defguard---Proxy

Overview

defguard is a true Zero-Trust WireGuard® VPN with 2FA/Multi-Factor Authentication, as each connection requires MFA (and not only when logging in into the client application like other solutions).
This is the proxy component of defguard.

Requirements

Requires a defguard - Core container to be running.

Runtime arguments

Network: bridge
Privileged: false
Extra Params: --cap-add=NET_ADMIN

Template configuration

Proxy PortPorttcp

Container Port: 8080

Target: 8080
Default: 8080
Value: 8080

gRPCS PortVariable

Port for gRPCS server to listen on

Target: DEFGUARD_PROXY_GRPC_PORT
Default: 50051
Value: 50051

Rust TracebackVariable

Enable Rust backtraces

Target: RUST_BACKTRACE
Default: 1

Links

Template Support GHCR Project

Details

Repository

ghcr.io/defguard/defguard-proxy:latest

Registry

https://registry.hub.docker.com/r/ghcr.io/defguard/defguard-proxy

Last Updated2026-06-02

First Seen2025-02-15

Run defguard---Proxy on Unraid.

defguard---Proxy is listed in Community Apps for Unraid OS. Explore Unraid to build a flexible home server, NAS, or homelab.

Explore Unraid OS