Wardlock documentation

Wardlock is a free, open-source, self-hostable way to publish static sites with access control built in. Deploy a folder to a subdomain with one command, then decide who can open it: anyone, people holding a share link, people who know a password, people who can receive an email code at an allowed address, or people who sign in with GitHub, Google or your own OIDC provider.

Wardlock is alpha software and has not had an external security review. Do not use it to protect anything sensitive yet.

• Specification

  What Wardlock does: sites, deploys, policies, share links, sign-in methods, AI-readable renditions and the CLI.

• Self-hosting

  Running your own instance: domains and DNS, TLS, systemd, Docker, reverse proxies, SMTP, OAuth, backups and upgrades.

• Security model

  What Wardlock defends against, how, and which risks it accepts.

• Acceptable use

  What owners may not publish, how operators screen and enforce it, and how to report abuse.

The source, roadmap and contributor guides are in the GitHub repository.