NPMplus logo

NPMplus

Website

Fork of Nginx Proxy Manager with HTTP/3, OIDC, and hardening

2.3k stars 118 forks last commit first released AGPL-3.0

Actively maintained

Last commit 26 Aug 2026.

NPMplus is a community fork of Nginx Proxy Manager that provides a web-based UI to manage Nginx as a reverse proxy for self-hosted services. It focuses on modern protocol support, stronger security defaults, and additional integrations while keeping a familiar NPM workflow.

Key Features

  • Web UI to manage reverse proxy hosts and TLS certificates
  • HTTP/3 (QUIC) support for HTTPS endpoints
  • ACME profile support and improved handling of alternative ACME servers and options like OCSP and must-staple
  • OIDC authentication support
  • Hardened TLS settings, plus modern compression support (zstd and brotli)
  • Optional integrations for CrowdSec and openappsec
  • Built-in access logging analytics via GoAccess
  • Additional hosting options such as file serving and optional PHP-FPM support

Use Cases

  • Central reverse proxy for multiple homelab or internal services with automated certificates
  • Adding OIDC-based login in front of protected services
  • Running a hardened, modern Nginx proxy with HTTP/3 enabled

Limitations and Considerations

  • Database backends beyond SQLite may work but are not recommended or supported by the project
  • Requires exposing UDP on 443 to use HTTP/3 (QUIC)
  • Supported CPU architectures are limited compared to upstream

NPMplus is a practical choice for users who like Nginx Proxy Manager’s UI but want more modern protocol support and additional security-focused features. It is especially suited for homelabs and small environments that need convenient TLS and proxy management with optional advanced integrations.

Categories:

Tags:

Tech Stack:

Share:

Similar to NPMplus

Nginx Proxy Manager logo

Nginx Proxy Manager

Web UI to manage Nginx reverse proxy hosts and SSL certificates

34k
3.9k
Last commit

Nginx Proxy Manager is a web-based admin panel for managing Nginx reverse proxy hosts, redirects, streams, and Let’s Encrypt SSL certificates via Docker.

MITActively maintained
Alternative to:
NGINX Management Suite logo
NGINX Management Suite
+6

Cosmos Cloud

Security-first self-hosting platform with reverse proxy, SSO, and apps

6.1k
250
Last commit

Cosmos Cloud is a security-focused self-hosting platform that provides an app store, reverse proxy with automatic HTTPS, SSO/MFA, container management, backups, and monitoring.

Actively maintained
Alternative to:
Cloudron logo
Cloudron
+18

GoDoxy

Reverse proxy and container-aware traffic manager with Web UI

4.1k
188
Last commit

High-performance reverse proxy for self-hosted apps with Web UI, Docker/Podman auto-routing, HTTPS via Let's Encrypt, access control, and OIDC/ForwardAuth support.

Actively maintained
Alternative to:
Traefik Cloud logo
Traefik Cloud
+5
NetGoat logo

NetGoat

Self-hostable reverse proxy and traffic manager with WAF features

890
47
Last commit

NetGoat is a self-hostable reverse proxy and traffic management platform offering Cloudflare-like features such as TLS termination, rate limiting, WAF-style filtering, and dashboards.

AGPL-3.0Actively maintained
Alternative to:
Cloudflare logo
Cloudflare
+11

OAuth2 Proxy

Reverse proxy and middleware for OAuth2/OIDC authentication

14.9k
2.2k
Last commit

OAuth2 Proxy is a reverse proxy and middleware that protects web apps with OAuth2/OIDC login and forwards authenticated user identity to upstream services.

MITActively maintained
Alternative to:
Cloudflare Access logo
Cloudflare Access
+14
Wiredoor logo

Wiredoor

Ingress-as-a-service to expose private services via WireGuard and NGINX

1.6k
77
Last commit

Self-hosted ingress platform that exposes internal HTTP/TCP services to the internet through reverse WireGuard tunnels, with NGINX routing and automatic TLS certificates.

Apache-2.0Actively maintained
Alternative to:
ngrok logo
ngrok
+13