{"url":"https://nexovirt.com/box","title":"NexoVirt Box: free open-source web desktop for your server","description":"NexoVirt Box is a free, open-source (AGPL) web desktop for Debian and Ubuntu servers: 600+ apps, files, backups, HTTPS for apps and a firewall with rollback.","markdown_url":"https://nexovirt.com/box.md","sections":[{"heading":"NexoVirt Box: a free web desktop for your own server","content":"Apps in one click, files, backups and a firewall you cannot lock yourself out of, in your browser. Open source under the AGPL.\n\n[View on GitHub](https://github.com/NexoVirt/nexovirt-box) [How it installs](#install)\n\nEarly test version (0.x), in development.\n\nroot@your-server   Copy\n\n$\n\n```\ncurl -fsSL https://raw.githubusercontent.com/NexoVirt/nexovirt-box/main/deploy/get.sh | sudo sh\n```\n\n- ✓ checks the system\n- ✓ verifies the release signature and checksums\n- ✓ installs and starts Box\n- › open https://<server-ip>:8443 and enter the setup code\n\nDebian 12, 13 or Ubuntu 22.04, 24.04 · amd64 or arm64 · Docker optional\n\n![NexoVirt Box desktop with widgets for CPU, memory, storage and network and tiles for the installed apps](https://nexovirt.com/assets/img/box/hero-desktop-dark.webp?v=1793892600)\n\nThe desktop: live widgets on the left, system tools and your apps on the right."},{"heading":"What is NexoVirt Box?","content":"A web desktop that installs on top of the server you already have, not a new operating system.\n\nBox installs on a normal Debian or Ubuntu server with one command. It is a single program with the web interface built in, plus a small root helper. Open `https://<server-ip>:8443`, create your admin account and the desktop is there: app tiles, live widgets and floating windows.\n\nYour server stays yours. SSH, your own services and your own configuration keep working, and Box only changes what it manages itself. It is made for one machine: a home server, a small VPS or a mini PC in the cupboard.\n\n- 600+ Docker apps in the catalog, from the Runtipi, CasaOS and BigBear app stores.\n- *€0* Open source under the GNU AGPL 3.0. No paid edition, no license key, no account.\n- 60 s until an unconfirmed firewall change rolls itself back."},{"heading":"Everything a small server needs, in one desktop","content":"The things you would otherwise do over SSH, with a few clicks and a clear way back.\n\n- App store with 600+ apps\n\nDocker apps in one click, with generated passwords, update notices and logs. Bring your own compose file for anything that is missing.\n- Files in the browser\n\nA Finder-style explorer with upload, preview, drag and drop and share links.\n- Backups built in\n\nEncrypted backups of your apps to a local folder, S3 or a Proxmox Backup Server, on a schedule, with one-click restore.\n\n- HTTPS for every app\n\nGive an app its own domain: a built-in reverse proxy (Caddy) fetches the Let's Encrypt certificate.\n- A firewall you cannot lock yourself out of\n\nEvery change rolls back after 60 seconds unless you confirm it. Box only touches its own rules and shows the rest read only.\n\n### Also included\n\n- System updates (apt) from the desktop\n- Disk health with SMART\n- Samba and NFS shares\n- Notifications by email, Discord, ntfy or webhook\n- Live widgets for CPU, memory, storage and network\n- Floating windows, light and dark mode, your own theme"},{"heading":"See NexoVirt Box","content":"Real screenshots of the current test version, not mockups.\n\n![The App Store with 600+ apps, each with its source and license.](https://nexovirt.com/assets/img/box/appstore.webp?v=1793892600)\n\nThe App Store with 600+ apps, each with its source and license.\n\n![Files: upload, preview, drag and drop and share links.](https://nexovirt.com/assets/img/box/files.webp?v=1793892600)\n\nFiles: upload, preview, drag and drop and share links.\n\n![Backups: encrypted archives, schedules and targets.](https://nexovirt.com/assets/img/box/backups.webp?v=1793892600)\n\nBackups: encrypted archives, schedules and targets.\n\n![Several windows side by side on the desktop.](https://nexovirt.com/assets/img/box/multi-window.webp?v=1793892600)\n\nSeveral windows side by side on the desktop."},{"heading":"Built so a web desktop does not become a way in","content":"A web UI with root access is a big target. Box keeps the parts that need root small and checks them twice.\n\n1. The web UI never runs as rootIt runs as its own unprivileged user. Root work goes through a small helper that only knows a fixed list of actions.\n2. The root console needs a fresh passwordThe helper checks your password (and 2FA code) itself before it opens a shell, so even a compromised web process cannot start one.\n3. Two-step sign-inTOTP codes with recovery codes, and passkeys. Failed sign-ins are rate limited.\n4. Signed updates with a way backBox only installs releases signed with the NexoVirt key, on your click. If the new version does not answer, the old one comes back.