Community blueprints for real infrastructure
Reusable, reviewed stacks you can run from the OpenSible console in one click — Kubernetes, service meshes, databases, observability and more.
NGINX Reverse Proxy
Install NGINX from distro packages and render a hardened reverse-proxy vhost with optional TLS, HTTP→HTTPS redirect and upstream health checks.
MongoDB Replica Set
3-node MongoDB replica set with TLS and rolling backups.
HAProxy Load Balancer
HAProxy L4/L7 load balancer on systemd (distro package). Renders a hardened haproxy.cfg with health checks, a protected stats page and optional TLS termination. Enable keepalived to publish a VRRP virtual IP across 2+ nodes for HA.
Traefik Reverse Proxy (Docker provider)
Traefik v3 on systemd with the Docker provider enabled — auto-discovers containers on the host's Docker socket via `traefik.enable=true` labels, exposes the protected dashboard, Prometheus metrics and optional Let's Encrypt ACME. Deploy as a single node or as an HA cluster with a keepalived VRRP virtual IP.
ingress-nginx + cert-manager
Production ingress with TLS via Let's Encrypt DNS-01.
cert-manager + Cloudflare
Automated TLS with cert-manager and Cloudflare DNS-01 solver.