Yet another WebUI for Nginx
  • Go 64.8%
  • Vue 25%
  • TypeScript 9%
  • Shell 1%
  • Dockerfile 0.1%
Find a file
Adamthereal 61185c26f4
test(middleware): add CSWSH hardening cases for CheckWebSocketOrigin (#1647)
Locks in the v2.3.5 origin-validation fix for CVE-2026-34403 / GHSA-78mf-482w-62qj
with named regression cases for every bypass class documented in the advisory:
subdomain confusion, suffix confusion, scheme downgrade, port mismatch, default-
port normalization, ws/wss scheme equivalence, case-insensitive host, IPv6 literal,
RFC 7239 Forwarded parsing, multi-valued X-Forwarded-Host, scheme-only / malformed
origin rejection, node_secret query fallback, empty-secret regression, trailing-
slash tolerance on configured trusted origins.

17 table-driven subtests in a new file; zero production code changes; no new
dependencies.

Co-authored-by: Panguard AI <support@panguard.ai>
2026-04-22 09:33:50 +08:00
.cursor feat(config): supports delete file or directory 2025-06-11 07:09:04 +00:00
.devcontainer chore(deps): update all non-major dependencies (#1538) 2026-02-05 20:31:21 +08:00
.github chore(deps): update softprops/action-gh-release action to v3 (#1632) 2026-04-16 16:44:03 +08:00
.idea chore(idea): exclude go-path 2025-02-04 17:36:33 +08:00
.vscode chore: update deps 2026-04-17 19:36:03 +08:00
api Harden config write paths 2026-04-21 22:40:50 +08:00
app chore: prepare v2.3.8 2026-04-21 15:15:12 +08:00
cmd fix: improve error handling and path resolution in license generation 2025-12-09 11:08:43 +08:00
docs docs: document install secret locations 2026-04-21 14:03:29 +08:00
internal test(middleware): add CSWSH hardening cases for CheckWebSocketOrigin (#1647) 2026-04-22 09:33:50 +08:00
mcp Harden config write paths 2026-04-21 22:40:50 +08:00
model fix(cert): throttle auto-renew retries and expose renewal errors 2026-04-20 23:19:50 +08:00
query chore: prepare v2.3.8 2026-04-21 15:15:12 +08:00
resources fix: preserve forwarded host for docker websocket checks 2026-04-20 23:39:22 +08:00
router fix(upstream): separate http and websocket routes 2026-04-19 11:50:08 +08:00
settings fix(sitecheck): bound outbound connections and add global controls (#1608) 2026-04-18 16:06:06 +08:00
template Fix #1619, WebSocket check fails during initial setup on custom ports (#1620) 2026-04-04 09:50:48 +08:00
.air.toml enhance: gracefully restart, logging, nginx_log analytics 2025-08-29 15:04:35 +08:00
.dockerignore feat: use devconatiner 2025-02-03 15:05:15 +08:00
.editorconfig chore: migrate to ESlint v9 2024-10-24 01:40:20 +09:00
.gitignore chore: update .gitignore and remove settings.local.json 2026-04-18 08:08:03 +00:00
.weblate.ini enhance: new integration method with Weblate to reduce issues with merging changes 2024-07-30 23:30:39 +09:00
AGENTS.md Enhance CLAUDE guidelines and agent linkage (#1464) 2025-12-06 17:08:35 +08:00
app.example.ini fix(sitecheck): bound outbound connections and add global controls (#1608) 2026-04-18 16:06:06 +08:00
CLAUDE.md Enhance CLAUDE guidelines and agent linkage (#1464) 2025-12-06 17:08:35 +08:00
CODE_OF_CONDUCT.md chore: create CODE_OF_CONDUCT.md 2025-02-01 10:35:56 +08:00
CONTRIBUTING.md chore: Create CONTRIBUTING.md 2023-02-16 22:41:02 +08:00
demo.Dockerfile chore(demo): add our prime sponsor 2025-05-05 17:14:35 +08:00
docker-compose-demo.yml enhance(demo): ban Internet 2024-10-23 17:39:57 +08:00
Dockerfile feat: use working directory from environment variable for risefront 2025-05-05 17:24:01 +09:00
go.mod chore: update deps 2026-04-17 19:36:03 +08:00
go.sum chore: update deps 2026-04-17 19:36:03 +08:00
install.sh fix(setup): harden first-run installation flow 2026-04-18 23:47:45 +08:00
LICENSE Create LICENSE 2022-03-04 13:52:23 +08:00
main.go enhance: gracefully restart, logging, nginx_log analytics 2025-08-29 15:04:35 +08:00
package.json feat/dns (#1466) 2025-12-08 17:45:30 +08:00
pnpm-lock.yaml chore(deps): update pnpm.catalog.default uuid to v14 (#1643) 2026-04-20 23:52:15 +08:00
pnpm-workspace.yaml chore(deps): update pnpm.catalog.default uuid to v14 (#1643) 2026-04-20 23:52:15 +08:00
qodana.yaml perf: introduced cache for user, site_config, node 2025-08-25 18:50:44 +08:00
README.md docs: clarify docker access ports 2026-04-19 11:42:53 +08:00
SECURITY.md chore: create SECURITY.md 2025-02-01 10:32:28 +08:00
version.sh fix: update version prompt confirmation handling and clean up unused DNS provider filters #1471 2025-12-09 16:20:59 +08:00

Nginx UI Logo

Nginx UI

Yet another Nginx Web UI, developed by 0xJacky, Hintay and Akino.

