Waystation 0.2.0: first public preview

Waystation 0.2.0 is the first public preview of a free, open-source, self-hosted artifact repository: one fast pull-through cache and private registry for Docker Hub, GHCR, npm, PyPI, Maven, apt, yum/dnf, Go modules, Helm, Terraform providers and Ansible Galaxy. A lightweight alternative to Nexus Repository and Artifactory, with no component caps, request limits or licence keys.

Images

Multi-arch (linux/amd64, linux/arm64), with SBOM and SLSA build provenance:

ghcr.io/slinkysoftware/waystation-server:0.2.0
ghcr.io/slinkysoftware/waystation-worker:0.2.0
ghcr.io/slinkysoftware/waystation-web:0.2.0

Verify: gh attestation verify oci://ghcr.io/slinkysoftware/waystation-server:0.2.0 --owner SlinkySoftware

Get started

• Ten-minute try-out: Documents/Operations/TRY_IT.md
• Production deployment: DEPLOYMENT.md and the reverse-proxy recipes (nginx, Traefik, Caddy, HAProxy, Synology DSM)
• Let an AI agent deploy it: tell your agent "Deploy Waystation from https://github.com/SlinkySoftware/Waystation"; it follows AGENT_DEPLOYMENT.md
• Moving from Nexus: built-in importer and side-by-side comparison, MIGRATING_FROM_NEXUS.md

What's in it

• Formats: Docker/OCI (proxy, hosted, group; Docker Hub mirror mode, upstream aliases such as ghcr.io/...), npm (proxy, hosted, group; corepack-ready version documents), PyPI, Maven, Helm, Ansible Galaxy (proxy, hosted, group), apt (proxy), yum/dnf (proxy, hosted), Go modules and Terraform providers (proxy), raw files.
• Performance: nginx serves cached files directly; request coalescing turns a hundred concurrent misses into one upstream fetch; cache fills finish even when the client that started them disconnects.
• Security: every digest and checksum verified, bounded sizes, normalised paths, SSRF guard; signed apt/yum metadata passed through untouched; role-based access control down to the repository; local accounts with TOTP, LDAP / Active Directory and OIDC single sign-on; API tokens and service accounts.
• Operations: live dashboard and activity feed, audit log, cleanup policies, garbage collection, quotas and a low-disk guard, backup/restore tool, webhooks, Prometheus metrics, Grafana dashboard, Zabbix template, declarative YAML provisioning.

Status

Pre-1.0: interfaces may still change between minor releases, and the 1.0 security review is still to come. It already replaces a Nexus Repository instance in a home lab (Docker Hub and GHCR mirrors, apt, yum and npm for a mixed Linux fleet). Full change history: CHANGELOG.md.

Feedback, issues and pull requests are very welcome.