Getting Started

Download & Extract

Download the ProxyStack portable ZIP (Full or Lite edition) and extract it to any folder on your Windows machine.

Example: E:\ProxyStack\

That's it. No installer, no registry entries, no system modifications. Everything runs from this folder.

Linux & CLI Quick Start

ProxyStack CLI is a cross-platform single-binary with zero dependencies. Manage Nginx/Apache sites, generate configs, and control your web server from the terminal.

# Install ProxyStack CLI. No dependencies required.
$ curl -fsSL https://proxystack.iamvcholdings.com/downloads/proxystack-cli-v14.19.0-linux-x64.tar.gz | tar xz -C /tmp && sudo /tmp/install.sh

# Download, extract, and install manually
$ wget https://proxystack.iamvcholdings.com/downloads/proxystack-cli-v14.19.0-linux-x64.tar.gz
$ tar xzf proxystack-cli-v14.19.0-linux-x64.tar.gz
$ sudo bash install.sh
$ proxystack info

# Download the Windows CLI (PowerShell)
PS> Invoke-WebRequest https://proxystack.iamvcholdings.com/downloads/proxystack-cli-v14.19.0-win-x64.zip -OutFile proxystack-cli.zip
PS> Expand-Archive proxystack-cli.zip -DestinationPath C:\ProxyStack\cli
PS> C:\ProxyStack\cli\proxystack.exe info

Works on Linux (x64/ARM64), Windows (x64), macOS (Intel/Apple Silicon). Single binary, no .NET runtime needed.

CLI Commands (29 commands, 40+ subcommands):

# --- Core ---
proxystack status              # Web server status, PIDs, site count
proxystack info                # Platform, paths, .NET version
proxystack start / stop        # Start or stop the web server
proxystack restart / reload    # Restart or zero-downtime reload

# --- Sites & Config ---
proxystack sites list          # List all configured sites
proxystack sites add <domain>  # Add a site (--proxy, --ssl, --spa)
proxystack sites remove <dom>  # Remove a site by domain
proxystack config show         # Pretty-print proxystack.json
proxystack config generate     # Regenerate Nginx/Apache config
proxystack config validate     # Validate config, check paths

# --- Apps ---
proxystack apps list           # List configured apps
proxystack apps add <name>     # Add an app (--command, --port, --env)
proxystack apps remove <name>  # Remove an app
proxystack apps start <name>   # Launch as a detached background process
proxystack apps stop <name>    # Stop it (tracked via a PID file)

# --- Secure Project Import ---
proxystack import <archive>    # Detect + sandbox-vet a .zip/.7z (dry run)
proxystack import <archive> --apply # Also write it: Site/App/Compose/Dockerfile
proxystack deployments list    # Managed imports (Compose/Dockerfile/App/Static)
proxystack deployments versions <n>   # Version history for one deployment
proxystack deployments rollback <n> <v> # Restore a prior version's files + config

# --- Certificates ---
proxystack certs list          # List certs in certs/ directory
proxystack certs generate <d>  # Self-signed cert via OpenSSL
proxystack certs letsencrypt   # Let's Encrypt via certbot

# --- Docker ---
proxystack docker ps [--all]   # List Docker containers
proxystack docker start <c>    # Start/stop/restart containers
proxystack docker logs <c>     # Container logs (--tail N)
proxystack docker stats        # CPU, memory, network usage
proxystack docker images       # List Docker images
proxystack docker up / down    # docker-compose up -d / down

# --- Security ---
proxystack security scan       # Quick scan (11 checks)
proxystack security scan --full # Full scan (17 checks, score)
proxystack security headers <url> # Check security headers
proxystack security ssl-audit <d> # SSL cert audit + expiry

# --- WAF ---
proxystack waf status          # Enabled/mode, rule counts
proxystack waf rules list      # All rules + real enforcement scope
proxystack waf rules enable/disable <id> # Toggle a rule
proxystack waf mode [detect|block_log|block_silent]
proxystack waf test --path <p> [--query] [--method] # Run a synthetic request through the rule engine

