[moonjikwang]

New app: Corvus, an open-source (Apache-2.0) self-hosted reverse proxy and web application firewall with a web console. It manages proxy hosts, Let's Encrypt certificates (HTTP-01 and DNS-01), redirections and TCP/UDP streams, and protects sites with attack-pattern blocking, automatic bans, security rules (IP, country, path, header, user agent), a browser challenge and an access queue (waiting room). It also has a live traffic monitor, alerts (Slack, Discord, Teams, Telegram, webhooks), versioned configuration with rollback, and can import an existing Nginx Proxy Manager setup. I am the developer.

What the package installs

• corvus: a single container (ghcr.io/corvus-gateway/gateway:1.1.3, amd64 and arm64).
• Ports 80 and 443 serve the proxied sites; port 9443 is the admin console (HTTPS with a self-signed certificate), so port_map is 9443 with scheme: https.
• All state lives in /DATA/AppData/$AppID/data (mounted at /data). The container starts as root, fixes ownership of /data, then drops to UID 10001. No environment variables are required, and the image has a built-in healthcheck.
• There is no default password: on first run the container log prints a one-time setup token, which is entered in the browser together with the new administrator account.

Like the Nginx Proxy Manager entry, Corvus needs ports 80 and 443. The install tips (en, zh, ko) warn users to move the CasaOS WebUI off 80/443/9443, explain the self-signed console certificate and the setup token, and note that TCP/UDP streams need extra port mappings. Metadata is in 13 locales.

How this was verified

• validate_compose.py --app-path Corvus: success, 0 errors, 0 warnings. docker compose config -q passes.
• build_appstore.py (build-appstore-action v1.1.2): OK org.icewhale.corvus, no warnings; the build produced the compose, the amd64 and arm64 variants, meta.json plus the localized meta files and the assets.
• The image manifest resolves for linux/amd64 and linux/arm64.
• I ran the generated docker-compose.amd64.yml with Docker Compose (host ports remapped to avoid local conflicts): the container became healthy, the console answered 200 over HTTPS, and /data was populated.
• I have not installed it through the ZimaOS UI on a ZimaOS device.

The image tag and version are pinned. I will open a small update PR for each Corvus release.

Docs: https://corvus-gateway.github.io/corvus/

🤖 Generated with Claude Code

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud