OpenSecDash

Appearance

OpenSecDashA security dashboard for homelabs

Turn homelab events, access logs, CrowdSec decisions, asset inventory, and update signals into correlated insights, notifications, and controlled actions.

Get started
View on GitHub
View on Docker-Hub
Buy me a coffee
OpenSecDash logo
🛡️

Live security dashboard

Arrange plugin-driven widgets for bans, geoblocks, access activity, assets, updates, insights, and historical trends.

🔎

Investigate and correlate

Filter Events and Access, save investigation views, and connect IPs, assets, paths, bans, geoblocks, and web probes.

🧭

Insights engine

Turn noisy traffic into deterministic findings with validated declarative rules—never remotely executed code.

⚡

Controlled actions

Ban or unban public IPs through CrowdSec LAPI with confirmations, permissions, dry-run simulation, and audit history.

🔔

Useful notifications

Send SMTP alerts for matching events, insights, offline assets, and plugin errors with cooldowns and digest aggregation.

🧩

Plugin-first architecture

Start with CrowdSec, Traefik, GeoIP, Proxmox Assets, JSON Assets, GeoBlock, MQTT, and extend from there.

📦

Assets and updates

Track systems and apps, link hosts to security events, check GitHub releases, and publish update states to Home Assistant.

👥

Optional sign-in and roles

Enable internal Viewer, Operator, and Admin accounts, personal preferences, saved views, and per-user dashboard layouts.

📱

Responsive and installable

Use every workflow on phones, tablets, and desktops, or install OpenSecDash as a PWA behind HTTPS.

From signals to response ​

OpenSecDash brings the complete planned v1 workflow into one understandable, self-hosted UI:

text
Datasources → Enrichment → Events → Insights → Dashboard / Explorer → Notifications / Actions

It is not a Grafana replacement. Instead of asking you to build a general-purpose observability stack, OpenSecDash focuses on security-oriented homelab workflows: IP-centric investigations, structured event filters, access-log correlation, deterministic insights, asset inventory, update signals, plugin health, notifications, and controlled CrowdSec actions.

OpenSecDash dashboard

A closer look ​

Filter and save security investigations, inspect one IP with a click, and keep an eye on your apps and their updates:

Security events with filters

IP Explorer with actions and insights

Asset inventory and update checks

The recommended installation method is Docker Compose. It keeps Python dependencies, the database location, log handling, and file permissions reproducible.

bash
cp docker/docker-compose.example.yml docker-compose.yml
docker compose up -d

OpenSecDash includes optional internal sign-in with Viewer, Operator, and Admin roles. It is disabled by default so existing deployments keep their current access model. Even with internal sign-in enabled, keep the dashboard internal, behind a VPN, or behind a trusted HTTPS reverse proxy.

Released under the GNU Affero General Public License v3.0.

Copyright © konkos1 & OpenSecDash contributors