git404hub

what is enforza-cockpit fr?

enforza/enforza-cockpit — explained in plain English

Analysis updated 2026-05-18

2ShellAudience · ops devopsComplexity · 3/5Setup · moderate

tl;dr

A free web plugin that lets you build and manage a Linux nftables firewall visually through your browser.

vibe map

mindmap
  root((repo))
    What it does
      Visual nftables firewall editor
      Cockpit plugin
      Router and NAT support
    Tech stack
      Shell scripts
      nftables
      Cockpit web console
    Use cases
      Manage homelab firewall
      Set up NAT gateway
      Safely test firewall rules
    Audience
      Homelab owners
      Small server operators
      DevOps engineers

Code map

Detail Auto

An interactive map of this repo's files and how they connect — its source is parsed live in your browser. Click Visualize to build it.

filefunction / class

what do people make with this?

VIBE 1

Build and apply firewall rules on a homelab or small cloud server through a web GUI.

VIBE 2

Turn a single Linux box into a router or NAT gateway for other devices.

VIBE 3

Safely test firewall changes with an automatic revert if you forget to confirm.

VIBE 4

Learn nftables firewall concepts visually before managing servers by hand.

what's the stack?

ShellnftablesCockpitPython

how it stacks up fr

enforza/enforza-cockpitaizhigitovamir-code/n8n-automation-suiteayush-sk-pathak/claude-code-starter-pack
Stars222
LanguageShellShellShell
Setup difficultymoderatemoderateeasy
Complexity3/53/52/5
Audienceops devopspm founderdeveloper

Figures from each repo's GitHub metadata at analysis time.

how do i run it?

Difficulty · moderate time til it works · 30min

Requires root or sudo access on a Linux server and open access to Cockpit's web port 9090.

in plain english

enforza-cockpit is a free web-based tool for managing a Linux firewall through your browser instead of typing commands. It is built as a plugin for Cockpit, an existing web console for managing Linux servers, and it gives you a visual editor for building firewall rules that get turned into a real nftables firewall running on the machine. With it, a single Linux server can act as a firewall, a router, and its own management console, all without any extra software or outside service. You can filter traffic coming into the machine, passing through it, or leaving it, organized into three sections in the interface. You can also turn on routing so the machine forwards traffic between its network connections, and set up outbound traffic to be masqueraded so the box works as a gateway for other devices behind it. A safety feature protects you from locking yourself out: after applying a new firewall rule, you have sixty seconds to confirm it, and if you do not, the previous working rules are automatically restored. This project shares its visual design with a paid product from the same company, called the enforza Cloud Controller, but this free version only wraps the standard nftables firewall built into Linux. The paid product adds extra capabilities, such as filtering traffic by website address, managing many firewalls from one place, and generating compliance reports, none of which are included here. Setup involves cloning the repository, running a setup script that installs the needed packages like nftables and Cockpit itself for your Linux distribution, then running a second script to install the plugin into Cockpit. After that, you open Cockpit in a web browser, log in with a system account that has administrator access, and find the firewall plugin in the menu. The full README is longer than what was shown.

prompts (copy fr)

prompt 1
Help me run the bootstrap and deploy scripts to install enforza-cockpit on my Linux server.
prompt 2
Show me how to set up a Management, Network, and Local firewall rule using this Cockpit plugin.
prompt 3
Explain how the confirm-or-revert safety feature works when I apply a new firewall rule.
prompt 4
Walk me through turning this server into a NAT gateway using enforza-cockpit's routing option.

Frequently asked questions

what is enforza-cockpit fr?

A free web plugin that lets you build and manage a Linux nftables firewall visually through your browser.

What language is enforza-cockpit written in?

Mainly Shell. The stack also includes Shell, nftables, Cockpit.

How hard is enforza-cockpit to set up?

Setup difficulty is rated moderate, with roughly 30min to a first successful run.

Who is enforza-cockpit for?

Mainly ops devops.

peek the repo → explain another one

This repo across BitVibe Labs

double-check against the repo, no cap.