SWAG on a Mac

nginx + Let's Encrypt + fail2ban in one container (LinuxServer.io) · Proxies & Load Balancers

SWAG (Secure Web Application Gateway, lscr.io/linuxserver/swag) is LinuxServer.io's reverse-proxy container: nginx with PHP, a built-in Certbot client that gets and renews Let's Encrypt or ZeroSSL certificates (HTTP or DNS validation, wildcards with DNS), fail2ban jails that block brute-force and bad bots, and hundreds of ready-made proxy confs for common self-hosted apps. FrontierStack finds SWAG on your linked servers and on this Mac and shows the certificate's days left and names, whether nginx is up and its configuration tests clean, the enabled proxy confs (enable a sample or disable one, tested before nginx reloads) and fail2ban's jails with unban. Alerts fire when it stops, nginx is down, nginx -t fails or renewals are failing. No web UI and no paid edition; it's free, open-source software (GPL-3.0). Set it up on this Mac below (DNS validation via Cloudflare recommended, since Apache usually holds 80/443), or copy a docker run for a server.

Run SWAG with FrontierStack

Install or connect SWAG; then check its status, ports and certificate from FrontierStack. The same screen links to firewall checks and backups where they apply.

Related in Proxies & Load Balancers

• ProxySQL
• MySQL Router
• Nginx Proxy Manager
• keepalived