiting & Abuse Prevention - Protects APIs by dynamically adjusting rate limits and throttling or banning abusive clients based on behavior.
• Endpoint Protection Measures - Adjusts rate limits dynamically, throttles abusive users, and enforces bans to safeguard server resources without manual tuning.
• DNS Challenge Automation - Automates DNS record creation and deletion for ACME DNS challenges to issue wildcard TLS certificates.
• Self-Hosted Security Tools - Applies enterprise-grade security measures to protect applications and data on a personal server.
• TLS Certificate Configuration - Obtains and renews TLS certificates from Let's Encrypt automatically, including wildcard certificates via DNS challenges.
• Session Token Issuance - Issues signed JSON Web Tokens for user sessions with configurable expiration and refresh mechanisms to maintain secure access.
• User Authentication Systems - Handles user login, token storage, and access checks so applications do not need to build their own authentication system.
• Dynamic Rate Limiters - Adjusts per-client rate limits in real time by tracking request frequency and applying exponential backoff or bans for abusive patterns.
• ACME Certificate Lifecycle Managers - Manages the full lifecycle of TLS certificates via the ACME protocol with automatic renewal and wildcard DNS challenge resolution.
• Auto-Recovery Systems - Monitors service endpoints with periodic probes and automatically restarts or reconfigures failing containers to maintain uptime.
• API Rate Limiting - Adjusts rate limits based on user behavior and throttles or bans abusive clients to maintain API health.
• Authentication Middlewares - Inserts authentication checks as middleware layers that validate tokens and session data before any application logic executes.
• Programmatic Server Setups - Configures and deploys servers programmatically using SDKs in JavaScript, TypeScript, or Go, or through a Terraform provider.
• Dynamic Rate Limiting - Applies dynamic rate limiting that adjusts per-client limits in real time and bans abusive patterns.
• Dynamic - Applies dynamic rate limiting that adjusts per-client limits in real time and bans abusive patterns.
• Automated Server Maintenance - Runs routine server tasks and deployments automatically to reduce manual intervention and maintenance effort.
• Automated Server Configurations - Runs routine server tasks intelligently without manual intervention, simplifying ongoing administration.
• Plugin-Based Authentication Middleware - Implements plugin-based authentication middleware that validates tokens and sessions before application logic executes.

Star history