57 docs tagged with "firewall"

AdGuard Ad Blocker is a comprehensive solution designed to enhance your online browsing experience by eliminating all kinds of ads, from annoying banners and pop-ups to intrusive video ads. It not only removes these distractions but also maintains the functionality and appearance of the websites you visit. The app also offers privacy protection, shielding your data from web analytics and online trackers. In addition, AdGuard ensures browsing security by protecting against phishing and malicious sites. It also includes a parental control feature, providing a safe online environment for children by blocking inappropriate and adult content. The app is designed to work across all browsers and apps, offering a seamless ad-free experience. Moreover, it saves traffic and speeds up page loading by filtering ads before they reach your device. AdGuard is more than just an ad blocker; it's a tool that enhances your online safety and browsing speed.

AdGuard Home Sync is a tool designed to synchronize filters, blocklists, and configuration between multiple AdGuard Home instances. It allows you to maintain consistent filtering across different AdGuard Home deployments by synchronizing configuration from an origin instance to one or more replica instances.

AliasVault combine 2 fonctionnalités puissantes :

Amnezia VPN est un client et serveur VPN open source créé en 2021 par une équipe de développeurs russes face à la recrudescence de la censure étatique (Roskomnadzor bloquant OpenVPN, WireGuard, puis Shadowsocks). Sa particularité : il ne se contente pas d'un seul protocole — il supporte nativement W

Authelia est un serveur d'authentification SSO et d'autorisation qui se place en reverse proxy devant vos applications web....

Authman était un projet de serveur 2FA TOTP avec applications natives (Android, iOS, desktop). Il n'a jamais atteint une adoption significative (9 étoiles) et n'est plus maintenu depuis mi-2024.

Bitwarden est la version officielle du serveur, maintenue par l'entreprise Bitwarden Inc. Elle offre exactement les mêmes fonctionnalités que [[app-vaultwarden]] mais :

Blocky est un DNS proxy moderne qui bloque les publicités et trackers, redirige des domaines et supporte le conditional forwarding....

Calorific est le pendant minimaliste de [[app-nutritrace|NutriTrace]] : un tracker qui ne suit que les calories, rien d'autre. Pas de macros, pas de micronutriments, pas de base alimentaire géante. Juste un compteur simple.

CrowdSec is a free, modern, and collaborative security engine utilizing crowdsourcing to generate cyber threat intelligence data. It analyzes visitor behavior & provides an adapted response to all kinds of attacks. It can read logs, spot malevolent visitors, and trigger appropriate remediation.

CrowdSec Manager est un dashboard web communautaire pour la stack [[app-crowdsec|CrowdSec]]....

ddclient est un client DDNS (Dynamic DNS) léger et polyvalent permettant de mettre à jour automatiquement les entrées DNS lorsque votre adresse IP publique change. Il supporte une large gamme de fournisseurs de DNS dynamique incluant Cloudflare, GoDaddy, OVH, DuckDNS, No-IP, DynDNS, et bien d'autres

Container to update DNS records periodically with WebUI for many DNS providers

Defguard est un bundle entreprise qui combine en une seule plateforme :

DockTail est un petit binaire Go qui se branche sur le socket Docker et qui expose automatiquement vos conteneurs comme Tailscale Services, simplement en lisant des labels Docker. L'idée est la même que ce que fait Traefik pour le HTTPS automatique : un contrôleur déclaratif qui surveille les événem

Domain Watchdog est un petit service Python conçu pour suivre la santé de votre portefeuille de noms de domaine....

Ente Auth est une application 2FA multiplateforme (iOS, Android, macOS, Linux, Windows, Web) avec chiffrement E2E et synchronisation entre tous vos appareils. Codes TOTP lisibles par vous uniquement.

Fail2Ban est un framework de prévention d'intrusions qui lit les logs de vos services (SSH, web, mail…) et bloque les IP malveillantes via iptables/nftables. Plus de 100 filtres fournis par défaut.

Faraday is a powerful open-source vulnerability management platform designed to streamline security assessments and pentesting workflows. It provides centralized visibility, real-time collaboration, and automation capabilities to help security teams manage vulnerabilities efficiently. Faraday supports integration with multiple security tools, offering a unified interface to collect, analyze, and report findings. With its scalable architecture and robust API, Faraday enables teams to enhance their security operations while maintaining compliance and improving response times.

FlashPaper is a secure, self-destructing message service that allows you to share sensitive information safely. Messages are encrypted and automatically destroyed after being viewed once, ensuring that sensitive data remains secure and temporary.

Gravity est un DNS/DHCP server avec ad-blocking, écrit en Go par BeryJu (la même équipe que Authelia, l'authentification SSO). Il combine :

Headscale est un serveur de coordination compatible avec le client officiel Tailscale....

Hemmelig is a secure, self-hosted secret sharing platform that allows you to share sensitive information like passwords, API keys, and confidential documents safely. Built with security in mind, Hemmelig provides end-to-end encryption, expiration dates, and access controls to ensure your secrets remain protected. Perfect for teams, developers, and organizations who need to share sensitive information securely without relying on external services.

