Skip to content

Web server, LEMP, reverse proxy, Let’s Encrypt SSL

SWAG

SWAG reverse proxy

SWAG

SWAG - Secure Web Application Gateway sets up an Nginx webserver and reverse proxy with php support and a built-in certbot client that automates free SSL server certificate generation and renewal processes (Let’s Encrypt). It also contains fail2ban for intrusion prevention.

After entering required information, your server will have auto updating SSL secured website! To this website you can attach several services, for example: https://my.server.com/netdata will run Netdata instance.

  • this computer port 80 and 443 must be open to the internet
  • your domain name (myserver.mydomain.com) DNS server should point to your router WAN address
  • make sure to set additional .htpasswd username and password as you don’t want to expose your services without password
  • Config directory: /armbian/swag/config/
  • Website root folder: /armbian/swag/config/www/
  • Reverse proxy configuration samples: /armbian/swag/config/nginx/proxy-confs/

Status: Stable
Architecture: x86-64 arm64
Maintainer: @igorpecovnik
Documentation: Link

armbian-config --cmd SWAG01
SWAG reverse proxy .htpasswd set:
armbian-config --cmd SWAG02
SWAG remove:
armbian-config --cmd SWAG03
SWAG purge with data folder:
armbian-config --cmd SWAG04