\n\n[Read the security model](https://github.com/NexoVirt/nexovirt-box/blob/main/docs/security-model.md)"},{"heading":"Install NexoVirt Box","content":"Run the command at the top of this page as root on your server. It checks the system, verifies the release signature and checksums, then installs.\n\nThen open `https://<server-ip>:8443`, enter the setup code the installer printed and create your admin account. Run the same command again to upgrade.\n\n- Debian 12, 13 or Ubuntu 22.04, 24.04\n- amd64, arm64 a mini PC, an arm64 board or a VPS\n- Docker optional Box offers to install it the first time you open the App Store"},{"heading":"An open-source alternative to CasaOS","content":"CasaOS showed how friendly a home server can be, and part of the Box catalog comes from its app store. Box takes the same idea in its own direction.\n\n### Like CasaOS\n\n- Installs on your existing Linux server, no reinstall\n- A web desktop with app tiles and a Docker app store\n- Free and open source\n\n### What Box adds\n\n- Encrypted backups to a folder, S3 or Proxmox Backup Server\n- HTTPS with your own domain for every app\n- A firewall that rolls back changes you do not confirm\n- A web UI without root, a root console behind a fresh password, 2FA and passkeys\n- Signed updates that roll back on their own if the new version fails\n\nBox is new and under active development. The latest CasaOS release on GitHub (v0.4.15) dates from December 2024. Both projects change over time, so check each one's current state for your setup."},{"heading":"NexoVirt Box FAQ","content":"Is NexoVirt Box free?Yes. Box is open source under the GNU AGPL 3.0. There is no paid edition, no license key and no account: you install it on your own server and it is yours.\n\nIs NexoVirt Box ready for production?Not yet. Box is an early test version (0.x) in active development, and things will change before 1.0. Try it on a test server or a machine whose data you have backed up elsewhere.\n\nHow is Box related to the NexoVirt panel for Proxmox?They are separate products from the same team. The NexoVirt panel manages Proxmox VE hosts and clusters for homelabs and hosting providers. Box is a free web desktop for one Debian or Ubuntu server and does not need Proxmox. It can send backups to a Proxmox Backup Server if you have one.\n\nWhich systems does NexoVirt Box run on?Debian 12 and 13, Ubuntu 22.04 and 24.04, on amd64 or arm64. Box installs on top of the system you already have. Docker is optional: Box offers to install it the first time you open the App Store.\n\nIs NexoVirt Box an alternative to CasaOS?Yes. Like CasaOS, Box installs on an existing Linux server and gives it a web desktop with an app store. Box adds encrypted backups, HTTPS for apps, a firewall that rolls back unconfirmed changes and signed updates. Part of its app catalog comes from the CasaOS App Store (Apache-2.0).\n\nHow do updates work?Box only installs releases signed with the NexoVirt release key, and only when you click Install. If the new version does not answer, the old one comes back. Running the install command again also upgrades."},{"heading":"Follow NexoVirt Box on GitHub","content":"Box is built in the open. Star or watch the repository to follow the road to 1.0, report a bug or send a pull request.\n\n[Star on GitHub](https://github.com/NexoVirt/nexovirt-box) [Install](#install)"}],"faq":[{"question":"Is NexoVirt Box free?","answer":"Yes. Box is open source under the GNU AGPL 3.0. There is no paid edition, no license key and no account: you install it on your own server and it is yours."},{"question":"Is NexoVirt Box ready for production?","answer":"Not yet. Box is an early test version (0.x) in active development, and things will change before 1.0. Try it on a test server or a machine whose data you have backed up elsewhere."},{"question":"How is Box related to the NexoVirt panel for Proxmox?","answer":"They are separate products from the same team. The NexoVirt panel manages Proxmox VE hosts and clusters for homelabs and hosting providers. Box is a free web desktop for one Debian or Ubuntu server and does not need Proxmox. It can send backups to a Proxmox Backup Server if you have one."},{"question":"Which systems does NexoVirt Box run on?","answer":"Debian 12 and 13, Ubuntu 22.04 and 24.04, on amd64 or arm64. Box installs on top of the system you already have. Docker is optional: Box offers to install it the first time you open the App Store."},{"question":"Is NexoVirt Box an alternative to CasaOS?","answer":"Yes. Like CasaOS, Box installs on an existing Linux server and gives it a web desktop with an app store. Box adds encrypted backups, HTTPS for apps, a firewall that rolls back unconfirmed changes and signed updates. Part of its app catalog comes from the CasaOS App Store (Apache-2.0)."},{"question":"How do updates work?","answer":"Box only installs releases signed with the NexoVirt release key, and only when you click Install. If the new version does not answer, the old one comes back. Running the install command again also upgrades."}]}