MIT
License
About as permissive as a license gets. Keep the copyright notice, and everything else is yours to decide.
What it means, in plain terms
| You may | You must | You get |
|---|---|---|
| Use it commercially | Keep the copyright notice | No warranty of any kind |
| Change it | Keep the license text with it | No liability from the author |
| Distribute it | No obligation to share your changes | |
| Sublicense it | No obligation to tell anybody | |
| Sell it, or something containing it | No support, unless somebody chooses to give it |
The warranty part is not boilerplate to skim past. This software is given away by one person and there is no organization standing behind it. That is the trade you are making, and the pricing page spells out what the alternative costs.
The license
MIT License
Copyright (c) 2026 Tim Rice
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.What it builds and bundles
This project is MIT. The things it installs are not all MIT, and their licenses are their own.
| Component | License | Note |
|---|---|---|
| nginx | 2 clause BSD | Built from source by the installer. |
| OpenSSL 3.5 | Apache 2.0 | Linked into the nginx build. |
| ModSecurity | Apache 2.0 | Built as a loadable module, only when asked for. |
| OWASP Core Rule Set | Apache 2.0 | Downloaded at install time, not bundled. |
| Third party nginx modules | Various, mostly BSD or MIT | Cloned from their own repositories at build time. The list is at the top of the installer script. |
| WireGuard | GPL 2.0 | Installed from your distribution when you turn the tunnel on. |
| certbot | Apache 2.0 | Installed by the nginx installer. |
| db-ip country database | CC BY 4.0 | Optional. If you publish anything derived from it, credit db-ip. |
| MaxMind GeoLite2 | MaxMind EULA | Optional, and needs an account with them. |
A software bill of materials is generated into sbom/ in the repository, which is
the authoritative list rather than this table.