RentnerProxy

RentnerProxy is a free, open-source, self-hosted reverse proxy manager powered by Caddy. Its web interface brings proxy hosts, redirects, TLS certificates, access policies, and security controls into one place for homelabs and self-hosted services.

Proxy and certificate management • Create and manage proxy hosts and redirects with HTTP/2, HTTP/3, and WebSocket support. • Issue and renew TLS certificates through ACME using HTTP-01 or Cloudflare DNS-01, including wildcard certificates, or import existing certificates. • Organize hosts with tags, groups, filters, global search, and permission-aware bulk actions. • Configure Zstd/Gzip compression, browser-cache rules, and an optional bounded response cache for public assets.

Automation and operations • Keep Cloudflare A and AAAA records synchronized with public IP changes using shared DNS connections, scheduling, retries, and recovery. • Optionally discover labeled Docker containers and reconcile them into managed proxy hosts. • Receive email and webhook notifications with configurable event subscriptions and delivery status. • Detect new releases, receive update notifications, and follow guided upgrades. • Inspect live status, access logs, and audit logs.

Access and security • Apply Basic Auth, Forward Auth, and IP allow/deny policies, and verify HTTPS upstream certificates. • Integrate CrowdSec with a managed or external Local API and a dedicated security dashboard; community and Console connections are optional. • Manage users, roles, and permissions, with TOTP two-factor authentication and passkeys.

RentnerProxy is distributed as a single Docker container containing Caddy, PostgreSQL, Valkey, and a Rust controller. The supported server platform is Linux (amd64), with administration through a web browser. The interface supports English, German, Spanish, French, Italian, Portuguese, Dutch, and Polish, with light and dark themes and personal accent colors.

The project is licensed under MIT. The current public release is v1.0.0-beta.2; it is beta software and breaking changes remain possible. Manual and delegated DNS-01 are planned and are not included in this release.