BunkerWeb
Self-HostedSecurity-first web server and reverse proxy
Overview
BunkerWeb is an open-source, multi-platform web server designed with security at its core. It integrates OWASP Top 10 protections, automatic Let’s Encrypt SSL, rate limiting, and more out of the box. Deployable via Docker, Kubernetes, or traditional setups, it simplifies securing web apps without complex configs. It supports reverse proxy mode, static content serving, and works with popular frameworks, ideal for self-hosters seeking modularity and compatibility to safeguard services from common threats.
Self-Hosting Resources
Below is a reference structure for docker-compose.yml.
⚠️ Do NOT run blindly. Replace placeholders with official values.
version: '3'
services:
bunkerweb:
image: <OFFICIAL_IMAGE_NAME>:latest
container_name: bunkerweb
ports:
- "8080:<APP_INTERNAL_PORT>"
volumes:
- ./data:/app/data
restart: unless-stopped Key Features
- Security-first design (OWASP Top 10 compliance)
- Automatic SSL certificate management
- Multi-platform deployment (Docker, Kubernetes)
Frequently Asked Questions
? Is BunkerWeb hard to install?
BunkerWeb is easy to deploy via pre-configured Docker/Kubernetes images with minimal setup. Basic server admin skills help, but official docs guide users through simple and advanced installations.
? Is it a good alternative to Cloudflare?
Yes—BunkerWeb offers self-hosted security (WAF, SSL, rate limiting) like Cloudflare but keeps data under your control, perfect for privacy-focused users avoiding third-party services.
? Is BunkerWeb completely free?
Yes! It’s open-source under the MIT License, so it’s free to use, modify, and distribute without subscription fees or hidden costs.
Top Alternatives
People Also Ask about BunkerWeb
Tool Info
Pros
- ⊕ Privacy-focused self-hosting
- ⊕ Out-of-the-box security features
Cons
- ⊖ Requires basic server admin knowledge
- ⊖ Learning curve for advanced modular setups