What is Nginx Proxy Manager? Nginx Proxy Manager is a free, open-source web application that provides a user-friendly graphical interface for managing a reverse proxy. It allows you to securely expose your home server applications (like Plex or Overseerr) to the internet using custom domain names and free SSL certificates.
If you have built a home NAS and installed applications like Overseerr or Audiobookshelf, you likely want to access them when you are away from home.
The easiest way to do this is to log into your home internet router and open a “port” directly to your server. However, this is incredibly dangerous. Opening ports directly to your NAS exposes your entire digital archive to hackers, bots, and ransomware.
To access your server safely, you need a “Reverse Proxy.” Historically, setting up a reverse proxy required writing complicated Linux code. Today, you can do it with a few clicks using Nginx Proxy Manager (NPM). In this guide, we explain how it works and why it is mandatory for home server security.
Table of Contents
How Does a Reverse Proxy Work?
To understand Nginx Proxy Manager, you need to understand what a reverse proxy actually does.
Imagine your home network is a secure office building. Your router is the front door, and your applications (like Sonarr, Radarr, and Plex) are the employees working inside.
If you just open a port on your router, you are essentially leaving the front door wide open. Anyone on the internet can walk in and start poking around.
A Reverse Proxy acts as a strict security guard standing at the front door.
- You only open one port on your router (Port 443 for secure HTTPS traffic), and you point it exclusively to the security guard (Nginx Proxy Manager).
- When you are at a coffee shop and want to access Overseerr, you type a custom web address into your phone (e.g.,
requests.yourdomain.com). - The request hits the security guard. NPM looks at the web address, verifies it is legitimate, and securely routes the traffic to the correct application inside the building.
The outside world never talks directly to your NAS; they only talk to the proxy manager.
The Best Features of Nginx Proxy Manager
There are many reverse proxies available (like Traefik or Caddy), but NPM is the undisputed king for beginners. Here is why:
1. The Graphical User Interface (GUI)
Nginx is a massive, enterprise-grade web server used by companies like Netflix. Configuring it usually requires editing massive text files in a command line. Nginx Proxy Manager wraps all of that complicated code into a beautiful, easy-to-use web interface. You simply type in your domain name, select your app from a dropdown menu, and click save.
2. Free Automatic SSL Certificates
If you want your connection to be secure, you need an SSL certificate (the little padlock icon next to a web address). NPM integrates directly with Let’s Encrypt, a free certificate authority. When you add a new app to NPM, you simply check a box that says “Request a new SSL Certificate.” NPM will automatically fetch the certificate and renew it every 90 days forever.
3. Access Control Lists (ACL)
Even with a reverse proxy, you might not want the entire internet to see your Sonarr and Radarr login screens. NPM features Access Control Lists. You can configure NPM so that your apps are only accessible if the user enters a secret username and password before they even see the app’s login screen.
How to Install Nginx Proxy Manager
Because NPM is designed for home servers and NAS devices, it is built to run entirely inside a Docker container.
If you are running a custom DIY server (see our Unraid vs TrueNAS guide), you can install the NPM Docker container with a single click from the App Store.
Once installed, you will need to do three things to get it working:
- Buy a Domain Name: You need a web address (like
yourname.com) from a registrar like Cloudflare or Namecheap. - Point the Domain Home: You must point the DNS records of your domain name to your home internet’s public IP address.
- Port Forward 80 and 443: Log into your home router and forward Port 80 and Port 443 directly to the IP address of the machine running Nginx Proxy Manager.
Once those three steps are complete, you can log into the NPM web interface and start creating secure links to all of your self-hosted apps!
Frequently Asked Questions
Is Nginx Proxy Manager safe?
Yes, it is incredibly safe and is the industry standard for exposing home servers to the internet. By forcing all traffic through a single, SSL-encrypted checkpoint, you drastically reduce the “attack surface” of your Raspberry Pi NAS or home server.
Do I need a VPN if I use a reverse proxy?
They serve two different purposes. A reverse proxy allows you to access your server remotely from any web browser without installing software. A VPN (like ProtonVPN) is used to hide your real IP address when your server is downloading files from the internet. Many data hoarders use both simultaneously.
Does NPM work with Plex?
Yes, but it is usually not necessary. The Plex Media Server has a highly robust, built-in remote access feature that securely handles its own port forwarding and SSL certificates. NPM is better used for companion apps like Overseerr, Tautulli, and Audiobookshelf.