Invidious is a privacy-respecting alternative frontend for YouTube, designed to offer a lightweight, ad-free, and tracking-free viewing experience. It allows users to watch YouTube videos without being tracked, bypasses regional restrictions, and provides advanced features like video downloads, subscription management, and audio-only mode. Invidious supports multiple languages and offers a minimal interface with various themes for enhanced user experience. Additionally, it integrates seamlessly with other platforms by providing RSS feeds for subscriptions and API support.

iSponsorBlockTV est un proxy pour les apps YouTube sur TV qui injecte la fonctionnalité SponsorBlock (segments sponsorisés skippés automatiquement) dans :

KeePassXC is a modern, secure, and open-source password manager that stores and manages your passwords in an encrypted database. It provides strong security features and cross-platform compatibility.

KeeWeb is a modern, fast, and self-hosted password manager designed for individuals and teams. It provides a sleek, responsive user interface for managing and securing your passwords efficiently. KeeWeb supports importing and syncing password databases from various sources such as Dropbox, OneDrive, or local storage. It offers seamless offline access, powerful search capabilities, and advanced encryption to protect your sensitive data. KeeWeb ensures a consistent experience across desktop and web applications, with customization options to suit your preferences.

MagicPack est une expérience Python pour faire de la capture et analyse de paquets en temps réel sur une interface réseau locale....

mCaptcha is a proof-of-work based captcha system that prioritizes user privacy and offers a fully automated experience. Unlike traditional captcha systems, mCaptcha does not track or profile users, ensuring a privacy-focused user experience. It is designed to be robust and accurate, not relying on IP addresses for rate-limiting, making it suitable for users behind NATs. The user experience is silent and seamless, eliminating the need for annoying image-based captchas. mCaptcha uses a proof-of-work solution to fiercely defend your site, making it more expensive for attackers to target your site than for you to respond to their requests. It is a libre software, with client libraries licensed under proprietary-friendly free software licenses. mCaptcha is also compatible with reCAPTCHA and hCaptcha, making it a convenient drop-in replacement. The core functionality of mCaptcha is to use a SHA256 based proof-of-work system to rate limit users, providing a token upon successful validation that users can then submit with their request or form submission to the target website.

Meshping est un service de monitoring conçu spécifiquement pour les réseaux maillés (mesh networks) : il maintient une matrice N×N des latences ping entre tous les nœuds d'un cluster, et visualise l'évolution temporelle pour détecter les liens faibles, les routes qui se dégradent, ou les partitions

NutriTrace est un tracker nutritionnel qui permet de suivre l'apport calorique et les macronutriments (protéines, glucides, lipides) au quotidien....

Octelium va plus loin qu'un simple bastion : c'est une plateforme zero-trust qui réunit dans un même binaire contrôle d'accès, VPN mesh, service mesh et bastion. Le serveur unique expose un plan de contrôle (API) et un plan de données (data plane) qui relayent les connexions SSH, HTTP, TCP, MySQL, g

OpenBao est un fork communautaire d'HashiCorp Vault, créé en 2024 suite au changement de licence de Vault (de MPL vers BSL). OpenBao garde la même API et les mêmes features que Vault, mais reste 100% open source :

OrigamiVault propose une approche physique du partage de secrets : au lieu d'un lien, vous générez un QR code imprimable que vous donnez en main propre.

Passbolt is a security-first, open source password manager designed for teams and businesses. It is trusted by thousands of organizations worldwide, including Fortune 500 companies, defense industry, universities, startups, and many others. The app puts security first, with top penetration testers regularly assessing its software. It supports user-owned secret keys and end-to-end encryption even in complex scenarios. Passbolt is also built for collaboration, allowing organizations and teams to securely share credentials with powerful auditing tools. It offers unparalleled granularity for both access controls and encrypted data. The app is headquartered in the EU, ensuring that privacy is not only a top priority but also guaranteed by law. Passbolt can be used from your browser or mobile phone, with real-time sharing. It also supports programmatic password retrieval, storage, and sharing with its JSON API.

Password Pusher is an open-source, self-hosted application designed to securely share passwords and sensitive information via unique, time-sensitive URLs. It eliminates the need to send sensitive credentials through insecure channels like email or messaging apps. The app is lightweight, easy to deploy, and prioritizes user privacy and security. Password Pusher allows for fine-grained control over link expiration, including the number of views or days before a link expires. It ensures that shared passwords are destroyed after expiration, adding an extra layer of security. The app can be deployed on various platforms such as Docker or Kubernetes, making it highly flexible and accessible for individuals and organizations alike.