# --- Zero Trust ---
proxystack zerotrust status    # mTLS state, trust score, counts
proxystack zerotrust ca generate    # Generate internal CA (4096-bit, 10yr)
proxystack zerotrust cert generate  # Server cert signed by the CA (SANs from every site)
proxystack zerotrust mtls [on|off] [--require-client-cert]
proxystack zerotrust policy list/add/remove   # Cert auth policies
proxystack zerotrust segment list/add/remove  # Network segmentation zones

# --- Team (RBAC) ---
proxystack team list           # Members, roles, who's acting
proxystack team add <user> --role Administrator|Editor|User
proxystack team remove <user>
proxystack team acting-as [user] # Get/set who RBAC checks treat as current user

# --- Secrets Vault ---
proxystack secrets list         # List secrets (values masked)
proxystack secrets set <key> <value> [--category <cat>]
proxystack secrets get <key> [--reveal]
proxystack secrets rotate <key> # New 32-char cryptographically random value
proxystack secrets remove <key>
proxystack secrets export-env   # Print as KEY=VALUE for shell sourcing

# --- Plugins ---
proxystack plugins list         # Installed plugins + subscribed hooks
proxystack plugins install <zip> [--sha256 <hash>]
proxystack plugins enable/disable <slug>
proxystack plugins remove <slug>
proxystack plugins trigger <hook> # Manually fire a hook for testing

# --- Backup & Monitor ---
proxystack backup create       # Backup config + certs (.tar.gz)
proxystack backup list         # List available backups
proxystack backup restore <f>  # Restore from backup
proxystack monitor check       # Health check all sites
proxystack monitor watch       # Continuous monitoring (Ctrl+C)

# --- SentinelAI ---
proxystack sentinel status     # Agent status, ML models
proxystack sentinel start/stop # Start or stop the agent
proxystack sentinel threats    # View recent threats

# --- Extras ---
proxystack template export     # Export .psxt template
proxystack template import     # Import .psxt template
proxystack server install      # Install nginx/apache (Linux)
proxystack completions bash    # Shell completions
proxystack logs --lines 50     # Tail recent log files

Launch ProxyStack

Double-click ProxyStackGUI.exe to launch the modern dark-themed GUI.

# Default: Modern dark theme
ProxyStackGUI.exe

# Classic tabbed interface
ProxyStackGUI.exe --classic

The Dashboard tab shows the status of all services, quick action buttons, and the update checker.

Start Apache

Click the green "Start All" button on the Dashboard, or go to the Dashboard and click "Start". Apache will start on ports 80 (HTTP) and 443 (HTTPS).

The status card will show "Running (PID: XXXX)" when Apache is active.

Add Your First Site

Go to the Sites tab and click "Add Site".

For a reverse proxy (e.g., proxying to a Node.js app on port 3000):

• Domain: myapp.example.com
• Proxy Target: http://localhost:3000
• SSL: Enable if you have a certificate
• WebSocket: Enable if your app uses WebSockets

For a static site (e.g., a React build):

• Domain: static.example.com
• Document Root: sites/my-react-app/build
• SPA Fallback: Enable for single-page apps

Click "Save". ProxyStack generates the Apache virtual host configuration automatically.

Get an SSL Certificate

Go to the Certs tab for SSL options:

Let's Encrypt (free, production-ready):

1. Click "Let's Encrypt"
2. Enter your domain and email
3. ProxyStack automatically stops Apache, runs validation, and restarts
4. Certificate files appear in certs/

Self-Signed (for development):

1. Click "Generate Self-Signed"
2. Enter your domain
3. Certificate and key are generated using bundled OpenSSL

Reload Apache

After adding sites or certificates, click "Restart" on the Dashboard to apply the new configuration. Apache reloads with the updated virtual hosts.

Your site should now be accessible at https://myapp.example.com.

Add Backend Apps (Optional)

Go to the Apps tab to manage backend processes:

1. Click "Add App"
2. Enter a name, command (e.g., npm run dev), working directory, and port
3. Optionally add sub-processes (e.g., npx supabase start)
4. Enable Auto-Start and Auto-Restart as needed
5. Click "Save", then "Start"

ProxyStack manages the process lifecycle, including starting sub-processes before the main command and stopping everything together.

Explore More Features