opennhp Docker & Self-Hosted Deployment

GitHub

A lightweight, cryptography-powered, open-source toolkit built to enforce Zero Trust security for infrastructure, applications, and data in the AI-driven world.

13,801 stars Go Go 1 file · ~11,211 tokens #cybersecurity#zero-trust#zero-trust-network-access#zero-trust-security
RAW Compose
1. Pull Image (DOCKERHUB) docker pull library/opennhp-server
2. Docker Run (1-Click Launch) docker run -d --name opennhp -p 8443:8443 --restart always opennhp-server
3. Podman Run podman run -d --name opennhp -p 8443:8443 --restart always opennhp-server
4. Skopeo Inspect (Zero-Pull Manifest) skopeo inspect docker://docker.io/library/opennhp-server:latest
5. ORAS Pull (OCI Artifact) oras pull opennhp-server
6. Compose Deployment docker compose up -d
docker/docker-compose.dhp.yaml
Download .yml 
networks:
  network_default:
    ipam:
      driver: default
      config:
        - subnet: '177.7.0.0/16'

volumes:
  postgres_data:

services:
  nhp-server:
    image: opennhp-server
    build:
      context: ..
      dockerfile: ./docker/Dockerfile.server
      args:
        - GOPROXY=${GOPROXY:-}
    container_name: nhp-server
    restart: always
    environment:
      NHP_UDP_RECV_BUFFER_BYTES: "${NHP_UDP_RECV_BUFFER_BYTES:-}"
    networks:
      network_default:
        ipv4_address: 177.7.0.9
    volumes:
      - ./nhp-server/etc/:/nhp-server/etc/:rw
      - ./nhp-server/logs/:/nhp-server/logs/:rw
      - ./nhp-server/templates/:/nhp-server/templates/:rw
      # DHP override: entrypoint is exposed on host :8443 (see "8443:443" below),
      # so the demo resource redirects to https://localhost:8443 (not :443).
      - ./dhp/nhp-server/plugins/example/etc/:/nhp-server/plugins/example/etc/:rw

  nhp-db:
    image: opennhp-db
    container_name: nhp-db
    build:
      context: ..
      dockerfile: ./docker/Dockerfile.db
      args:
        - GOPROXY=${GOPROXY:-}
    volumes:
      - ./nhp-db/etc/:/nhp-db/etc/
      - ./nhp-db/logs/:/nhp-db/logs/
      - ./nhp-db/demo/:/nhp-db/demo/
    restart: always
    cap_add:
      - NET_ADMIN
    depends_on:
      - nhp-server
    networks:
      network_default:
        ipv4_address: 177.7.0.12

  nhp-agent:
    image: opennhp-agent:latest
    build:
      context: ..
      dockerfile: ./docker/Dockerfile.agent
      args:
        - GOPROXY=${GOPROXY:-}
    container_name: nhp-agent
    restart: always
    #command: []
    ports:
      - "8443:443"
    networks:
      network_default:
        ipv4_address: 177.7.0.8
    depends_on:
      - nhp-server
      - nhp-db
    volumes:
      - ./nhp-agent/etc:/nhp-agent/etc:rw
      - ./nhp-agent/logs:/nhp-agent/logs:rw