akanealw
99819b70ff
Some checks failed
Build and Push Docker Images (Trusted) / build-and-push (., docker/caddy/Dockerfile, caddy) (push) Has been cancelled
Build and Push Docker Images (Trusted) / build-and-push (., docker/l4-port-manager/Dockerfile, l4-port-manager) (push) Has been cancelled
Build and Push Docker Images (Trusted) / build-and-push (., docker/web/Dockerfile, web) (push) Has been cancelled
Tests / test (push) Has been cancelled
283 lines
14 KiB
HTML
Executable File
283 lines
14 KiB
HTML
Executable File
<!DOCTYPE html>
|
||
<html lang="en">
|
||
|
||
<head>
|
||
<meta charset="UTF-8" />
|
||
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
|
||
<meta name="description"
|
||
content="Caddy Proxy Manager - A modern web interface for Caddy Server with WAF, mTLS, forward auth, geo blocking, REST API, and traffic analytics." />
|
||
<title>Caddy Proxy Manager</title>
|
||
|
||
<!-- Open Graph / Facebook -->
|
||
<meta property="og:type" content="website" />
|
||
<meta property="og:url" content="https://caddyproxymanager.com/" />
|
||
<meta property="og:title" content="Caddy Proxy Manager - Control Every Edge" />
|
||
<meta property="og:description"
|
||
content="Caddy Proxy Manager – Modern Web UI for Caddy with WAF, automatic HTTPS, mTLS, forward auth, geo blocking, L4 TCP/UDP proxying, REST API, traffic analytics, and reverse proxy management." />
|
||
<meta property="og:image" content="https://caddyproxymanager.com/assets/images/preview.png" />
|
||
|
||
<!-- Fonts -->
|
||
<link rel="preconnect" href="https://fonts.googleapis.com" />
|
||
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
|
||
<link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800;900&display=swap" rel="stylesheet" />
|
||
|
||
<link rel="stylesheet" href="styles.css" />
|
||
<script defer src="scripts.js"></script>
|
||
</head>
|
||
|
||
<body>
|
||
<div class="aurora-bg"></div>
|
||
|
||
<header>
|
||
<div class="container header-inner">
|
||
<a href="#" class="logo">
|
||
<svg width="22" height="22" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">
|
||
<path d="M12 2L2 7L12 12L22 7L12 2Z" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" />
|
||
<path d="M2 17L12 22L22 17" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" />
|
||
<path d="M2 12L12 17L22 12" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" />
|
||
</svg>
|
||
Caddy Proxy Manager
|
||
</a>
|
||
<nav class="nav-links">
|
||
<a href="#features">Features</a>
|
||
<a href="#spotlights">Showcase</a>
|
||
<a href="#deployment">Install</a>
|
||
<a href="https://github.com/fuomag9/caddy-proxy-manager/wiki" target="_blank">Wiki</a>
|
||
<a href="https://github.com/fuomag9/caddy-proxy-manager" target="_blank">GitHub</a>
|
||
</nav>
|
||
</div>
|
||
</header>
|
||
|
||
<main>
|
||
<!-- Hero -->
|
||
<section class="hero container">
|
||
<div class="hero-eyebrow">Open Source · Docker · Next.js · shadcn/ui</div>
|
||
<h1>Control Every Edge.</h1>
|
||
<p>The modern web interface for Caddy Server. WAF protection, automatic HTTPS, mTLS, forward auth, geo blocking, L4 TCP/UDP proxying, traffic analytics, a full REST API, and a complete audit trail. All in one place.</p>
|
||
|
||
<div class="btn-group">
|
||
<a href="#deployment" class="btn btn-primary">Get Started</a>
|
||
<a href="https://github.com/fuomag9/caddy-proxy-manager" target="_blank" class="btn btn-secondary">
|
||
