Tool
Nginx Proxy Manager
A Dockerized UI for Nginx reverse proxy hosts with built-in Let's Encrypt, aimed at home labs that want HTTPS without hand-writing every server block.
What it is
Nginx Proxy Manager (NPM) wraps Nginx configuration in a web UI: proxy hosts, SSL certificates (Let's Encrypt), and basic access controls. Official site and GitHub list it under the MIT License. Typical install is a Compose stack with ports 80/443 and an admin UI on 81.
What it replaces
It replaces hand-maintained Nginx/Caddy snippets for many homelab reverse-proxy jobs, and replaces “HTTP forever” with automated certs when DNS and ports cooperate.
It does not replace understanding what you are exposing. A friendly UI that forwards ai.example.com to an unauthenticated Open WebUI is still a public model endpoint.
License
MIT License (project site and GitHub LICENSE). Free to use, modify, and redistribute under MIT terms.
Where it falls over
- Default admin credentials and exposed port 81 are a classic first-hour footgun.
- WebSocket / large-upload / long-timeout apps (hello, AI UIs) need proxy tweaks the happy path hides.
- Certificate issuance fails for boring DNS and firewall reasons; the UI error is not always the real cause.
- You are still operating Nginx. Bad headers, weak TLS choices, and open admin panels remain your problem.
Who it's for
Homelabbers who want HTTPS reverse proxies with less config file archaeology. Not a substitute for a hardened edge if you are fronting production money or secrets.
Verdict
Use NPM when a MIT-licensed Docker proxy UI fits the lab. Lock down the admin UI, prefer Tailscale or similar for private services, and test WebSockets before you blame the AI app.