A dynamic key-value IP allowlist for Nginx
I am currently working on a larger project that needs a short-lived HTTP "auth" based on a separate, out-of-band authentication process. Since every allowed IP only needs to be allowed for a few minutes at a time on specific server names, I created this project to solve that. It should work with any Redis-compatible database. For the docker-compose example, I used valkey. This is mostly useful if you have multiple domains that you want to control access to. If you want to allow 1.1.1.1 to mywebsite.com and securesite.com, and 2.2.2.2 to securesite.com and anothersite.org for certain TTLs,…
A dynamic key-value IP allowlist for Nginx launched on December 30, 2025 with 5 votes, #2,550 of 11,628 launches that month and more than 75% of that year's launches.
What it does
Lightweight, dynamic nginx IP/host allowlist that can be built on top of any Redis-compatible key-value store. - ropsec/kvauth
This is a lightweight, dynamic nginx IP/host allowlist that can be built on top of any Redis -compatible key-value store. Having to systemctl reload nginx everytime you make a change to a list of allowed IPs, especially for a very dynamically permissive application, is a lot of overhead. kvauth attempts to solve this. Nginx Plus offers the ngx_http_keyval_module which can be used to setup a dynamic allowlist . However, this is only offered with a paid subscription. Your custom application will populate a Redis-compatible database with hashmaps containing allowed hostnames for specific requesting IPs. Say you want to allow the requesting IP 1.1.1.1 to access mywebsite.com . Just create a key…from github.com
In the maker’s words, at launch
I am currently working on a larger project that needs a short-lived HTTP "auth" based on a separate, out-of-band authentication process. Since every allowed IP only needs to be allowed for a few minutes at a time on specific server names, I created this project to solve that. It should work with any Redis-compatible…
Does a similar job
all alternatives →
IP Guide – Info on IP addresses, Networks, and ASNs2023 · ip.guide · ▲363Hey all, wanted to share my recent weekend hack project. I wanted to improve upon the existing space for looking up information about IP addresses and ASNs. The backend is written in Rust and pulls BGP data every 8 hours from the RIPE RIS project to build up a routing table and also adds geolocation information. The frontend is using React and Tailwind. Would love any feedback or suggestions on what to improve.
- COCeryx – Open-source dynamic Nginx2015 · sourcelair.com · ▲64
Introducing Ceryx, a dynamic reverse proxy based on NGINX OpenResty flavor with an API, using the power of Lua scripting in NGINX and a Redis as backend.
Easy Webserver for Node.js, Python, PHP, with Free SSL2017 · github.com · ▲123Scalable PaaS (automated Docker+nginx) - aka Heroku on Steroids - caprover/README.md at master · caprover/caprover
- WIWe (IPinfo) built a free IP data API that supports unlimited requests2025 · ▲7
I am Abdullah from IPinfo. We have finally launched our API service that supports an unlimited amount of requests to fetch IP to Country and ASN database. It is free to use. https://ipinfo.io/lite Try out this token for the next several to check out the API service: a6c2e5328296f5 https://api.ipinfo.io/lite/8.8.8.8?token=a6c2e5328296f5 https://api.ipinfo.io/lite/me?token=a6c2e5328296f5 - The API system is built using Node.js from the ground up but we are currently moving our backend to Rust. We processed over 2 trillion requests last…
- AAAn API to provision custom hostnames with SSL2017 · ▲90
We launched an API for custom hostnames today. A simple HTTP post with a hostname gets a temp hostname with CNAME/a record instructions, as soon as DNS is setup we issue SSL and start accepting traffic for that hostname. It's the quickest way we know of to provision custom hostnames: https://fly.io/mix/custom-hostnames/ When we started building Fly, we figured it was too late to "make SSL easy and the customers will come". Lets Encrypt changed the world, and we knew many companies rolling their own SSL support with nginx, Traefik, etc, etc. It seemed like a…
- ASA self hosted alternative to Ngrok2019 · ▲14
Hi! I am sharing this because it may be useful to others. I created a simple Docker image that lets you easily expose a web app running locally on your dev machine to the Internet, via a proxy server. It is a self hosted alternative to something like Ngrok, which is a paid service if you use custom domains. A small server is cheaper than Ngrok (I use Hetzner Cloud and the cheapest server costs me 3€ per month). I use this method in particular to test HTTP verification with Let's Encrypt for a SaaS app running on my Mac. Hope this is useful :) Code:…
More dev tools this month
the category →
open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.
Dev tools · 28d ago · github.com
Contribute to reladraw/reladraw development by creating an account on GitHub.
Dev tools · 26d ago · github.com
OpenBot▲362Grok Bot alternative: free, local, open-source, multiplayer
Dev tools · 23d ago · openbot.run
Talanoa▲346Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…
Dev tools · 20d ago · talanoa.email
CoreSpeed▲332One MCP for everything your agents need: apps, memory, tools
Dev tools · 28d ago · corespeed.io
Source: Show HN post ↗ · launch text quoted in part
Launched alongside, December 2025
the whole month →- GP
Life & fun · Dec 2025 · dosaygo-studio.github.io
Hi everyone! My name's Luke and I made the original Jmail here alongside Riley Walz. We had a ton of friends collaborate on building out more of the app suite last night in lieue of DOJ's "Epstein files" release. Please AMA!
Life & fun · Dec 2025 · jmail.world
PlanEat AI▲733AI turns your health goals into a 7-day menu & grocery list
AI · Dec 2025 · planeatai.com
Community, All the HN belong to you. This is an archive of hacker news that fits in your browser. When I made HN Made of Primes I realized I could probably do this offline sqlite/wasm thing with the whole GBs of archive. The whole dataset. So I tried it, and this is it. Have Hacker News on your device. Go to this repo (https://github.com/DOSAYGO-STUDIO/HackerBook): you can download it. Big Query -> ETL -> npx serve docs - that's it. 20 years of HN arguments and beauty, can be yours forever. So they'll never die. Ever. It's the unkillable static archive of HN and it's…
Dev tools · Dec 2025 · hackerbook.dosaygo.com
