Proxy Manager

Proxy Manager maps a public domain — or a raw TCP/UDP port — directly to your server, without ever touching Nginx by hand. Pick a target from your server's own network allocations, flip on SSL, and the extension writes, tests, and deploys the config for you, including certificate issuance via Certbot. TCP/UDP rules generate a ready-to-use config for the cases that still need a manual touch. Admins can cap how many rules each server is allowed to create, right from the panel.

Installation

1. Extract the extension into extensions/proxy-manager on your panel host.

2. chown -R www-data:www-data extensions/proxy-manager (must be owned by your webserver user, not root).

3. Enable it: php artisan extensions:enable proxy-manager

Required server setup

Add a sudoers file so the panel can manage Nginx and certificates without a password (/etc/sudoers.d/proxy-manager):

www-data ALL=(root) NOPASSWD: /usr/sbin/nginx -t
www-data ALL=(root) NOPASSWD: /bin/systemctl reload nginx
www-data ALL=(root) NOPASSWD: /usr/bin/certbot certonly --nginx -d *
www-data ALL=(root) NOPASSWD: /bin/ln -sf /etc/nginx/sites-available/* /etc/nginx/sites-enabled/*
www-data ALL=(root) NOPASSWD: /bin/cp /var/www//extensions/proxy-manager/data/generated/.conf /etc/nginx/sites-available/.conf
www-data ALL=(root) NOPASSWD: /bin/rm /etc/nginx/sites-enabled/.conf

If PHP-FPM runs with ProtectSystem=full (check via systemctl show --property=ProtectSystem), add a drop-in override so it's allowed to write Nginx configs:

systemctl edit

[Service]
ReadWritePaths=/etc/nginx/sites-available /etc/nginx/sites-enabled

Then: systemctl daemon-reload && systemctl restart