Self-hosted tool that automatically creates Cloudflare Tunnel routes, DNS records and Access policies from Docker container labels.
wangwanjie/gately
Self-hosted network gateway for homelabs and NAS boxes: DDNS, port forwarding, reverse proxy, ACME certificates, WAF and more in one binary.
Open-source alternative to:Lucky
- Stars
- 356
- Forks
- 34
- Open issues
- 3
- Last commit
- 3 hours ago
What is it?
Gately is an open-source network gateway toolkit for home networks, NAS boxes, cloud hosts and servers. It bundles dynamic DNS across many DNS providers, STUN-based NAT traversal, port forwarding with SNI routing so several services can share port 443, and a web server with reverse proxy, static sites and HTTPS. Certificates are issued and renewed automatically through ACME, and a WAF based on Coraza and OWASP CRS is included.
The same binary also covers Tailscale, frp and Cloudflare Tunnel management, Docker container management, a web terminal with SSH and SFTP, WebDAV and FTP servers, network diagnostics, and fail2ban-style intrusion prevention synced to nftables. Configuration is stored as plain-text JSON, and existing Lucky configurations can be imported.
Gately runs on Docker, fnOS, OpenWrt, Linux, macOS, Windows and FreeBSD, and provides an admin UI, a CLI, and an MCP server for scripting and automation.
Key features
- 01Dynamic DNS across many providers, with IPv4/IPv6 and webhooks
- 02SNI routing lets several services share one port such as 443
- 03Automatic ACME certificate issuance and renewal via DNS-01 or HTTP-01
- 04Coraza and OWASP CRS based WAF with configurable body inspection
- 05Manages Tailscale, frp and Cloudflare Tunnel as external programs
- 06Encrypted config backups and audit log with rollback history
Use cases
- Exposing services from a home NAS or server to the internet with HTTPS
- Replacing a Lucky setup with a single self-hosted gateway
- Running a reverse proxy and WAF on an OpenWrt router
- Managing Docker containers and their upgrades from one web console
In collections
Topics
FAQ
- What is gately?
- Self-hosted network gateway for homelabs and NAS boxes: DDNS, port forwarding, reverse proxy, ACME certificates, WAF and more in one binary. Gately is an open-source network gateway toolkit for home networks, NAS boxes, cloud hosts and servers. It bundles dynamic DNS across many DNS providers, STUN-based NAT traversal, port forwarding with SNI routing so several services can share port 443, and a web server with reverse proxy, static sites and HTTPS. Certificates are issued and renewed automatically through ACME, and a WAF based on Coraza and OWASP CRS is included.
- Is gately free to use? What license does it have?
- gately is open source under the Apache-2.0 license. Check the license terms before using it in commercial products.
- Is gately still maintained?
- Actively maintained. The last commit to gately was on Oct 24, 2026.
- What can I use gately for?
- Exposing services from a home NAS or server to the internet with HTTPS Replacing a Lucky setup with a single self-hosted gateway Running a reverse proxy and WAF on an OpenWrt router Managing Docker containers and their upgrades from one web console
- Where can I get gately?
- The source code and installation instructions are on GitHub: https://github.com/wangwanjie/gately
Summary generated by AI from the project's README. GitHub stats refresh daily.
Related projects
A general-purpose HTTP reverse proxy and forwarding tool with a web management UI, written in Go, for homelabs and small server setups.
A lightweight, self-hosted program that periodically updates DNS A/AAAA records across many DNS providers, with a web UI.
Self-hosted home server platform acting as a secure reverse proxy, app manager, and gateway with auth, MFA, SSO, and anti-bot protection.
A lightweight reverse proxy with a WebUI that auto-routes Docker and Podman containers, handles Let's Encrypt certificates, and includes SSO and idle sleep.
A third-party app repository for fnOS NAS that repackages 175 self-hosted apps as installable .fpk packages, auto-tracking upstream versions.