Automatic Let's Encrypt Certificates
Request and renew browser-trusted certificates automatically for every published service and the management interface.
aegis-gateway / overview
One secure front door for all your web services.
Aegis Gateway combines automatic Let's Encrypt certificates, a managed HAProxy frontend, and secure reverse tunnels into a single, easy-to-use gateway.
Publish back-end websites, protect self-signed services, and reach systems behind firewalls from one place.
aegis-gateway / why
Why It Exists
Managing certificates, reverse proxies, and firewall rules for every service gets complicated fast. Aegis Gateway brings these pieces together so your services can stay simple and private.
- •Stop copying and renewing certificates by hand.
- •Stop changing settings on every server just to expose one service.
- •Stop treating services behind firewalls as unreachable.
- •Stop accepting browser warnings for self-signed services.
Free. For Real.
Everything you need to run a serious gateway. None of the price tag.
Aegis Gateway Community is production-capable and fully featured for real deployments. No trial. No forced expiry. No artificial service limits. Run it yourself with Docker and keep using it for free.
aegis-gateway / capabilities
Core Features
Single Public Address for Multiple Services
Route many services behind one gateway and direct users to the correct back-end by domain name.
Self-Signed Certificate Protection
Publish back-end services using HTTP, verified HTTPS, or self-signed HTTPS while presenting trusted public certificates.
Reverse SSH Tunnels
Expose services behind firewalls or NAT through a restricted gateway account without opening inbound ports.
Built-In Health Monitoring
Continuously check back-end reachability and pause routing to offline services until they recover.
Web Management Interface
Manage services, tunnel keys, certificates, and status from a browser dashboard on port 8443.
REST API
Automate service, certificate, and SSH key workflows through a basic-auth protected API.
Docker-First Deployment
Run as a lightweight Docker appliance and centralize the public edge while keeping back-end services private.
aegis-gateway / benefits
Operate with Confidence
- Save time with one gateway instead of per-service proxy and certificate work.
- Reduce risk using short-lived automatically renewed certificates.
- Stay flexible across verified HTTPS, self-signed HTTPS, plain HTTP, and tunneled services.
- Reach systems behind firewalls without opening inbound ports.
- Use built-in diagnostics and health checks to monitor service state.
aegis-gateway / trust
Community Edition. Fully Featured.
Aegis Gateway Community is free to self-host with no limits on protected services. If Community does everything you need, use it.
We make money when organisations need more: offline and air-gapped deployment patterns, compliance support, and direct engineering expertise.
The Community Edition sends a small anonymous heartbeat to activation.jadaptive.com with simple usage counts. It never includes personal information, names, email addresses, or private keys.
aegis-gateway / quickstart
Quick Start with Docker
Use staging mode first for safe certificate testing, then switch LETSENCRYPT_MODE to production when you are ready for real certificates.
mkdir -p ./aegis-gateway/data ./aegis-gateway/certs
docker run -d \
--name aegis-gateway \
-e AEGIS_ADMIN_USERNAME=admin \
-e AEGIS_ADMIN_PASSWORD='replace-with-strong-password' \
-e LETSENCRYPT_EMAIL=you@example.com \
-e LETSENCRYPT_MODE=staging \
-e NITRITE_DB_PATH=/app/data/proxy_manager.db \
-v "$(pwd)/aegis-gateway/data:/app/data" \
-v "$(pwd)/aegis-gateway/certs:/etc/haproxy/certs" \
-p 80:80 \
-p 443:443 \
-p 8443:8443 \
-p 2222:22 \
jadaptive/aegis-gateway:latestThen open https://localhost:8443 and sign in with the administrator credentials you set.
Need offline or air-gapped deployment, direct technical support, or compliance help? Contact sales for support options.