Self-hosted cloud storage server where files and notes are encrypted in the browser before they reach the server.
azukaar/Cosmos-Server
Self-hosted home server platform acting as a secure reverse proxy, app manager, and gateway with auth, MFA, SSO, and anti-bot protection.
Open-source alternative to:Cloudflare Access
Unraid
- Stars
- 6,187
- Forks
- 253
- Open issues
- 209
- Last commit
- 10 days ago
What is it?
Cosmos Server is a self-hosted home server platform that sits in front of your applications as a secure gateway and also works as a server manager. It is aimed at people running services such as Plex, Home Assistant or a blog on a server, NAS or Raspberry Pi, and it focuses on protecting those services against unauthorized access and abusive traffic.
The project bundles several tools into one web UI: a reverse proxy with automatic HTTPS via Let's Encrypt, an authentication server with multi-factor authentication and OpenID, a container manager that supports docker-compose, an app store, storage and disk management, backups based on Restic, and monitoring with alerts. It also includes a VPN, and a SmartShield module that applies rate limiting, throttling and bans, with anti-bot and anti-DDOS measures.
Cosmos can run any Docker container, not only apps installed through its own store, and it can be used without some of its modules, such as Docker or HTTPS. It provides a JavaScript SDK, a Go SDK and a Terraform provider for automation.
Key features
- 01Reverse proxy with automatic HTTPS and wildcard certificates via DNS challenge.
- 02Authentication server with multi-factor authentication and OpenID, forward-header and HTML strategies.
- 03Container manager with docker-compose support and security auditing.
- 04SmartShield rate limiting, user bans and anti-bot and anti-DDOS protection.
- 05Built-in VPN, incremental encrypted backups with Restic, and real-time monitoring with alerts.
- 06Storage management and network storage via RClone, plus SDKs and a Terraform provider.
Use cases
- Putting a secure HTTPS front door in front of Plex, Home Assistant or other self-hosted apps.
- Giving family members or friends single sign-on access to several home services.
- Managing Docker containers and their updates on a home NAS or Raspberry Pi.
- Accessing home services remotely through the built-in VPN without opening router ports.
Things to know
- The license is not clearly identified in the metadata, so check the repository's license terms before use.
- It is a broad self-hosted platform with many bundled components, so setup and ongoing management take real effort.
Topics
FAQ
- What is Cosmos-Server?
- Self-hosted home server platform acting as a secure reverse proxy, app manager, and gateway with auth, MFA, SSO, and anti-bot protection. Cosmos Server is a self-hosted home server platform that sits in front of your applications as a secure gateway and also works as a server manager. It is aimed at people running services such as Plex, Home Assistant or a blog on a server, NAS or Raspberry Pi, and it focuses on protecting those services against unauthorized access and abusive traffic.
- Is Cosmos-Server free to use? What license does it have?
- Cosmos-Server is open source under the Other license. Check the license terms before using it in commercial products.
- Is Cosmos-Server still maintained?
- Actively maintained. The last commit to Cosmos-Server was on Oct 9, 2026.
- What can I use Cosmos-Server for?
- Putting a secure HTTPS front door in front of Plex, Home Assistant or other self-hosted apps. Giving family members or friends single sign-on access to several home services. Managing Docker containers and their updates on a home NAS or Raspberry Pi. Accessing home services remotely through the built-in VPN without opening router ports.
- Where can I get Cosmos-Server?
- The source code and installation instructions are on GitHub: https://github.com/azukaar/Cosmos-Server
Summary generated by AI from the project's README. GitHub stats refresh daily.
Related projects
Lightweight self-hosted server monitoring with a web dashboard, Docker container stats, historical data and alerts.
Free, self-hosted PostgreSQL backup tool with Point-in-Time Recovery, automated restore verification, and a web UI.
Self-hosted real-time monitoring dashboard for Proxmox, Docker, Kubernetes, TrueNAS and vSphere, with alerts and scheduled AI patrols.
A self-hosted web app for waking devices on your network with Wake-on-LAN, built with SvelteKit, Go and PocketBase.
Self-hosted network scanner that maps hosts, services and links on a schedule and keeps network diagrams current across four views.