<svg width="16" height="16" viewBox="0 0 24 24" fill="currentColor"><path d="M12 0C5.37 0 0 5.37 0 12c0 5.31 3.435 9.795 8.205 11.385.6.105.825-.255.825-.57 0-.285-.015-1.23-.015-2.235-3.015.555-3.795-.735-4.035-1.41-.135-.345-.72-1.41-1.23-1.695-.42-.225-1.02-.78-.015-.795.945-.015 1.62.87 1.845 1.23 1.08 1.815 2.805 1.305 3.495.99.105-.78.42-1.305.765-1.605-2.67-.3-5.46-1.335-5.46-5.925 0-1.305.465-2.385 1.23-3.225-.12-.3-.54-1.53.12-3.18 0 0 1.005-.315 3.3 1.23.96-.27 1.98-.405 3-.405s2.04.135 3 .405c2.295-1.56 3.3-1.23 3.3-1.23.66 1.65.24 2.88.12 3.18.765.84 1.23 1.905 1.23 3.225 0 4.605-2.805 5.625-5.475 5.925.435.375.81 1.095.81 2.22 0 1.605-.015 2.895-.015 3.3 0 .315.225.69.825.57A12.02 12.02 0 0024 12c0-6.63-5.37-12-12-12z"/></svg>
|
||
View Source
|
||
</a>
|
||
</div>
|
||
|
||
<div class="showcase">
|
||
<div class="screenshot-main">
|
||
<img src="assets/screenshots/dashboard-main.png" alt="Caddy Proxy Manager Dashboard" loading="lazy" />
|
||
</div>
|
||
</div>
|
||
</section>
|
||
|
||
<!-- Features Grid -->
|
||
<section id="features" class="container features">
|
||
<div class="section-header">
|
||
<div class="eyebrow">Everything included</div>
|
||
<h2>Powerful Simplicity</h2>
|
||
<p>Everything you need to manage your infrastructure, nothing you don't.</p>
|
||
</div>
|
||
|
||
<div class="grid">
|
||
<div class="card">
|
||
<div class="card-icon">⇄</div>
|
||
<h3>Reverse Proxy</h3>
|
||
<p>Multiple upstreams, load balancing (8 policies), health checks, custom headers, location rules, redirects, rewrites, and upstream DNS pinning.</p>
|
||
</div>
|
||
<div class="card">
|
||
<div class="card-icon">🔌</div>
|
||
<h3>L4 TCP/UDP Proxy</h3>
|
||
<p>Layer 4 stream proxying for TCP and UDP. TLS SNI matching, proxy protocol, health checks, and geo blocking at the transport layer.</p>
|
||
</div>
|
||
<div class="card">
|
||
<div class="card-icon">🚪</div>
|
||
<h3>Forward Auth Portal</h3>
|
||
<p>Built-in identity provider for protecting apps without an external IdP. Credential and OAuth login, user groups, and per-host access control.</p>
|
||
</div>
|
||
<div class="card">
|
||
<div class="card-icon">🛡️</div>
|
||
<h3>WAF</h3>
|
||
<p>Web Application Firewall powered by Coraza with OWASP CRS. Block SQLi, XSS, LFI, and RCE with per-host control and rule suppression.</p>
|
||
</div>
|
||
<div class="card">
|
||
<div class="card-icon">🔒</div>
|
||
<h3>Auto HTTPS & mTLS</h3>
|
||
<p>Automatic TLS via ACME with Let's Encrypt and Cloudflare DNS-01. Built-in CA for mutual TLS with role-based path access control.</p>
|
||
</div>
|
||
<div class="card">
|
||
<div class="card-icon">📈</div>
|
||
<h3>Traffic Analytics</h3>
|
||
<p>Live request charts, protocol breakdown, country heatmap, top user agents, and blocked request log powered by ClickHouse.</p>
|
||
</div>
|
||
<div class="card">
|
||
<div class="card-icon">🌍</div>
|
||
<h3>Geo Blocking</h3>
|
||
<p>Block or allow by country, continent, ASN, CIDR, or exact IP per host, with priority allow-override rules and fail-closed mode.</p>
|
||
</div>
|
||
<div class="card">
|
||
<div class="card-icon">🔗</div>
|
||
<h3>REST API</h3>
|
||
<p>Full REST API under <code>/api/v1/</code> with Bearer token auth, API token management, and interactive OpenAPI 3.1.0 docs at <code>/api-docs</code>.</p>
|
||
</div>
|
||
<div class="card">
|
||
<div class="card-icon">🔑</div>
|
||
<h3>Access Control</h3>
|
||
<p>HTTP basic auth, forward auth with user groups, mTLS RBAC with path-based rules, and three-tier user roles (Viewer, User, Admin).</p>
|
||
