Pomerium
Identity-aware reverse proxy, successor to now obsolete oauth_proxy. It inserts an OAuth step before proxying your request to the backend, so that you can safely expose your own websites to public Internet.
At a glance
- GitHub stars
- 5.1k
- Last activity
- 2026-11-03
- Latest release
- v0.33.6
2026-10-27 - Commits (12 mo)
- 640
- License
- Apache-2.0
- Language / platform
- Go, Docker
Maintenance health: Actively maintained — Commits in the last 3 months.
Run Pomerium yourself
- RAM: ~512 MB server (1 vCPU)
- Docker: yes
Estimated monthly server cost
| Provider | Plan size | ~ USD / month | |
|---|---|---|---|
| Vultr | 512 MB | $3.5 | Deploy → |
| DigitalOcean | 512 MB | $4 | Deploy → |
| Akamai (Linode) | 1 GB | $5 | Deploy → |
Rough estimate from the app's stack and category, not a benchmark. Several light apps can share one server. Some hosting links may be affiliate links. We may earn a commission at no extra cost to you; it never affects which apps we list.
Similar self-hosted apps
Caddy
Powerful, enterprise-ready web server with automatic HTTPS.
Traefik
HTTP reverse proxy and load balancer that makes deploying microservices easy.
Nginx Proxy Manager
Docker container for managing Nginx proxy hosts with a simple, powerful interface.
NGINX
HTTP and reverse proxy server, mail proxy server, and generic TCP/UDP proxy server.
Pangolin
Identity-aware tunneled reverse proxy with dashboard UI, access control, and WireGuard-based tunnels (alternative to Cloudflare Tunnel, Tailscale).
SafeLine
Web application firewall / reverse proxy to protect your web apps from attacks and exploits.
Is this your project? Get it featured or send a correction upstream to awesome-selfhosted-data.