
Nginx Proxy Manager
Web UI to manage Nginx reverse proxy hosts and SSL certificates
34k stars 3.9k forks last commit first released MIT
Actively maintained
Last commit 26 Aug 2026.

Nginx Proxy Manager is a web application packaged as a Docker image that provides an easy way to configure Nginx as a reverse proxy for your services. It focuses on simplifying SSL termination, host forwarding, and access control without requiring deep Nginx expertise.
Key Features
- Web-based admin interface for managing proxy hosts and related Nginx configuration
- Simple setup of forwarding domains, redirects, custom 404 hosts, and TCP/UDP streams
- Built-in Let’s Encrypt certificate issuance and automatic renewals, plus support for custom certificates
- Per-host access lists and basic HTTP authentication
- Advanced Nginx configuration fields for power users
- Multi-user management with permissions and an audit log
Use Cases
- Publish home-lab and internal web apps securely behind a single reverse proxy
- Centralize TLS certificate management and SSL termination for multiple services
- Add basic authentication and access restrictions in front of existing web applications
Limitations and Considerations
- Primarily intended to manage Nginx through its own UI; complex, highly customized Nginx setups may not map cleanly to the UI model
Nginx Proxy Manager is well-suited for homelabs and small deployments that want a straightforward, UI-driven approach to reverse proxying and TLS. It balances ease of use with optional advanced controls for users who need deeper Nginx customization.
Categories:
Tags:
Tech Stack:
Similar to Nginx Proxy Manager

NPMplus
Fork of Nginx Proxy Manager with HTTP/3, OIDC, and hardening
NPMplus is a Nginx Proxy Manager fork that adds HTTP/3 (QUIC), OIDC auth, stronger TLS defaults, and extra security and logging features in a web UI.
SWAG
Nginx reverse proxy with automated TLS certificates and fail2ban
LinuxServer.io SWAG is a Docker image bundling Nginx reverse proxy, ACME certificate automation (Let’s Encrypt/ZeroSSL), optional PHP, and fail2ban intrusion prevention.

Wiredoor
Ingress-as-a-service to expose private services via WireGuard and NGINX
Self-hosted ingress platform that exposes internal HTTP/TCP services to the internet through reverse WireGuard tunnels, with NGINX routing and automatic TLS certificates.
Pomerium
Identity- and context-aware access proxy for zero trust access
Pomerium is an identity-aware access proxy that provides zero trust, per-request authorization to internal web apps and services without a traditional VPN.

CloudPanel
Modern server control panel for managing web hosting stacks
CloudPanel is a lightweight server control panel for managing PHP, Node.js, Python, static sites, and reverse proxies with SSL/TLS and performance-focused defaults.
OAuth2 Proxy
Reverse proxy and middleware for OAuth2/OIDC authentication
OAuth2 Proxy is a reverse proxy and middleware that protects web apps with OAuth2/OIDC login and forwards authenticated user identity to upstream services.