</div>
|
||
<div class="card">
|
||
<div class="card-icon">🪪</div>
|
||
<h3>OAuth / SSO</h3>
|
||
<p>OAuth2/OIDC authentication with any compliant provider — Authentik, Keycloak, Auth0, and more. Account linking from the Profile page.</p>
|
||
</div>
|
||
<div class="card">
|
||
<div class="card-icon">🔄</div>
|
||
<h3>Instance Sync</h3>
|
||
<p>Master/slave configuration sync for multi-instance deployments. Push proxy hosts, certs, and settings to replicas on every change.</p>
|
||
</div>
|
||
<div class="card">
|
||
<div class="card-icon">📋</div>
|
||
<h3>Audit Log</h3>
|
||
<p>Every configuration change is tracked with user attribution and full-text search. Dark mode, mobile UI, and search across all views.</p>
|
||
</div>
|
||
</div>
|
||
</section>
|
||
|
||
<!-- Feature Spotlights -->
|
||
<div id="spotlights">
|
||
|
||
<section class="spotlight-section">
|
||
<div class="spotlight container">
|
||
<div class="spotlight-text">
|
||
<div class="eyebrow">Traffic Intelligence</div>
|
||
<h2>See every request,<br>in real time.</h2>
|
||
<p>Charts, protocol breakdown, country heatmaps, user agent breakdowns, and a paginated blocked-request log. Filter by host or pick any time range — all powered by ClickHouse with 90-day retention.</p>
|
||
</div>
|
||
<div class="spotlight-image">
|
||
<img src="assets/screenshots/analytics-top.png" alt="Analytics dashboard" loading="lazy" />
|
||
</div>
|
||
</div>
|
||
</section>
|
||
|
||
<section class="spotlight-section spotlight-reverse">
|
||
<div class="spotlight container">
|
||
<div class="spotlight-text">
|
||
<div class="eyebrow">Proxy Management</div>
|
||
<h2>Every reverse proxy,<br>one interface.</h2>
|
||
<p>Search across all hosts, toggle them on or off instantly, and configure upstreams, load balancing, and access lists without touching a config file.</p>
|
||
</div>
|
||
<div class="spotlight-image">
|
||
<img src="assets/screenshots/proxy-hosts.png" alt="Proxy Hosts" loading="lazy" />
|
||
</div>
|
||
</div>
|
||
</section>
|
||
|
||
<section class="spotlight-section">
|
||
<div class="spotlight container">
|
||
<div class="spotlight-text">
|
||
<div class="eyebrow">TLS Certificates</div>
|
||
<h2>HTTPS by default.<br>Visibility built in.</h2>
|
||
<p>Caddy handles certificate issuance automatically. The Certificates page shows issuer, expiry, and status for every managed cert. Import custom certs or use the built-in CA to issue internal client certificates.</p>
|
||
</div>
|
||
<div class="spotlight-image">
|
||
<img src="assets/screenshots/certificates.png" alt="Certificates" loading="lazy" />
|
||
</div>
|
||
</div>
|
||
</section>
|
||
|
||
<section class="spotlight-section spotlight-reverse">
|
||
<div class="spotlight container">
|
||
<div class="spotlight-text">
|
||
<div class="eyebrow">Configuration</div>
|
||
<h2>Every option,<br>without the YAML.</h2>
|
||
<p>The host editor exposes load balancing policies, forward auth, location rules, redirects, DNS pinning, geo blocking, mTLS, and WAF settings all from a single form.</p>
|
||
</div>
|
||
<div class="spotlight-image">
|
||
<img src="assets/screenshots/proxy-editor.png" alt="Proxy Editor" loading="lazy" />
|
||
</div>
|
||
</div>
|
||
</section>
|
||
|
||
<section class="spotlight-section">
|
||
<div class="spotlight container">
|
||
<div class="spotlight-text">
|
||
<div class="eyebrow">Security</div>
|
||
<h2>WAF protection,<br>zero config.</h2>
|
||
