In simple English
This tool lets you run your own professional DNS service on your own server. It comes with a complete website, a secure database system, and an easy application programming interface (an API, which lets other programs talk to your service automatically). You can manage domain names, create user accounts, and handle security certificates without paying a commercial provider. Setting it up takes patience and technical knowledge about servers, networks, and Docker (a way to run a program inside its own sealed box, so it cannot break anything else on your server). It costs you the price of a virtual server and the time required to configure system settings and security.
What it is
A full Docker Compose stack that bundles authoritative PowerDNS nameservers, a Django REST API, PostgreSQL and MariaDB databases, an Nginx web server, and a management interface. It powers the deSEC free secure DNS hosting service.
What it is good for
Solo builders and system administrators who want to host their own private DNS infrastructure or launch a public domain registration service with built-in DNSSEC support.
- Provides a complete production-ready DNS stack with built-in DNSSEC and automated key management.
- Includes a full REST API for programmatic domain and record management.
- Bundles monitoring and security tools like Prometheus and Unbound out of the box.
- Demands advanced Linux administration skills, including manual network routing and firewall configuration.
- Requires careful setup of SSL certificates and OpenVPN tunnels for zone replication.
- Consumes significant server memory to run multiple database instances, caches, and DNS daemons.
manual PowerDNS configuration and custom billing scripts
Prometheus
- coredns/coredns14k stars
An alternative lightweight DNS server written in Go, but without the built-in user management API.
- slok/sloth2.6k stars
Generates Prometheus alerting and recording rules from a short specification of a service level objective.
- nicolargo/glances34k stars
A live view of one computer's health, in a terminal, in a browser, or through an AI assistant.
- dokku/dokku32k stars
A small platform you install on one server, which builds and runs an app every time you push code to it.
git clone https://github.com/desec-io/desec-stack.git cd desec-stack docker compose build && docker compose up