{"data":{"slug":"vouch-proxy","name":"Vouch Proxy","tagline":"MIT SSO for Nginx via auth_request and OAuth/OIDC","category":"devops","categoryName":"DevOps","url":"https://github.com/vouch/vouch-proxy","github":"https://github.com/vouch/vouch-proxy","pricing":"open-source","hook":"Vouch Proxy adds single sign-on to any site behind Nginx using the auth_request module: Nginx asks Vouch whether a request is logged in, and Vouch sends users through Google, GitHub, Okta, Keycloak or another OIDC provider.","whatsGood":"MIT (vouch/vouch-proxy), developed since 2017 in Go. One Vouch instance can protect all your sites at once, and the README says validation responses take under 1 ms when it runs next to Nginx. Supports Google, GitHub, Azure AD, Okta, Slack, ADFS, AWS Cognito, Gitea, Nextcloud, Pocket ID and most OIDC providers. ★~3.3k.","theCatch":"Nginx only (via auth_request); for Traefik or Caddy, other forward-auth tools fit better. It authenticates but offers only basic authorization by domain, user or team. Tagged releases are infrequent, so follow main or the Docker images.","verdict":"The simplest way to put SSO in front of internal Nginx sites.","addedAt":"2026-10-18","featured":false,"domain":"DevOps","subSpecialty":"Infrastructure","subcategory":"Networking","tags":["self-host","permissive","auth","active"],"capabilities":["auth"],"surfaces":["Self-host"],"ecosystem":["Multi-platform"],"licenseModel":"OSS/MIT","githubStars":3283,"starsPerWeek":7,"access":"free","archived":false,"repo":{"createdAt":"2017-07-21","pushedAt":"2026-09-27","license":"MIT","archived":false,"checkedAt":"2026-10-19"}},"related":[{"slug":"github-actions","name":"GitHub Actions","tagline":"CI/CD that lives where your code does"},{"slug":"docker","name":"Docker","tagline":"Container runtime that changed deployment"},{"slug":"kubernetes","name":"Kubernetes","tagline":"Container orchestration at scale"},{"slug":"pulumi","name":"Pulumi","tagline":"Infrastructure as code in real languages"},{"slug":"fly-io","name":"Fly.io","tagline":"Deploy apps to VMs close to your users"}],"links":{"self":"/api/gems/vouch-proxy","html":"/gems/vouch-proxy","markdown":"/gems/vouch-proxy.md","category":"/api/gems?category=devops","categoryPage":"/stacks/devops"}}