DeepWiki Ask DeepWiki

Build and Publish GitHub license Release Version GitHub Star GitHub Fork Repo Size GitHub Fork

Docker Stars Docker Pulls Image Size

Translated Status Featured|HelloGitHub

Documentation

To check out docs, visit nginxui.com.

Sponsor

If you find this project helpful, please consider sponsoring us to support ongoing development and maintenance.

GitHub Sponsors Afdian

Official Community Group

Join the official Nginx UI WeChat community group to discuss usage, deployment ideas, and troubleshooting with other community members.

Scan the QR code below to add us on WeChat, and include Nginx UI Community Group in your request. The administrator will invite you to the official community group.

Nginx UI WeChat Community QR Code

Your support helps us:

  • 🚀 Accelerate the development of new features
  • 🐛 Fix bugs and improve stability
  • 📚 Enhance documentation and tutorials
  • 🌐 Provide better community support
  • 💻 Maintain infrastructure and demo servers

Tooling Support

JetBrains Logo

Thanks to JetBrains for supporting us with free open source licenses.

Stargazers over time

Stargazers over time

English | Español | 简体中文 | 繁體中文 | Tiếng Việt | 日本語

Table of Contents
  1. About The Project
  2. Getting Started
  3. Manual Build
  4. Script for Linux
  5. Example of Nginx Reverse Proxy Configuration
  6. Contributing
  7. License

About The Project

Dashboard

Demo

URLhttps://demo.nginxui.com

  • Usernameadmin
  • Passwordadmin

Features

  • Online statistics for server indicators such as CPU usage, memory usage, load average, and disk usage.
  • Automatic configuration backup after changes, with version comparison and restore capabilities
  • Cluster management supporting mirroring operations to multiple nodes, making multi-server environments easy to manage
  • Export encrypted Nginx / Nginx UI configurations for quick deployment and recovery to new environments
  • Enhanced online ChatGPT assistant supporting multiple models, including Deepseek-R1's chain-of-thought display to help you better understand and optimize configurations
  • MCP (Model Context Protocol) provides special interfaces for AI agents to interact with Nginx UI, enabling automated configuration management and service control.
  • One-click deployment and automatic renewal Let's Encrypt certificates.
  • Online editing websites configurations with our self-designed NgxConfigEditor which is a user-friendly block editor for nginx configurations or Ace Code Editor which supports LLM Code Completion and highlighting nginx configuration syntax.
  • Online view Nginx logs
  • Written in Go and Vue, distribution is a single executable binary.
  • Automatically test configuration file and reload nginx after saving configuration.
  • Web Terminal
  • Dark Mode
  • Responsive Web Design

Internationalization

We proudly offer official support for:

  • English
  • Simplified Chinese
  • Traditional Chinese

As non-native English speakers, we strive for accuracy, but we know there's always room for improvement. If you spot any issues, we'd love your feedback!

Thanks to our amazing community, additional languages are also available! Explore and contribute to translations on Weblate.

Getting Started

Before Use

The Nginx UI follows the Debian web server configuration file standard. Created site configuration files will be placed in the sites-available folder that under the Nginx configuration folder (auto-detected). The configuration files for an enabled site will create a soft link to the sites-enabled folder. You may need to adjust the way the configuration files are organised.

For non-Debian (and Ubuntu) systems, you may need to change the contents of the nginx.conf configuration file to the Debian style as shown below.

http {
	# ...
	include /etc/nginx/conf.d/*.conf;
	include /etc/nginx/sites-enabled/*;
}

For more information: debian/conf/nginx.conf

Installation

Nginx UI is available on the following platforms:

  • macOS 11 Big Sur and later (amd64 / arm64)
  • Windows 10 and later (amd64 / arm64)
  • Linux 2.6.23 and later (x86 / amd64 / arm64 / armv5 / armv6 / armv7 / mips32 / mips64 / riscv64 / loongarch64)
    • Including but not limited to Debian 7 / 8, Ubuntu 12.04 / 14.04 and later, CentOS 6 / 7, Arch Linux
  • FreeBSD
  • OpenBSD
  • Dragonfly BSD
  • Openwrt

You can visit latest release to download the latest distribution, or just use installation scripts for Linux.

Usage

In the first runtime of Nginx UI, please visit http://<your_server_ip>:<listen_port> in your browser to complete the follow-up configurations.

From Executable

Run Nginx UI in Terminal

nginx-ui -config app.ini

Press Control+C in the terminal to exit Nginx UI.

Run Nginx UI in Background

nohup ./nginx-ui -config app.ini &

Stop Nginx UI with the follow command.

kill -9 $(ps -aux | grep nginx-ui | grep -v grep | awk '{print $2}')

With Systemd

If you are using the installation script for Linux, the Nginx UI will be installed as nginx-ui service in systemd. Please use the systemctl command to control it.