<p>Enable the Coraza-powered WAF with OWASP Core Rule Set in one click. View blocked and detected events, suppress noisy rules globally or per host, and add custom SecLang directives.</p>
|
||
</div>
|
||
<div class="spotlight-image">
|
||
<img src="assets/screenshots/waf.png" alt="WAF Events" loading="lazy" />
|
||
</div>
|
||
</div>
|
||
</section>
|
||
|
||
<section class="spotlight-section spotlight-reverse">
|
||
<div class="spotlight container">
|
||
<div class="spotlight-text">
|
||
<div class="eyebrow">Authentication</div>
|
||
<h2>Protect any app,<br>no external IdP.</h2>
|
||
<p>The built-in forward auth portal redirects unauthenticated visitors to a login page, issues session cookies, and validates every request. Organise users into groups and control access per host — or bring your own OAuth provider.</p>
|
||
</div>
|
||
<div class="spotlight-image">
|
||
<img src="assets/screenshots/access-lists.png" alt="Access Control" loading="lazy" />
|
||
</div>
|
||
</div>
|
||
</section>
|
||
|
||
<section class="spotlight-section">
|
||
<div class="spotlight container">
|
||
<div class="spotlight-text">
|
||
<div class="eyebrow">Automation</div>
|
||
<h2>Full REST API,<br>fully documented.</h2>
|
||
<p>Manage every resource programmatically through <code>/api/v1/</code> with Bearer token authentication. Interactive OpenAPI 3.1.0 docs at <code>/api-docs</code>, API token management with optional expiration, and three-tier role-based access.</p>
|
||
</div>
|
||
<div class="spotlight-image">
|
||
<img src="assets/screenshots/api-docs.png" alt="API Documentation" loading="lazy" />
|
||
</div>
|
||
</div>
|
||
</section>
|
||
|
||
</div>
|
||
|
||
<!-- Deploy -->
|
||
<section id="deployment" class="deployment">
|
||
<div class="container deploy-inner">
|
||
<div class="section-header">
|
||
<div class="eyebrow">Open Source</div>
|
||
<h2>Deploy in Seconds</h2>
|
||
<p>A single docker-compose file is all you need.</p>
|
||
</div>
|
||
|
||
<div class="code-block">
|
||
<div class="code-line"><span class="comment"># Clone and configure</span></div>
|
||
<div class="code-line"><span class="command">git clone https://github.com/fuomag9/caddy-proxy-manager.git</span></div>
|
||
<div class="code-line"><span class="command">cd caddy-proxy-manager && cp .env.example .env</span></div>
|
||
<div class="code-line"> </div>
|
||
<div class="code-line"><span class="comment"># Configure the environment</span></div>
|
||
<div class="code-line"><span class="command">nano .env</span></div>
|
||
<div class="code-line"> </div>
|
||
<div class="code-line"><span class="comment"># Start</span></div>
|
||
<div class="code-line"><span class="command">docker compose up -d</span></div>
|
||
</div>
|
||
|
||
<p class="deploy-note">Access at <code>http://localhost:3000</code> · Data persists in Docker volumes</p>
|
||
</div>
|
||
</section>
|
||
</main>
|
||
|
||
<footer>
|
||
<div class="container footer-inner">
|
||
<a href="#" class="logo footer-logo">
|
||
<svg width="18" height="18" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">
|
||
<path d="M12 2L2 7L12 12L22 7L12 2Z" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" />
|
||
<path d="M2 17L12 22L22 17" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" />
|
||
<path d="M2 12L12 17L22 12" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" />
|
||
</svg>
|
||
Caddy Proxy Manager
|
||
</a>
|
||
<p>© <span id="year"></span> Released under the MIT License.</p>
|
||
</div>
|
||
</footer>
|
||
</body>
|
||
|
||
</html>
|