Add new `/proxmox/tail` API endpoint for streaming file contents from Proxmox nodes and LXC containers via WebSocket. Extend journalctl endpoint to support filtering by multiple services simultaneously. Changes: - Add `GET /proxmox/tail` endpoint supporting node-level and LXC container file tailing - Change `service` parameter from string to array in journalctl endpoints - Add input validation (`checkValidInput`) to prevent command injection - Refactor command formatting with proper shell quoting Security: All command inputs are validated for dangerous characters before
Table of content
- Table of content
- Running demo
- Key Features
- Prerequisites
- Setup
- How does GoDoxy work
- Proxmox Integration
- Update / Uninstall system agent
- Screenshots
- Manual Setup
- Build it yourself
- Star History
Running demo
Key Features
- Simple
- Effortless configuration with simple labels or WebUI
- Simple multi-node setup
- Detailed error messages for easy troubleshooting.
- ACL: connection / request level access control
- IP/CIDR
- Country (Maxmind account required)
- Timezone (Maxmind account required)
- Access logging
- Periodic notification of access summaries for number of allowed and blocked connections
- Advanced Automation
- Automatic SSL certificate management with Let's Encrypt (using DNS-01 Challenge)
- Auto-configuration for Docker containers
- Hot-reloading of configurations and container state changes
- Container Runtime Support
- Docker
- Podman
- Idle-sleep: stop and wake containers based on traffic (see screenshots)
- Docker containers
- Proxmox LXC containers
- Proxmox Integration
- Automatic route binding: Routes automatically bind to Proxmox nodes or LXC containers by matching hostname, IP, or alias
- LXC lifecycle control: Start, stop, restart containers directly from WebUI
- Real-time logs: Stream journalctl logs from nodes and LXC containers via WebSocket
- Traffic Management
- HTTP reserve proxy
- TCP/UDP port forwarding
- OpenID Connect support: SSO and secure your apps easily
- ForwardAuth support: integrate with any auth provider (e.g. TinyAuth)
- Customization
- Web UI
- App Dashboard
- Config Editor
- Uptime and System Metrics
- Docker
- Container lifecycle management (start, stop, restart)
- Real-time container logs via WebSocket
- Proxmox
- LXC container lifecycle management (start, stop, restart)
- Real-time node and LXC journalctl logs via WebSocket
- Cross-Platform support
- Supports linux/amd64 and linux/arm64
- Efficient and Performant
- Written in Go
Prerequisites
Configure Wildcard DNS Record(s) to point to machine running GoDoxy, e.g.
- A Record:
*.domain.com->10.0.10.1 - AAAA Record (if you use IPv6):
*.domain.com->::ffff:a00:a01
Setup
Note
GoDoxy is designed to be running in
hostnetwork mode, do not change it.To change listening ports, modify
.env.
-
Prepare a new directory for docker compose and config files.
-
Run setup script inside the directory, or set up manually
/bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/yusing/godoxy/main/scripts/setup.sh)" -
Start the docker compose service from generated
compose.yml:docker compose up -d -
You may now do some extra configuration on WebUI
https://godoxy.yourdomain.com
How does GoDoxy work
- List all the containers
- Read container name, labels and port configurations for each of them
- Create a route if applicable (a route is like a "Virtual Host" in NPM)
- Watch for container / config changes and update automatically
Note
GoDoxy uses the label
proxy.aliasesas the subdomain(s), if unset it defaults to thecontainer_namefield in docker compose.For example, with the label
proxy.aliases: qbtyou can access your app viaqbt.domain.com.
Proxmox Integration
GoDoxy can automatically discover and manage Proxmox nodes and LXC containers through configured providers.
Automatic Route Binding
Routes are automatically linked to Proxmox resources through reverse lookup:
- Node-level routes (VMID = 0): When hostname, IP, or alias matches a Proxmox node name or IP
- Container-level routes (VMID > 0): When hostname, IP, or alias matches an LXC container
This enables seamless proxy configuration without manual binding:
routes:
pve-node-01:
host: pve-node-01.internal
port: 8006
# Automatically links to Proxmox node pve-node-01
WebUI Management
From the WebUI, you can:
- LXC Lifecycle Control: Start, stop, restart containers
- Node Logs: Stream real-time journalctl output from nodes
- LXC Logs: Stream real-time journalctl output from containers
API Endpoints
# Node journalctl (WebSocket)
GET /api/v1/proxmox/journalctl/:node
# LXC journalctl (WebSocket)
GET /api/v1/proxmox/journalctl/:node/:vmid
# LXC lifecycle control
POST /api/v1/proxmox/lxc/:node/:vmid/start
POST /api/v1/proxmox/lxc/:node/:vmid/stop
POST /api/v1/proxmox/lxc/:node/:vmid/restart
Update / Uninstall system agent
Update:
bash -c "$(curl -fsSL https://github.com/yusing/godoxy/raw/refs/heads/main/scripts/install-agent.sh)" -- update
Uninstall:
bash -c "$(curl -fsSL https://github.com/yusing/godoxy/raw/refs/heads/main/scripts/install-agent.sh)" -- uninstall
Screenshots
idlesleeper
Metrics and Logs
Manual Setup
-
Make
configdirectory then grabconfig.example.ymlintoconfig/config.ymlmkdir -p config && wget https://raw.githubusercontent.com/yusing/godoxy/main/config.example.yml -O config/config.yml -
Grab
.env.exampleinto.envwget https://raw.githubusercontent.com/yusing/godoxy/main/.env.example -O .env -
Grab
compose.example.ymlintocompose.ymlwget https://raw.githubusercontent.com/yusing/godoxy/main/compose.example.yml -O compose.yml
Folder structrue
├── certs
│ ├── cert.crt
│ └── priv.key
├── compose.yml
├── config
│ ├── config.yml
│ ├── middlewares
│ │ ├── middleware1.yml
│ │ ├── middleware2.yml
│ ├── provider1.yml
│ └── provider2.yml
├── data
│ ├── metrics # metrics data
│ │ ├── uptime.json
│ │ └── system_info.json
└── .env
Build it yourself
-
Clone the repository
git clone https://github.com/yusing/godoxy --depth=1 -
Install / Upgrade go (>=1.22) and
makeif not already -
Clear cache if you have built this before (go < 1.22) with
go clean -cache -
get dependencies with
make get -
build binary with
make build




