SWAG (Secure Web Application Gateway)
Self-HostedDockerized all-in-one web gateway with SSL, reverse proxy, and security tools
Overview
SWAG is a Docker container bundling Nginx, Let's Encrypt (auto SSL), fail2ban, ModSecurity, and more. It simplifies securing self-hosted apps with pre-configured reverse proxy templates for Nextcloud, Plex, Jellyfin, and others. Deploy via Docker Compose, customize with environment variables, and get regular security updates. Ideal for centralizing and protecting web services with minimal setup.
Self-Hosting Resources
Below is a reference structure for docker-compose.yml.
⚠️ Do NOT run blindly. Replace placeholders with official values.
version: '3'
services:
swag_secure_web_application_gateway:
image: <OFFICIAL_IMAGE_NAME>:latest
container_name: swag-secure-web-application-gateway
ports:
- "8080:<APP_INTERNAL_PORT>"
volumes:
- ./data:/app/data
restart: unless-stopped Key Features
- Auto-renewing Let's Encrypt SSL certificates
- Pre-configured reverse proxy templates for popular apps
- Built-in security (fail2ban, ModSecurity, HSTS)
- HTTP/2 & HTTP/3 support
- Dockerized for easy deployment and scaling
Frequently Asked Questions
? Is SWAG hard to install?
SWAG is easy for Docker users: deploy via Docker Compose with a minimal YAML file. Pre-made templates for apps like Nextcloud reduce setup time, but basic Docker/Nginx knowledge helps with custom reverse proxy rules or security tweaks.
? Is it a good alternative to NGINX Plus?
Yes! SWAG offers enterprise-grade features (reverse proxy, SSL, security) as a free, open-source Docker container. It’s perfect for self-hosters who want NGINX Plus-like capabilities without the proprietary license fee or complex setup.
? Is SWAG completely free?
Absolutely! SWAG is open-source (MIT license) and uses free tools like Let's Encrypt for SSL. There are no paid tiers, subscriptions, or hidden costs — you can secure unlimited apps at no charge.
Top Alternatives
People Also Ask about SWAG (Secure Web Application Gateway)
Tool Info
Pros
- ⊕ Full control over your web gateway (no vendor lock-in)
- ⊕ No subscription fees or hidden costs
- ⊕ Simplifies complex security setup for self-hosters
- ⊕ Regular updates from LinuxServer.io community
Cons
- ⊖ Requires basic Docker and Nginx knowledge
- ⊖ No graphical user interface (GUI) — config via files
- ⊖ Custom rules may need troubleshooting for advanced use cases
- ⊖ Resource usage depends on number of proxied apps