StackSmith
Launch offer — 40% off every tier for a limited time. Prices shown are already reduced.
Stacks / Rampart
Edge security

Rampart
Edge and hardening

Reverse proxy, TLS, WAF and hardening tooling for the services you expose to the internet.

  • Automatic TLS for every service
  • WAF and rate limiting in front of your apps
  • Hardening checklist you can rerun
Get Rampart → Browse the source
In the box

A working, pinned Docker Compose stack for hardening and monitoring your own infrastructure. Not a link dump - the integration layer: services wired together, environment template, quickstart, runbook, and a script that fetches the exact upstream sources at pinned commits.

12 components 19 files 5 tiers Docker Compose
Best for

Operators who need a hardened public edge.

Pricing

Choose your tier

One-time purchase. Higher tiers add components; the top tier adds a live onboarding session. Every tier includes the runbook, verify script and component guides.

Starter
The entry point. Two or three services, one compose file.
$12 $20one-time 40% off
  • Working Compose stack
  • TLS termination and monitoring
  • Pinned source fetch
Get Rampart Starter
2 components · instant download
Growth
Adds the core services most teams reach for next.
$30 $50one-time 40% off
  • Everything in Starter
  • CrowdSec and Gitleaks wired
  • Pre-commit hook setup
Get Rampart Growth
4 components · instant download
Pro
The working set - most of the stack, documented end to end.
$60 $100one-time 40% off
  • Everything in Security Pack
  • Image and dependency scanning
  • Authentication portal
Get Rampart Pro
7 components · instant download
Most popular
Scale
Nearly everything, plus 30 days of priority support.
$120 $200one-time 40% off
  • Everything in Hardening Toolkit
  • Identity management and policy engine
  • 30 days priority support
Get Rampart Scale
10 components · instant download
Complete
Every component, plus a live onboarding session.
$180 $300one-time 40% off
  • All twelve components
  • 1:1 onboarding session
  • Lifetime updates
Get Rampart Complete
12 components · instant download
Architecture

How it fits together

Each service runs as its own container. The compose file defines the network, the volumes and the wiring between them.

docker compose — Rampartcompose network · named volumescaddyApache-2.0 · Gouptime-kumaMIT · JavaScriptcrowdsecMIT · GogitleaksMIT · GotrivyApache-2.0 · GonucleiMIT · GoautheliaApache-2.0 · GokeycloakApache-2.0 · JavaopaApache-2.0 · GovectorMPL-2.0 · RustheadscaleBSD-3-Clause · GotraefikMIT · Go
Components

12 services, pinned

Every project keeps its own licence and copyright. The stack ships the integration, not a fork.

ComponentWhat it doesLicenceSource
caddy
Go
 Web server with automatic HTTPS. Apache 2.0 upstream
04fe161028
uptime-kuma
JavaScript
 Self-hosted uptime monitoring with status pages. MIT upstream
e7420f8fa5
crowdsec
Go
 Collaborative behaviour-based intrusion prevention. MIT upstream
c261e4fce6
gitleaks
Go
 Secret scanning for repositories. MIT upstream
b58d3f102c
trivy
Go
 Vulnerability scanning for images and dependencies. Apache 2.0 upstream
8f815546c7
nuclei
Go
 Template-driven vulnerability scanner. MIT upstream
a14b3de2a4
authelia
Go
 Authentication and authorisation proxy. Apache 2.0 upstream
1eb93a5e5f
keycloak
Java
 Identity and access management with SSO. Apache 2.0 upstream
9b7c2d4fd7
opa
Go
 Policy engine for authorisation and admission. Apache 2.0 upstream
3f2d1bd960
vector
Rust
 High-performance observability data pipeline. MPL 2.0 upstream
9aee1f50ee
headscale
Go
 Self-hosted coordination server for WireGuard mesh. BSD 3-Clause upstream
eeaac680be
traefik
Go
 Modern reverse proxy with automatic TLS. MIT upstream
fcbfb8aff2
Documentation

A guide for every component

Written docs that ship inside the archive - role, reasoning and how to run each service.

autheliacaddycrowdsecgitleaksheadscalekeycloaknucleiopatraefiktrivyuptimekumavector
Quickstart

Run it

# 1. fetch the pinned upstream sources
./fetch-sources.sh ./sources

# 2. configure and start
cp .env.example .env
docker compose up -d

# 3. confirm everything came up
./verify.sh

Docker Engine 24+ with the Compose v2 plugin. 4 GB RAM for light tiers, 16 GB+ for the complete deployment.