0xJacky

改 Nginx 总要 SSH 手写，出错还得自己排？ nginx-ui 是 Nginx 可视化管理界面：浏览器里改配置，保存自动测配重载，证书一键部署自动续签。 适合管几台服务器、不想手写配置的人，先在测试机上装一个。 管 Nginx 最烦哪步，改配置还是续证书？ #Nginx #运维 @grok 0xJacky/nginx-ui

Nginx設定を編集。保存前にtest。通ったらreload。 Nginx UIはGo/Vue製のweb管理画面。設定の編集・validation・reloadに加え、backupの比較とrestore、ログ閲覧もできます。公開する管理panelは適切に保護する前提で。 0xJacky/nginx-ui

Nginx UI GitHub Explained: Visual Reverse Proxy Control and Security Guardrails nginx-ui by 0xjacky: 0xjacky/nginx-ui Nginx UI gives Nginx administration a visual control plane for routing rules, but that control comes with meaningful security boundaries. This overview follows an isolated Docker lab: an empty mapped configuration directory lets the container establish baseline structure, separate sites-available from sites-enabled, and keep each web service in its own file. The illustrated bootstrap centers on a generated install secret and a ten-minute claim window before a visual proxy rule maps traffic to a mock backend on port 8081. The save lifecycle is covered conceptually through syntax validation, an AES-encrypted backup, site activation, and a safe Nginx reload. The closing tradeoff is direct: because Nginx UI has root-level system access and a history of security vulnerabilities, it belongs behind trusted internal networks or a VPN, not on the open internet. TimeStamps: 0:00 Why Nginx Configuration Is So Unforgiving 0:35 Nginx UI’s Visual Dashboard and Root Access Tradeoff 1:02 Isolated Docker Lab and the Empty Configuration Volume 2:01 Claiming the Admin Account with a Time-Limited Install Secret 2:38 Reverse Proxy Templates and the Four-Step Save Guardrail 3:19 Request Flow, Syntax Checks, and Versioned Backups 3:36 Security Vulnerabilities and the Trusted-Network Rule 4:14 The Case for an Isolated Architectural Sandbox 🧭 Why a visual Nginx control plane still needs strict network boundaries 🐳 Isolated Docker lab, empty configuration volume, and Debian-style site separation 🔐 Install secret, syntax checks, encrypted backups, and safe reloads 🛡️ Reverse proxy flow plus the security limits to keep in mind Nginx UI is most compelling for operators evaluating a visual reverse proxy management layer, especially when configuration safety and recovery matter. The tradeoff is equally important: root-level control makes perimeter security, isolated testing, and VPN-only access part of the deployment decision. #NginxUI #ReverseProxy #Docker [de-DE] YNAS ynp_1001b43709b5ae07 Cinematic Privater automatisierter Staging-Upload. Paketidentität: ynp_1001b43709b5ae07; Ausgabe: cinematic. [es-US] YNAS ynp_1001b43709b5ae07 cinemático Carga de entorno de prueba de automatización privada. Identidad del paquete: ynp_1001b43709b5ae07; salida: cinematográfica. [fr-FR] YNAS ynp_1001b43709b5ae07 cinématique Téléchargement de l'environnement de test d'automatisation privé. Identifiant du package : ynp_1001b43709b5ae07 ; sortie : cinématique. [hi] YNAS ynp_1001b43709b5ae07 सिनेमैटिक निजी स्वचालन स्टेजिंग अपलोड। पैकेज पहचान: ynp_1001b43709b5ae07; आउटपुट: सिनेमाई। [id] YNAS ynp_1001b43709b5ae07 sinematik Unggahan staging otomatisasi pribadi. Identitas paket: ynp_1001b43709b5ae07; output: sinematik. [it] YNAS ynp_1001b43709b5ae07 cinematic Caricamento di automazione privata. Identità del pacchetto: ynp_1001b43709b5ae07; output: cinematografico. [pt-BR] YNAS ynp_1001b43709b5ae07 cinematográfico Upload de teste de automação privada. Identificação do pacote: ynp_1001b43709b5ae07; saída: cinemática.

