Cosmos Cloud

Website

Security-first self-hosting platform with reverse proxy, SSO, and apps

6.1k stars 237 forks last commit first released

Actively maintained

Last commit 16 Jul 2026.

Cosmos Cloud screenshot

Cosmos Cloud is a self-hosting platform designed to run and secure home servers, NAS devices, and small business deployments. It combines an application gateway, app management, and built-in security controls to protect services that may not be hardened by default.

Key Features

  • App store for installing and managing self-hosted applications, plus support for importing Docker Compose stacks
  • Reverse proxy for routing to containers or external services, with automatic HTTPS certificate provisioning
  • Built-in authentication server with SSO (OpenID Connect) and multi-factor authentication
  • SmartShield protections including anti-bot and anti-DDoS features, plus security-focused access controls
  • Container management and updates, with security auditing for managed apps
  • Built-in VPN for secure remote access without exposing services directly to the internet
  • Backup system with incremental, encrypted backups and support for remote targets (using restic)
  • Monitoring with historical metrics, real-time status, and customizable alerts/notifications
  • User management and identity-provider style features (invites, account recovery workflows)

Use Cases

  • Securely publish multiple homelab services behind a single gateway with SSO and HTTPS
  • Provide a private “personal cloud” experience for families with centralized access and user accounts
  • Deploy and operate internal web apps for small organizations with tighter access controls

Limitations and Considerations

  • License is “available source” (Commons Clause), which may not meet some organizations’ open-source requirements

Cosmos Cloud is best suited for users who want an integrated control plane for apps, networking, and security rather than assembling separate components. It aims to simplify deployment while adding protective layers for commonly self-hosted services.

Categories:

Tags:

Tech Stack:

Share:

Similar to Cosmos Cloud

HomeServerHQ logo

HomeServerHQ

All-in-one home server platform with VPN, email, and relay

65
7
Last commit

Integrated installer and platform for home infrastructure. Provides VPN relay for NAT traversal, preconfigured email, automatic HTTPS, reverse proxy, and a web management utility.

GPL-3.0Actively maintained
Alternative to:
Cloudron logo
Cloudron
+19
NPMplus logo

NPMplus

Fork of Nginx Proxy Manager with HTTP/3, OIDC, and hardening

2.2k
117
Last commit

NPMplus is a Nginx Proxy Manager fork that adds HTTP/3 (QUIC), OIDC auth, stronger TLS defaults, and extra security and logging features in a web UI.

AGPL-3.0Actively maintained
Alternative to:
NGINX Management Suite logo
NGINX Management Suite
+5
Tinyauth logo

Tinyauth

Lightweight authentication middleware for protecting web apps

8k
258
Last commit

Tinyauth is a lightweight auth middleware that adds a login screen, OAuth, or LDAP authentication in front of your apps via common reverse proxies.

AGPL-3.0Actively maintained
Alternative to:
Cloudflare Access logo
Cloudflare Access
+17

Pomerium

Identity- and context-aware access proxy for zero trust access

4.9k
343
Last commit

Pomerium is an identity-aware access proxy that provides zero trust, per-request authorization to internal web apps and services without a traditional VPN.

Apache-2.0Actively maintained
Alternative to:
Cloudflare Access logo
Cloudflare Access
+12

GoDoxy

Reverse proxy and container-aware traffic manager with Web UI

3.5k
150
Last commit

High-performance reverse proxy for self-hosted apps with Web UI, Docker/Podman auto-routing, HTTPS via Let's Encrypt, access control, and OIDC/ForwardAuth support.

Actively maintained
Alternative to:
Traefik Cloud logo
Traefik Cloud
+5
Authgear logo

Authgear

Identity and authentication platform for apps and APIs

1.9k
126
Last commit

Open-source Auth0/Clerk/Firebase Auth alternative with passkeys, MFA, SSO (OIDC/SAML), user management portal, and extensible auth flows for web and mobile apps.

Apache-2.0Actively maintained
Alternative to:
Auth0 logo
Auth0
+19