Pi-hole is a network-wide ad blocker that acts as a DNS sinkhole to protect your devices from unwanted content without installing any client-side software. It blocks ads at the DNS level, meaning ads are blocked before they even reach your devices, resulting in faster browsing, reduced bandwidth usage, and enhanced privacy. Pi-hole provides a powerful web interface for easy management and detailed statistics about your network's DNS queries. It can block millions of ad-serving domains and supports custom block lists. The application also includes features like DHCP server capabilities, DNS-over-HTTPS (DoH) support, and comprehensive query logging. With Pi-hole, you can monitor all DNS requests on your network, see which domains are being blocked, and maintain complete control over your network's DNS filtering.

Pocket ID est un serveur OIDC (OpenID Connect) minimaliste conçu pour être simple à installer et à utiliser....

PortChecker est un service minimaliste écrit en Go dont l'unique mission est de pinger régulièrement des ports réseau (TCP ou UDP) sur des hôtes distants et de notifier quand un port devient inaccessible. C'est l'équivalent ultra-simplifié d'[[app-uptime-kuma]] focalisé exclusivement sur la couche t

PWgen est générateur de mots de passe forts en ligne de commande : cryptographiquement secure, configurable (longueur, charset, options), scriptable.

Redlib is a privacy-focused and lightweight alternative frontend for Reddit, designed to enhance user experience by removing ads, tracking, and unnecessary JavaScript. Built using Rust, Redlib delivers a fast and efficient browsing experience while ensuring user privacy by proxying all requests, including media, through its server. It provides an ad-free, clutter-free interface inspired by Reddit's modern design, making it an ideal choice for users seeking a secure and streamlined way to browse Reddit content.

SearXNG is a powerful, privacy-focused metasearch engine that aggregates results from over 70 search services, ensuring your searches remain private and untracked. It offers secure, encrypted connections and the option to use it over Tor for enhanced online anonymity. With about 130 integrated search engines and 60 translations, SearXNG provides a comprehensive and versatile search experience. The app also offers easy integration of search engines and maintains high standards of professional development, including continuous integration, quality assurance, and automated UI testing. SearXNG was launched in 2021 as a fork of the searx project, and it continues to evolve with user-friendly features and improvements.

Secrover est scanner de sécurité web automatisé : détecte failles owasp top 10, screenshots, génération de rapports. successeur spirituel de sec-rover.

step-ca (anciennement "step certificates") est un serveur de PKI privé open source qui fait trois choses principales :

TapMap est une application web qui permet de dessiner et maintenir une cartographie réseau précise, à la main ou semi-automatiquement. L'idée : remplacer les schémas Visio/Draw.io statiques par une carte interactive hébergée, qui peut afficher en temps réel l'état (up/down) de chaque équipement via

Teleport (de l'éditeur Gravitational, désormais Teleport Inc.) est une plateforme d'accès zero-trust qui remplace l'empilement traditionnel VPN + bastion + IAM + audit log par une stack unifiée. Plutôt que de distribuer des clés SSH statiques et d'exposer un sous-réseau entier via un VPN, Teleport é

TruffleHog is a security tool that finds secrets in your code, repositories, and files. It uses pattern matching, entropy analysis, and other methods to detect potential secrets and credentials.

Twingate Connector securely bridges your private network resources to the Twingate Zero Trust platform without exposing inbound ports. Deploy a lightweight connector container and authenticate it with your tenant network and connector tokens.

Unbound est un serveur DNS récursif validant et mettant en cache, développé par NLnet Labs. Il est conçu pour offrir une résolution DNS sécurisée, rapide et respectueuse de la confidentialité.

UniFi Voucher Site est une application PHP légère qui s'interface avec un contrôleur UniFi (UniFi Network Application) pour générer des vouchers hotspot (codes d'accès invités). Le but : remplacer la console d'administration officielle par une page web simplifiée, accessible à des non-techniciens (r

VaulTLS est interface web légère pour cert-manager et issuance let's encrypt : gestion csr, certificats, acme challenges. ui au-dessus de step-ca ou acme.sh.

A comprehensive OSINT tool for analyzing websites, providing insights into security configurations, server architecture, and technologies.

WGDashboard est une interface web self-hosted écrite en Python (Flask) qui permet de gérer plusieurs instances WireGuard simultanément depuis un point unique. Là où wg et wg-quick se pilotent en ligne de commande, WGDashboard apporte une UI claire, des graphes de trafic et des outils d'administr

Wiredoor est une plateforme de tunneling sécurisé écrite en Go qui permet d'exposer des services s'exécutant sur des réseaux privés ou locaux (homelab, intranet, IoT) vers Internet sans ouvrir de port entrant sur le pare-feu. Le canal de transport est un tunnel WireGuard chiffré bout-en-bout, et la

xBackBone est classé dans la taxonomie Networking de selfh.st car il est fréquemment utilisé comme point de partage réseau : serveur d'upload pour ShareX, API REST publique, partage de liens courts. Sa capacité à recevoir des fichiers depuis de multiples clients et à exposer des URLs publiques en fa

YeetFile est un service de partage de fichiers chiffré E2E :

ZTNet est un controller self-hosted pour ZeroTier One, écrit en TypeScript....