Yes. FYRwall is open source under Apache-2.0 with Commons Clause: free to use, self-host and modify.

Does FYRwall run the web server as root?

No. The server runs unprivileged and only a tiny typed Unix-socket helper performs privileged firewall operations.

Which Linux distributions are supported?

Any distro with Go-compatible binaries: Debian, Ubuntu, RHEL/Rocky/Alma, Fedora, SUSE, Arch, Alpine and more, on amd64, arm64, arm, 386, ppc64le, s390x and riscv64.

Can FYRwall lock me out of my server?

It actively prevents that: lockout-risk conflicts block applies, and every change has an automatic restore point with verification and rollback.

Docs / Reference / FAQ

FAQ

Is FYRwall really free?

Yes. Apache-2.0 with Commons Clause: use, modify, self-host freely and

embed it inside larger products. What nobody may do is sell FYRwall itself

as a standalone paid product.

How is this different from Cockpit/Webmin?

FYRwall is firewall-focused with transactional safety: conflict detection,

lockout prevention, restore points and verified rollback. General-purpose

panels manage many things; FYRwall does one thing safely.

Does it work behind nginx/Caddy?

Yes. Set trusted_proxies and your domain. The GUI enforces the configured

Host when domain binding is on.

Can it manage many servers?

Yes: agents on other hosts dial out to the central server over mTLS-style

enrollment; discovery is opt-in and scope-limited.

What if the agent dies?

The web server stays up, shows the agent offline, disables writes and gives

recovery steps. Firewall rules on the host are untouched.

Does it send data anywhere?

No. Telemetry, analytics and update checks are off by default. When you

enable update checks, the only request is one manifest GET.

Which distros?

Debian/Ubuntu, RHEL/Rocky/Alma, Fedora, SUSE, Arch, Alpine, Void, Gentoo -

anything Go binaries run on. glibc and musl. Seven CPU architectures.

Can I break my firewall with it?

The product is designed so that is hard: risky changes are blocked, every

apply has a snapshot + verify + rollback, and safe-apply timers undo

connectivity-breaking changes automatically.

Uninstall cleanly?

fyrwall uninstall
# or from a repo checkout:
sudo sh packaging/uninstall.sh --all --purge

Removes binaries, units, user, data, logs. Your firewall rules are never

touched by FYRwall install or uninstall.

Can I use FYRwall commercially?

Yes, with one rule. You may embed FYRwall as a feature inside a larger

product or service, including paid ones. You may not sell FYRwall itself:

no charging for the software, no paid managed hosting of FYRwall alone, no

paid support whose value is FYRwall itself.

Where do I put the license notice?

Keep the LICENSE file and attribution in your distribution. If you

redistribute, your license notice must include the Commons Clause condition

alongside Apache-2.0.