Cosmos Server — Secure Self-Hosted Home Server Platform

Introduction

Cosmos Server is a self-hosted platform that wraps your Docker applications with enterprise-grade security features. It provides a single pane of glass for managing containers, reverse proxy routes, SSL certificates, and user authentication.

What Cosmos Server Does

• Reverse proxy with automatic HTTPS via Let's Encrypt
• Built-in authentication with SSO across all hosted applications
• Anti-DDoS and anti-bot protection at the gateway level
• Docker Compose-based app marketplace for one-click installs
• User and permission management with role-based access control

Architecture Overview

Cosmos Server is a JavaScript application that runs as a Docker container with access to the Docker socket. It acts as both a reverse proxy and an orchestration layer, routing traffic to downstream containers. Authentication tokens are validated at the proxy level before requests reach backend apps.

Self-Hosting & Configuration

• Requires Docker with access to the Docker socket
• Set a domain name and point DNS to your server for HTTPS
• Configure admin credentials during initial setup wizard
• Enable two-factor authentication for admin accounts
• Adjust DDoS protection sensitivity in the security settings

Key Features

• One-click marketplace with curated Docker Compose stacks
• Automatic SSL certificate provisioning and renewal
• IP-based geo-blocking and rate limiting
• VPN integration for remote access via WireGuard
• Monitoring dashboard with container health and resource metrics

Comparison with Similar Tools

• CasaOS — simpler setup but fewer security features; Cosmos adds SSO and anti-DDoS
• Coolify — focused on app deployment; Cosmos emphasizes security-first home server management
• Portainer — Docker management without reverse proxy or auth layer; Cosmos bundles both
• Umbrel — consumer-friendly home server; Cosmos offers more granular security controls

FAQ

Q: Do I need a domain name? A: A domain is recommended for HTTPS. You can use a free dynamic DNS service.

Q: Can I use existing Docker containers? A: Yes. Cosmos can proxy traffic to any running container and add authentication in front of it.

Q: Is there mobile support? A: The web interface is responsive and works on mobile browsers.

Q: Does Cosmos replace my existing reverse proxy? A: It can. Cosmos includes a full-featured reverse proxy, or it can run behind an existing one.

Sources

• https://github.com/azukaar/Cosmos-Server
• https://cosmos-cloud.io