BFFless

Self-hosted static site hosting platform

Get it on umbrelOS

Version0.4.15

CategoryDeveloper Tools

Source codePublic

Developed byBFFless 1 app

Submitted byBffless 1 app

Compatible withumbrelOS 0.5 or later

BFFless is a self-hosted platform for hosting static websites and build artifacts from CI/CD pipelines.

Key Features:

Upload static sites via CLI, API, or GitHub Actions
Instant deployments with unique URLs per commit
Deployment aliases for staging, production, and custom environments
Custom domain support with subdomain routing
Built-in admin dashboard for managing deployments
Privacy-focused: All data stays on your Umbrel

Perfect for developers who want full control over their static site hosting without relying on external services.

Note: This app requires a Cloudflare Tunnel for external domain access. Internal access shows setup instructions.

What's new

Version 0.4.15+2 weeks ago

Updates BFFless CE from v0.2.10 to v0.4.15.

App catalog — 1-click app install:

Browse and install self-hosted apps directly from the admin dashboard
Installs deploy under the real upstream source commit
Registry store metadata and per-app setup notes render on the app cards
Reachability gates only install apps that can actually be served over HTTPS

Onboarding & setup:

New welcome walkthrough (with video) and an app-install callout as the primary first-login path
Onboarding and day-2 settings now link out to the docs site
Claim-token links go straight to the setup wizard and prefill the claim form
Replay the onboarding modal any time with ?onboarding=1

Storage:

Presigned uploads now work on local filesystem storage
Same-SHA republish serves fresh bytes instead of stale cached content
Served content types resolve from storage, with the correct charset

Pipelines & groups:

Pipelines can read user.groups, plus a member-accessible group directory
New now_ms() helper; data-write values are coerced to schema field types
Null-safe "ne" filter operator (IS DISTINCT FROM)

CLI:

New bffless login credential store and auth commands
rules init --schema scaffold command

Frontend & polish:

Per-route document titles and a real favicon
Fixed mobile viewport overflow and crashes across admin pages
Traffic-splitting tools (weights + routing rules) added to the MCP server

Fixes (including for proxied setups like Cloudflare Tunnel):

Auth and presigned uploads are excepted from the subdomain-alias rewrite
Presigned local uploads serve correctly on externally-proxied vhosts
App-serving vhosts share a consistent request-body ceiling
Blocklists never enforce a half-loaded or stale rule set
Alias visibility / required-role overrides persist and read back correctly

Full release notes can be found at https://github.com/bffless/ce/releases/tag/v0.4.15

Version 0.2.10+last month

Updates BFFless CE from v0.1.90 to v0.2.10.

Proxy rules as code:

New bffless CLI: manage proxy rule sets as TypeScript files in your repo — compile, decompile, publish, and live sync
Rule set revisions with rollback (accepts the short revision ids shown in the CLI table)
Write pipeline handlers in TypeScript with a local rules dev workflow

Traffic monitoring & blocklists:

Live traffic tail in the admin UI, with unmatched-request history and per-IP rollups
IP blocklists: reusable blocklist library, per-domain attachment, and inline add-to-blocklist
Enforcement at both the application and nginx edge

Pipelines:

Pipeline schedules (cron) with a full admin UI
New handlers: xml_feed_parse and data_upsert_many (with optional update-on-conflict)
ai_handler attachments (multi-part image/file content)
New "in" (array-membership) filter operator; data_delete supports the full filter operator set
file_serve_handler cacheability supports expressions; verbatim keyStrategy for presigned uploads

Storage:

Edit provider credentials in place without migrating
Presigned download URLs can sign Content-Disposition for friendly filenames

Fixes:

Users with the "user" global role can create projects again
Copying a proxy rule set re-encrypts header secrets
Auth-proxy rules work through the visibility gate on private deployments
Large JSON pipeline responses are sent verbatim to avoid out-of-memory
data_query consistently returns arrays unless single/recordId is set
Custom content types allowed in the response_handler UI

Full release notes can be found at https://github.com/bffless/ce/releases/tag/v0.2.10

Version 0.1.90+last month

Updates BFFless CE from v0.1.53 to v0.1.90.

Pipelines & automation:

New file_delete pipeline handler, with multi-object (keys[]) mode and runtime array expressions
Project secrets for pipelines
Presigned direct-to-bucket upload handlers
file_serve_handler improvements: explicit key mode, byte-range streaming, and private caching by default
Set arbitrary custom response headers via the UI editor and MCP tools
Expose crypto utils to the function_handler sandbox; step-timeout field for the Replicate handler

Proxy rules & domains:

Export and import proxy rule sets from the admin UI, with bundled schema dependencies
Proxy rules can match multiple HTTP methods
Support absolute external URLs as path redirect targets

AI:

Fetch Anthropic models live from /v1/models
Pin which deployment alias AI skills load from

Auth & access:

ENABLE_EMAIL_PASSWORD flag for OIDC-only sign-in
Mint a content-domain session from a project API key
Member-accessible user directory for people-pickers

Privacy:

Opt-out install telemetry controls (setup wizard and settings)

Fixes:

nginx: larger proxy header buffers for SuperTokens session refresh, http-level client_max_body_size, and upload-size fixes
Raise the request body limit and return 413 for oversized bodies
Markdown viewer renders GitHub-style with a source toggle
Correct permission badges for global admins on repo cards
Various proxy-rule and /auth routing fixes

Full release notes can be found at https://github.com/bffless/ce/releases/tag/v0.1.90

Version 0.1.53+2 months ago

Updates BFFless CE from v0.1.42 to v0.1.53.

Highlights:

Accept multiple proxy rule sets when creating a deployment
Choose 301 or 302 status for redirect-type domains
Custom-domain sign-ups now relay back to the target domain
Pipeline string response bodies served verbatim instead of JSON-encoded
Stronger authorization: global Admin treated as project Owner consistently, role lanes enforced when granting project permissions, and global admin honored on the repo feed and project settings
Create Deployment button and proxy-rule actions hidden/disabled for viewers
Fixed Azure Blob Storage upload and its setup wizard step
Surface storage migration errors with a force-switch recovery path
Include redirectType in the domain response DTO and SSL renewal regeneration

Full release notes can be found at https://github.com/bffless/ce/releases/tag/v0.1.53

Version 0.1.42+2 months ago

Updates BFFless CE from v0.1.32 to v0.1.42.

Highlights:

Pluggable OIDC sign-in providers (Google, Okta, Azure AD, generic)
Google integration credentials moved off system_config to a per-service table; legacy /oauth/google/* aliases removed
Create deployments directly from the admin UI
Auto-detect basePath in the Create Deployment UI
github_api pipeline handler gains a dispatch action
Reset "no SMTP provider" from the UI
Aliases can be created with proxyRuleSetIds via repo-browser; auto-preview aliases excluded from repo stats
Subdomains served over HTTPS when PROXY_MODE=cloudflare
Setup wizard cache recommendations aligned with available Redis options
Auth: 'guest' accepted as a valid requiredRole
Embedded Umbrel setup walkthrough video on setup pages

Full release notes can be found at https://github.com/bffless/ce/releases/tag/v0.1.42

InfluxDBHigh performance time series database

GiteaA painless self-hosted Git service

MinIOThe Object Store for AI Data Infrastructure

UmamiSimple, fast, privacy-focused alternative to Google Analytics

PastefyAn easy paste for seamless sharing

ForgejoA self-hosted lightweight software forge

BFFless

Related