PosternProxy
Self-hosted infrastructure, under your control

The front door to your network.

PosternProxy turns Caddy into an approachable, production-ready reverse proxy platform. Route traffic, automate TLS, and manage every server from one focused control plane.

Get PosternProxy Explore features
Beta release · Free under AGPLv3
posternproxy.local
OVERVIEWGood evening.
+ Add host
12Proxy hosts
12Certificates
3Servers
Proxy hostsView all
A
app.example.com10.0.1.20:3000
OnlineHTTPS
D
dash.example.com10.0.1.12:8080
OnlineHTTPS
G
git.example.com10.0.2.8:443
OnlineHTTPS
Single binaryController and embedded UI
Automatic HTTPSPowered by Caddy
Multi-serverOutbound agent connections
AGPLv3Open source core
Everything in one place

Powerful proxy management.
None of the config sprawl.

PosternProxy puts the controls you use every day behind a clean interface while Caddy handles the hard parts underneath.

Route with confidence

Configure proxy hosts, per-path locations, redirects, custom headers, and parked domains from one focused interface.

HTTPS without toil

Let Caddy issue and renew Let's Encrypt certificates automatically, or upload and manage your own PEM certificates.

Host health monitoring

Track healthy and unhealthy upstreams from the dashboard with live status, request totals, failure counts, and automatic 30-second refreshes.

Multi-server management

Provision remote nodes over SSH, assign hosts to specific servers, and manage the whole fleet from one UI through secure outbound agents.

Custom error pages per host

Replace generic 404, 502, and 503 responses with branded HTML scoped to each proxy host while preserving the original status code.

Access on your terms

Apply IP allowlists, denylists, and HTTP Basic Auth per host. Every administrative change is captured in the audit log.

Changes you can reverse

Review configuration history and roll a proxy host back to a known-good state when a deployment does not go to plan.

API-first automation

Create scoped access tokens for scripts, CI/CD pipelines, and operations tooling. Every token-driven change remains tied to its user in the audit log.

Migration and recovery

Preview and import existing Nginx configurations, export point-in-time backups, and restore the control plane when infrastructure moves.

Resilient traffic controls

Combine load-balancing policies, active and passive health checks, rate limits, custom headers, and per-path routing for production traffic.

Certificate lifecycle visibility

Issue and renew Let's Encrypt certificates automatically, upload custom PEM certificates, and see upcoming expirations from the dashboard.

Layer 4 and port forwarding

Publish TCP and UDP stream hosts, pass TLS through untouched, and manage iptables or socat forwarding rules alongside HTTP routes.

Clear by design

A small stack with
serious capability.

The controller bundles its Vue interface, Go API, and SQLite database into one deployable binary. Caddy remains the proven data plane, and optional agents extend the same control plane to every server.

  • No external database required
  • No inbound management ports on agents
  • REST API and complete audit trail
  • Docker and native Linux deployment
Read the technical overview ↗
YOUR TEAMBrowser
CONTROL PLANEPosternProxyUI · API · SQLite
DATA PLANECaddy80 · 443
REMOTE NODEAgentWebSocket
From zero to routed

Up and running in
three direct steps.

01

Deploy

Run with Docker or install the compiled binary on your Linux server. SQLite and the web UI are included.

02

Connect

Point PosternProxy at Caddy and add remote servers from the control plane when your footprint grows.

03

Publish

Create a host, choose an upstream, and let automatic HTTPS take care of certificates and renewals.

Docker quick start
$ git clone https://github.com/posternproxy/posternproxy.git
$ cd posternproxy/docker
$ cp .env.example .env && docker compose up -d
One product. Two paths.

Open by default.
Flexible when business requires it.

COMMUNITY

Open Source

Use the complete product under AGPLv3. Ideal for individuals, homelabs, and organizations comfortable sharing network-served modifications.

  • Complete controller and agent
  • All core features included
  • Community collaboration
  • AGPLv3 licensed
Explore open source
BUSINESS

Commercial

Get the legal flexibility to embed, host, redistribute, or build proprietary offerings with PosternProxy.

  • Non-AGPL licensing rights
  • SaaS, MSP, and OEM options
  • Priority support and SLAs
  • Custom engineering available
Discuss your use case
PosternProxy logo
Take control of the edge

Your services deserve a better front door.

Deploy PosternProxy, connect your first host, and put routine proxy work back where it belongs: under control.

Get started on GitHub ↗Talk to us →