Domain Monitor alpha

Enterprise-style domain monitoring
that you can self-host.

Track registration expiry via RDAP, verify DNS using authoritative nameservers, detect changes with diffs, and get alerts to Discord, Microsoft Teams Workflows, or email.

Built for homelabs and teams who want control, auditability, and low running cost.

What it monitors
  • RDAP registration & expiry
  • NS / SOA / MX / TXT (authoritative)
  • Mail health (SPF / DMARC / DKIM checks)
  • TLS certificate expiry checks
  • Structure diffs & history
Dark mode RBAC Backups API

Features

Accurate DNS from the source

Queries authoritative nameservers (not just public resolvers) to reduce false positives and reflect real delegation state.

Alerts that don’t spam

Per-domain mute windows, thresholds, and test buttons. Send to Discord, Teams Workflows, and email.

SSO or Local users

Local login by default. Optional OIDC SSO (Entra recommended; also Okta/Auth0/Keycloak/Ping/OneLogin/Google via OIDC).

RBAC + audit logs

Admin/Viewer roles, group mapping support, and searchable audit logs with CSV export.

Backups & restore

In-app backups and restore with pre-restore snapshots. Designed for safe upgrades and quick recovery.

Read-only API

Bearer-token protected endpoints for your dashboards and automations.

Screenshots

Preview the UI. (Placeholders for now — we’ll replace with real screenshots later.)

Dashboard screenshot placeholder
Dashboard overview
Domain details screenshot placeholder
Domain details + history
Notifications screenshot placeholder
Notifications + test buttons
Security screenshot placeholder
Security + backups

Download

Releases are published on GitHub.

Deploy

Docker (recommended)

  1. Install Docker + Docker Compose.
  2. Download the latest release ZIP and extract.
  3. Copy .env.example.env and edit.
  4. Run docker compose up -d

Default binds to 127.0.0.1:8000 for safety.

Public HTTPS

Two supported approaches:

  • Cloudflare Tunnel (no inbound ports)
  • Caddy reverse proxy (Let’s Encrypt)

See in-app Help → Reverse proxy / HTTPS help for diagrams and troubleshooting.

FAQ

Is this tied to Cloudflare?

No. Domain Monitor is independent. You can optionally secure it with Cloudflare Access or host it anywhere.

Which TLDs are supported?

Any TLD that has RDAP support at the registry/registrar. DNS checks work for all domains.

Can it email without licensing a mailbox?

Yes. Use SMTP relay (TLS). For Microsoft 365 you can use an Exchange Online connector (port 25) or authenticated SMTP where permitted.

Does it support Teams webhooks?

Yes — Teams Workflows webhook (future-proof vs legacy connectors).

Is there a dark mode?

Yes — the UI is dark by default and built to be migraine-friendly.