Skip to content

v1.0.0

Choose a tag to compare

@maferick maferick released this 23 Jul 20:29

quicgate v1.0.0 — first public release.

A single-binary reverse-proxy manager: the Nginx Proxy Manager workflow on a native Go engine (HTTP/1.1/2/3), automatic Let's Encrypt, and every advanced option as a typed, validated setting instead of a free-text config blob. Running a ~50-host homelab in production.

Install

services:
  quicgate:
    image: ghcr.io/maferick/quicgate:1   # pin :1 for the 1.x line, or :latest for newest
    restart: unless-stopped
    network_mode: host
    environment:
      - QG_ACME_EMAIL=you@example.com
    volumes:
      - ./data:/data

Multi-arch (amd64 + arm64). First login admin@example.com / changeme (forced change). Don't expose the admin port to the internet.

Highlights

  • Proxy / redirect / 404 / static hosts, wildcard domains, load-balanced pools + health checks, custom locations & path rewrites
  • Auto Let's Encrypt (HTTP-01), DNS-01 wildcards, custom/self-signed/from-file certs, custom ACME CAs, mTLS, HTTP/3
  • Access lists: CIDR / dynamic-DNS / GeoIP + per-rule HTTP-method scoping, forward-auth, rate limiting, auto-ban; CORS preflight handled
  • TCP/UDP streams (PROXY protocol, SNI passthrough, TLS termination) + UPnP router forwards
  • JSON access logs + viewer, Prometheus metrics, backup/restore, declarative import
  • Hardened admin: strict CSP, CSRF guard, 2FA, API tokens, OIDC/LDAP; runs fully offline (no runtime CDN)

Full notes in CHANGELOG.md.