How do I run SWAG on a Mac?
SWAG (Secure Web Application Gateway, lscr.io/linuxserver/swag) is LinuxServer.io's reverse-proxy container: nginx with PHP, a built-in Certbot client that gets and renews Let's Encrypt or ZeroSSL certificates (HTTP or DNS validation, wildcards with DNS), fail2ban jails that block brute-force and bad bots, and hundreds of ready-made proxy confs for common self-hosted apps. FrontierStack finds SWAG on your linked servers and on this Mac and shows the certificate's days left and names, whether nginx is up and its configuration tests clean, the enabled proxy confs (enable a sample or disable one, tested before nginx reloads) and fail2ban's jails with unban. Alerts fire when it stops, nginx is down, nginx -t fails or renewals are failing. No web UI and no paid edition; it's free, open-source software (GPL-3.0). Set it up on this Mac below (DNS validation via Cloudflare recommended, since Apache usually holds 80/443), or copy a docker run for a server.
With FrontierStack you can install or connectSWAG from its Proxies & Load Balancers catalog, then monitor its health, ports and certificate alongside the rest of your stack.
Run it from your Mac.
FrontierStack installs, monitors and secures services on this Mac and on linked servers; and keeps your passwords and keys out of any AI's sight.
Download FrontierStackApple notarized · Safe & secure · macOS 13 Ventura+