Cosmos Cloud
Security-first self-hosting platform with reverse proxy, SSO, and apps
6.1k stars 237 forks last commit first released
Actively maintained
Last commit 16 Jul 2026.

Cosmos Cloud is a self-hosting platform designed to run and secure home servers, NAS devices, and small business deployments. It combines an application gateway, app management, and built-in security controls to protect services that may not be hardened by default.
Key Features
- App store for installing and managing self-hosted applications, plus support for importing Docker Compose stacks
- Reverse proxy for routing to containers or external services, with automatic HTTPS certificate provisioning
- Built-in authentication server with SSO (OpenID Connect) and multi-factor authentication
- SmartShield protections including anti-bot and anti-DDoS features, plus security-focused access controls
- Container management and updates, with security auditing for managed apps
- Built-in VPN for secure remote access without exposing services directly to the internet
- Backup system with incremental, encrypted backups and support for remote targets (using restic)
- Monitoring with historical metrics, real-time status, and customizable alerts/notifications
- User management and identity-provider style features (invites, account recovery workflows)
Use Cases
- Securely publish multiple homelab services behind a single gateway with SSO and HTTPS
- Provide a private “personal cloud” experience for families with centralized access and user accounts
- Deploy and operate internal web apps for small organizations with tighter access controls
Limitations and Considerations
- License is “available source” (Commons Clause), which may not meet some organizations’ open-source requirements
Cosmos Cloud is best suited for users who want an integrated control plane for apps, networking, and security rather than assembling separate components. It aims to simplify deployment while adding protective layers for commonly self-hosted services.
Categories:
Tags:
Tech Stack:
Similar to Cosmos Cloud

HomeServerHQ
All-in-one home server platform with VPN, email, and relay
Integrated installer and platform for home infrastructure. Provides VPN relay for NAT traversal, preconfigured email, automatic HTTPS, reverse proxy, and a web management utility.


NPMplus
Fork of Nginx Proxy Manager with HTTP/3, OIDC, and hardening
NPMplus is a Nginx Proxy Manager fork that adds HTTP/3 (QUIC), OIDC auth, stronger TLS defaults, and extra security and logging features in a web UI.
Tinyauth
Lightweight authentication middleware for protecting web apps
Tinyauth is a lightweight auth middleware that adds a login screen, OAuth, or LDAP authentication in front of your apps via common reverse proxies.
Pomerium
Identity- and context-aware access proxy for zero trust access
Pomerium is an identity-aware access proxy that provides zero trust, per-request authorization to internal web apps and services without a traditional VPN.
GoDoxy
Reverse proxy and container-aware traffic manager with Web UI
High-performance reverse proxy for self-hosted apps with Web UI, Docker/Podman auto-routing, HTTPS via Let's Encrypt, access control, and OIDC/ForwardAuth support.

Authgear
Identity and authentication platform for apps and APIs
Open-source Auth0/Clerk/Firebase Auth alternative with passkeys, MFA, SSO (OIDC/SAML), user management portal, and extensible auth flows for web and mobile apps.




