A web-based graphical interface for nginx that lets you manage virtual hosts, proxies, SSL certificates and streams without editing config files by hand.
tobychui/zoraxy
A general-purpose HTTP reverse proxy and forwarding tool with a web management UI, written in Go, for homelabs and small server setups.
Open-source alternative to:Nginx Proxy Manager
- Stars
- 5,538
- Forks
- 330
- Open issues
- 158
- Last commit
- yesterday
What is it?
Zoraxy is a reverse proxy and forwarding tool that you manage through a web interface. It routes incoming HTTP and HTTP/2 traffic to backend services by hostname or virtual directory, and it can also forward raw TCP and UDP streams.
Beyond routing, it handles TLS certificates with ACME, including automatic renewal and DNS challenges for several DNS providers. It also covers access control through IP and country blacklists and whitelists, basic auth, redirection rules, load balancing, and an uptime monitor. Plugins and forward-auth integrations such as Authelia and Authentik extend it further.
Zoraxy ships as a single binary for Windows, Linux and ARM devices, and it can run in Docker. It includes utilities such as a port scanner, mDNS scanner, Wake-on-LAN, and a web SSH terminal, which currently works on Linux hosts.
Key features
- 01Reverse proxy for HTTP and HTTP/2 with virtual directories, load balancing and custom headers
- 02Automatic WebSocket proxying and TCP/UDP stream forwarding
- 03ACME certificate management with auto-renewal and DNS challenge support
- 04IP and country based blacklist and whitelist
- 05Integrated uptime monitor, port scanner and Wake-on-LAN
- 06Plugin system and forward-auth support for Authelia and Authentik
Use cases
- Exposing several self-hosted services under different subdomains on one home server
- Adding HTTPS and automatic certificate renewal to internal web apps
- Forwarding TCP or UDP traffic to a service behind a NAT router
- Putting an SSO or forward-auth layer in front of existing applications
Quick start
- 1
Clone the repository
git clone https://github.com/tobychui/zoraxy - 2
Enter the source folder and fetch dependencies
cd ./zoraxy/src/ && go mod tidy - 3
Build the binary (requires Go 1.23 or higher)
go build - 4
Start Zoraxy with the management interface on port 8000
sudo ./zoraxy -port=:8000
Things to know
- Web SSH only supports Linux-based systems, and some architectures are experimental.
- Building from source requires Go 1.23 or higher.
- The nginx config converter is marked as experimental.
- The AGPL-3.0 license requires derivative works to be open-sourced under the same terms.
In collections
Topics
FAQ
- What is zoraxy?
- A general-purpose HTTP reverse proxy and forwarding tool with a web management UI, written in Go, for homelabs and small server setups. Zoraxy is a reverse proxy and forwarding tool that you manage through a web interface. It routes incoming HTTP and HTTP/2 traffic to backend services by hostname or virtual directory, and it can also forward raw TCP and UDP streams.
- Is zoraxy free to use? What license does it have?
- zoraxy is open source under the AGPL-3.0 license. Check the license terms before using it in commercial products.
- Is zoraxy still maintained?
- Actively maintained. The last commit to zoraxy was on Oct 22, 2026.
- What can I use zoraxy for?
- Exposing several self-hosted services under different subdomains on one home server Adding HTTPS and automatic certificate renewal to internal web apps Forwarding TCP or UDP traffic to a service behind a NAT router Putting an SSO or forward-auth layer in front of existing applications
- How do I install zoraxy?
- Clone the repository: git clone https://github.com/tobychui/zoraxy Enter the source folder and fetch dependencies: cd ./zoraxy/src/ && go mod tidy Build the binary (requires Go 1.23 or higher): go build Start Zoraxy with the management interface on port 8000: sudo ./zoraxy -port=:8000
- Where can I get zoraxy?
- The source code and installation instructions are on GitHub: https://github.com/tobychui/zoraxy
Summary generated by AI from the project's README. GitHub stats refresh daily.
Related projects
A lightweight reverse proxy with a WebUI that auto-routes Docker and Podman containers, handles Let's Encrypt certificates, and includes SSO and idle sleep.
Caddy is an extensible web server written in Go that serves HTTP/1.1, HTTP/2 and HTTP/3 and enables HTTPS automatically by default.
Self-hosted control plane for TLS certificates that issues, renews, discovers, inventories and deploys them across your infrastructure.
Remote access to Linux devices through a web browser, with a terminal, file transfer and device web UI proxying via a central server.
A lightweight, open-source web application firewall for small companies, studios and personal websites, deployable fully on-premises.