Nginx UI: Yet another WebUI for Nginx (11.6k stars) What it does All text below is quoted directly from the project README. >Yet another Nginx Web UI, developed by 0xJacky, Hintay and Akino. Features: - Online statistics for server indicators such as CPU usage, memory usage, load average, and disk usage. - Automatic configuration backup after changes, with version comparison and restore capabilities - Cluster management supporting mirroring operations to multiple nodes, making multi-server environments easy to manage - Export encrypted Nginx / Nginx UI configurations for quick deployment and recovery to new environments - Enhanced online ChatGPT assistant supporting multiple models, including Deepseek-R1's chain-of-thought display to help you better understand and optimize configurations - MCP (Model Context Protocol) provides special interfaces for AI agents to interact with Nginx UI, enabling automated configuration management and service control. - One-click deployment and automatic renewal Let's Encrypt certificates. - Online editing websites configurations with our self-designed NgxConfigEditor which is a user-friendly block editor for nginx configurations or Ace Code Editor which supports LLM Code Completion and highlighting nginx configuration syntax. - Online view Nginx logs - Written in Go and Vue, distribution is a single executable binary. - Automatically test configuration file and reload nginx after saving configuration. - Web Terminal - Dark Mode - Responsive Web Design Internationalization: >We proudly offer official support for: - English - Simplified Chinese - Traditional Chinese >Thanks to our amazing community, additional languages are also available! Explore and contribute to translations on Weblate. Repository 0xJacky/nginx-ui Repository stats |Metric|Value| |:-|:-| |Stars|11,619| |Forks|901| |Last release|v2.8.4 (2026-10-07)| |Languages|Go 65.8%, Vue 19.2%, TypeScript 13.6%| |Contributors|72| |AI contributor accounts (Claude / Codex / Cursor / Copilot)|claude (226 commits), cursoragent (16), Copilot (1)| |AI co-authored commits|Claude: 231, Cursor: 16, Copilot: 1| Main contributor |Field|Value| |:-|:-| |Name|Jacky| |GitHub|@0xJacky| |Commits to this repo|2,028 (top contributor)| |Bio|Full Stack Engineer| |Company / Location|Shenzhen Technology University / Shenzhen, China| |Followers|274| |Public repos|85| |On GitHub since|2015-06-29|

CVE-2026-107805: CVE-2026-107805: Unauthenticated Storage Exhaustion in Nginx UI Node Authentication CVE-2026-107805: Unauthenticated Storage Exhaustion in Nginx UI Node Authentication > Vulnerability ID: CVE-2026-107805 > CVSS Score: 7.5 > Published: 2026-10-09 Nginx UI versions 2.5.0 through 2.5.10 contain an uncontrolled resource consumption vulnerability in the node authentication handler. Unauthenticated remote attackers can exhaust host disk storage and I/O resources by submitting large HTTP request bodies to node-signature endpoints prior to cryptographic signature validation. TL;DR Nginx UI stages incoming request bodies to temporary disk storage before verifying node signatures. Unauthenticated remote attackers can exhaust disk space and cause a denial of service. --- Technical Details - CWE ID: CWE-400 - Attack Vector: Network (AV:N) - CVSS Score: 7.5 (High) - EPSS Score: Not Listed - Impact: Denial of Service (Storage & I/O Exhaustion) - Exploit Status: No Public Exploit Available - CISA KEV Status: Not Listed Affected Systems - Nginx UI versions >= 2.5.0, < 2.6.0 - nginx-ui: >= 2.5.0, < 2.6.0 (Fixed in: 2.6.0) Code Analysis Commit: 8c9b9a1 fix(node): bound signed request body staging Mitigation Strategies - Upgrade Nginx UI to version 2.6.0 or higher. - Enforce request body size limits at the reverse proxy layer. - Isolate host temporary storage (/tmp) using dedicated partitions or tmpfs mounts with capacity limits. - Restrict network access to node authentication interfaces using firewalls or security groups. Remediation Steps: 1. Deploy Nginx UI version v2.6.0 or later to affected management instances. 2. Configure client_max_body_size in upstream Nginx reverse proxies to restrict unauthenticated payload sizes. 3. Apply network firewall policies restricting node-signature endpoint access to trusted node IP ranges. References - GitHub Security Advisory GHSA-j3hg-9rp3-5hw9 - Official Fix Commit in 0xJacky/nginx-ui - Nginx UI Release v2.6.0 - NVD CVE-2026-107805 Detail - CVE Record CVE-2026-107805 --- Read the full report for CVE-2026-107805 on our website for more details including interactive diagrams and full exploit analysis.