
Nginx Proxy Manager
Web UI to manage Nginx reverse proxy hosts and SSL certificates
33.7k stars 3.8k forks last commit first released MIT
Actively maintained
Last commit 9 Jun 2026.

Nginx Proxy Manager is a web application packaged as a Docker image that provides an easy way to configure Nginx as a reverse proxy for your services. It focuses on simplifying SSL termination, host forwarding, and access control without requiring deep Nginx expertise.
Key Features
- Web-based admin interface for managing proxy hosts and related Nginx configuration
- Simple setup of forwarding domains, redirects, custom 404 hosts, and TCP/UDP streams
- Built-in Let’s Encrypt certificate issuance and automatic renewals, plus support for custom certificates
- Per-host access lists and basic HTTP authentication
- Advanced Nginx configuration fields for power users
- Multi-user management with permissions and an audit log
Use Cases
- Publish home-lab and internal web apps securely behind a single reverse proxy
- Centralize TLS certificate management and SSL termination for multiple services
- Add basic authentication and access restrictions in front of existing web applications
Limitations and Considerations
- Primarily intended to manage Nginx through its own UI; complex, highly customized Nginx setups may not map cleanly to the UI model
Nginx Proxy Manager is well-suited for homelabs and small deployments that want a straightforward, UI-driven approach to reverse proxying and TLS. It balances ease of use with optional advanced controls for users who need deeper Nginx customization.
Categories:
Tags:
Tech Stack:
Similar to Nginx Proxy Manager

NPMplus
Fork of Nginx Proxy Manager with HTTP/3, OIDC, and hardening
NPMplus is a Nginx Proxy Manager fork that adds HTTP/3 (QUIC), OIDC auth, stronger TLS defaults, and extra security and logging features in a web UI.
SWAG
Nginx reverse proxy with automated TLS certificates and fail2ban
LinuxServer.io SWAG is a Docker image bundling Nginx reverse proxy, ACME certificate automation (Let’s Encrypt/ZeroSSL), optional PHP, and fail2ban intrusion prevention.

Wiredoor
Ingress-as-a-service to expose private services via WireGuard and NGINX
Self-hosted ingress platform that exposes internal HTTP/TCP services to the internet through reverse WireGuard tunnels, with NGINX routing and automatic TLS certificates.
Pomerium
Identity- and context-aware access proxy for zero trust access
Pomerium is an identity-aware access proxy that provides zero trust, per-request authorization to internal web apps and services without a traditional VPN.

CloudPanel
Modern server control panel for managing web hosting stacks
CloudPanel is a lightweight server control panel for managing PHP, Node.js, Python, static sites, and reverse proxies with SSL/TLS and performance-focused defaults.
OAuth2 Proxy
Reverse proxy and middleware for OAuth2/OIDC authentication
OAuth2 Proxy is a reverse proxy and middleware that protects web apps with OAuth2/OIDC login and forwards authenticated user identity to upstream services.



