Enterprise-style domain monitoring
that you can self-host.
Track registration expiry via RDAP, verify DNS using authoritative nameservers, detect changes with diffs, and get alerts to Discord, Microsoft Teams Workflows, or email.
Built for homelabs and teams who want control, auditability, and low running cost.
- RDAP registration & expiry
- NS / SOA / MX / TXT (authoritative)
- Mail health (SPF / DMARC / DKIM checks)
- TLS certificate expiry checks
- Structure diffs & history
Features
Accurate DNS from the source
Queries authoritative nameservers (not just public resolvers) to reduce false positives and reflect real delegation state.
Alerts that don’t spam
Per-domain mute windows, thresholds, and test buttons. Send to Discord, Teams Workflows, and email.
SSO or Local users
Local login by default. Optional OIDC SSO (Entra recommended; also Okta/Auth0/Keycloak/Ping/OneLogin/Google via OIDC).
RBAC + audit logs
Admin/Viewer roles, group mapping support, and searchable audit logs with CSV export.
Backups & restore
In-app backups and restore with pre-restore snapshots. Designed for safe upgrades and quick recovery.
Read-only API
Bearer-token protected endpoints for your dashboards and automations.
Screenshots
Preview the UI. (Placeholders for now — we’ll replace with real screenshots later.)
Download
Releases are published on GitHub.
GitHub Releases: https://github.com/IAmPreden/domain-monitor/releases
Deploy
Docker (recommended)
- Install Docker + Docker Compose.
- Download the latest release ZIP and extract.
- Copy
.env.example→.envand edit. - Run
docker compose up -d
Default binds to 127.0.0.1:8000 for safety.
Public HTTPS
Two supported approaches:
- Cloudflare Tunnel (no inbound ports)
- Caddy reverse proxy (Let’s Encrypt)
See in-app Help → Reverse proxy / HTTPS help for diagrams and troubleshooting.
FAQ
Is this tied to Cloudflare?
No. Domain Monitor is independent. You can optionally secure it with Cloudflare Access or host it anywhere.
Which TLDs are supported?
Any TLD that has RDAP support at the registry/registrar. DNS checks work for all domains.
Can it email without licensing a mailbox?
Yes. Use SMTP relay (TLS). For Microsoft 365 you can use an Exchange Online connector (port 25) or authenticated SMTP where permitted.
Does it support Teams webhooks?
Yes — Teams Workflows webhook (future-proof vs legacy connectors).
Is there a dark mode?
Yes — the UI is dark by default and built to be migraine-friendly.