Categories
Self-Hosted DevOps Reverse Proxy Web Server Network Security Traffic Monitoring SSL ManagementStars
Forks
Watchers
Developer links
CaddyUI
Providing an intuitive control plane for modern reverse proxy infrastructure, CaddyUI enables system administrators to manage proxy hosts, automated TLS certificates, and traffic routing without hand-editing configuration files. Operators can create and adjust reverse proxy destinations, URL path rewrites, custom headers, and redirection rules using structured forms that validate against the proxy engine before saving. The platform coordinates automatic ACME certificate requests and renewals, displaying live certificate expiration timelines, validation stages, and internal self-signed certificate authority options for local network services. Fleet management tools synchronize proxy rules across multiple distributed server instances, preventing configuration drift across staging and production clusters. Automated post-deployment health checks verify upstream endpoint availability, HTTP status codes, and latency thresholds, instantly rolling back to the previous configuration if an expectation fails. An integrated observability suite delivers real-time visitor traffic analytics, geographic maps, HTTP response code breakdowns, and single-click client IP blocking to counter malicious probing attempts. Administrators can schedule automated database backups, configure multi-user access with role permissions, and integrate CrowdSec threat intelligence to protect backends. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.
Benefits
- Zero-Configfile Web Proxy Management
- Replaces manual Caddyfile editing with an interactive dashboard that validates upstream routing definitions, custom HTTP headers, and URL redirection rules prior to applying changes live.
- Automated TLS Lifecycle and Probing
- Manages ACME certificate issuances and renewals automatically while providing real-time certificate expiration alerts, internal private CA options, and external DNS provider integrations.
- Multi-Server Fleet Configuration Synchronization
- Coordinates proxy routes, security policies, and SSL credentials across multiple distributed server nodes with automatic synchronization, node health tracking, and configuration drift prevention.
- Automated Rollback on Verification Failure
- Executes post-deployment HTTP expectation probes checking status codes and response latency, immediately restoring the previous stable configuration if any health check fails.
Features
- Visual Proxy Route Builder
- Configures reverse proxy destinations, load balancing policies, path rewrites, and request header injections with immediate validation feedback.
- Real-Time Traffic Analytics Engine
- Visualizes inbound HTTP requests, error status breakdowns, bandwidth utilization, and visitor IP metrics with granular drill-down filters.
- CrowdSec Security Integration
- Connects to CrowdSec local APIs to stream remediation blocklists, automatically rejecting malicious requests and protecting web services against abusive traffic.
- Multi-Node Fleet Management
- Deploys unified proxy configurations across distributed server instances, supporting environment tagging, remote log ingestion, and node health telemetry.
- Automated Configuration Snapshots
- Captures point-in-time configuration snapshots with automated off-host backup schedules, enabling instant rollback or disaster recovery across the server fleet.