Start Nginx UI

systemctl start nginx-ui

Stop Nginx UI

systemctl stop nginx-ui

Restart Nginx UI

systemctl restart nginx-ui

With Docker

Our docker image uozi/nginx-ui:latest is based on the latest nginx image and can be used to replace the Nginx on the host. By publishing the container's port 80 and 443 to the host, you can easily make the switch.

Note
  1. When using this container for the first time, ensure that the volume mapped to /etc/nginx is empty.
  2. If you want to host static files, you can map directories to container.
Deploy with Docker
  1. Install Docker.

  2. Then deploy nginx-ui like this:

docker run -dit \
  --name=nginx-ui \
  --restart=always \
  -e TZ=Asia/Shanghai \
  -v /mnt/user/appdata/nginx:/etc/nginx \
  -v /mnt/user/appdata/nginx-ui:/etc/nginx-ui \
  -v /var/run/docker.sock:/var/run/docker.sock \
  -p 8080:80 -p 8443:443 \
  uozi/nginx-ui:latest
  1. When your docker container is running, Log in to nginx-ui panel with http://<your_server_ip>:8080/install. If you change the port mapping, access Nginx UI through the host port mapped to container port 80 instead.
Deploy with Docker-Compose
  1. Install Docker-Compose.

  2. Create a docker-compose.yml file like this:

services:
    nginx-ui:
        stdin_open: true
        tty: true
        container_name: nginx-ui
        restart: always
        environment:
            - TZ=Asia/Shanghai
        volumes:
            - '/mnt/user/appdata/nginx:/etc/nginx'
            - '/mnt/user/appdata/nginx-ui:/etc/nginx-ui'
            - '/var/www:/var/www'
            - '/var/run/docker.sock:/var/run/docker.sock'
        ports:
            - 8080:80
            - 8443:443
        image: 'uozi/nginx-ui:latest'
  1. Then creat your container by:
docker compose up -d
  1. When your docker container is running, Log in to nginx-ui panel with http://<your_server_ip>:8080/install. If you change the port mapping, access Nginx UI through the host port mapped to container port 80 instead.

Manual Build

On platforms that do not have an official build version, they can be built manually.

Prerequisites

  • Make

  • Golang 1.23+

  • node.js 21+

    npx browserslist@latest --update-db
    

Build Frontend

Please execute the following command in app directory.

pnpm install
pnpm build

Build Backend

Please build the app first, and then execute the following command in the project root directory.

go generate
go build -tags=jsoniter -ldflags "$LD_FLAGS -X 'github.com/0xJacky/Nginx-UI/settings.buildTime=$(date +%s)'" -o nginx-ui -v main.go

Script for Linux

Basic Usage

Install and Upgrade

bash -c "$(curl -L https://cloud.nginxui.com/install.sh)" @ install

The default listening port is 9000, and the default HTTP Challenge port is 9180. If there is a port conflict, please modify /usr/local/etc/nginx-ui/app.ini manually, then use systemctl restart nginx-ui to reload the Nginx UI service.

Remove Nginx UI, except configuration and database files

bash -c "$(curl -L https://cloud.nginxui.com/install.sh)" @ remove

More Usage

bash -c "$(curl -L https://cloud.nginxui.com/install.sh)" @ help

Example of Nginx Reverse Proxy Configuration

server {
    listen          80;
    listen          [::]:80;

    server_name     <your_server_name>;
    rewrite ^(.*)$  https://$host$1 permanent;
}

map $http_upgrade $connection_upgrade {
    default upgrade;
    ''      close;
}

server {
    listen  443       ssl;
    listen  [::]:443  ssl;
    http2   on;

    server_name         <your_server_name>;

    ssl_certificate     /path/to/ssl_cert;
    ssl_certificate_key /path/to/ssl_cert_key;

    location / {
        proxy_set_header    Host                $host;
        proxy_set_header    X-Real-IP           $remote_addr;
        proxy_set_header    X-Forwarded-For     $proxy_add_x_forwarded_for;
        proxy_set_header    X-Forwarded-Proto   $scheme;
        proxy_http_version  1.1;
        proxy_set_header    Upgrade             $http_upgrade;
        proxy_set_header    Connection          $connection_upgrade;
        proxy_pass          http://127.0.0.1:9000/;
    }
}

Contributing

Contributions are what make the open source community such an amazing place to learn, inspire, and create. Any contributions you make are greatly appreciated.

If you have a suggestion that would make this better, please fork the repo and create a pull request. You can also simply open an issue with the tag "enhancement". Don't forget to give the project a star! Thanks again!

  1. Fork the Project
  2. Create your Feature Branch (git checkout -b feature/AmazingFeature)
  3. Commit your Changes (git commit -m 'Add some AmazingFeature')
  4. Push to the Branch (git push origin feature/AmazingFeature)
  5. Open a Pull Request

License

This project is provided under a GNU Affero General Public License v3.0 license that can be found in the LICENSE file. By using, distributing, or contributing to this project, you agree to the terms and conditions of this license.