Secure Proxy ManagerContainerised proxy management for homelabs and small networks

A Squid forward proxy with a Go backend, React UI, and Go ICAP WAF — deployed in minutes with Docker Compose.

Traffic filtering

Domain and IP blocking with CIDR and wildcard subdomain support. One-click import of curated public blocklists. Geo-based IP blocking by country code.

IP whitelist

Whitelist trusted destination IPs to bypass the direct-IP block rule. Useful for LAN devices accessed by IP address.

ICAP WAF

Go-based ICAP server inspects HTTP requests with 175 regex rules across 23 categories plus 7 behavioural heuristics. Anomaly scoring with a configurable block threshold.

Real-time logs

Live log streaming over WebSocket with one-time token authentication. Filter, search, and aggregate access events.

Hardened by default

HTTP Basic plus JWT authentication, login rate limiting, SSRF guard on import URLs, CORS allowlist, bcrypt password hashing, backend API bound to localhost only.

Self-hosted

Runs entirely on your hardware via Docker Compose. SQLite database, no cloud dependency. Configurable via environment variables and the web UI.