v1.0.0
quicgate v1.0.0 — first public release.
A single-binary reverse-proxy manager: the Nginx Proxy Manager workflow on a native Go engine (HTTP/1.1/2/3), automatic Let's Encrypt, and every advanced option as a typed, validated setting instead of a free-text config blob. Running a ~50-host homelab in production.
Install
services:
quicgate:
image: ghcr.io/maferick/quicgate:1 # pin :1 for the 1.x line, or :latest for newest
restart: unless-stopped
network_mode: host
environment:
- QG_ACME_EMAIL=you@example.com
volumes:
- ./data:/dataMulti-arch (amd64 + arm64). First login admin@example.com / changeme (forced change). Don't expose the admin port to the internet.
Highlights
- Proxy / redirect / 404 / static hosts, wildcard domains, load-balanced pools + health checks, custom locations & path rewrites
- Auto Let's Encrypt (HTTP-01), DNS-01 wildcards, custom/self-signed/from-file certs, custom ACME CAs, mTLS, HTTP/3
- Access lists: CIDR / dynamic-DNS / GeoIP + per-rule HTTP-method scoping, forward-auth, rate limiting, auto-ban; CORS preflight handled
- TCP/UDP streams (PROXY protocol, SNI passthrough, TLS termination) + UPnP router forwards
- JSON access logs + viewer, Prometheus metrics, backup/restore, declarative import
- Hardened admin: strict CSP, CSRF guard, 2FA, API tokens, OIDC/LDAP; runs fully offline (no runtime CDN)
Full notes in CHANGELOG.md.