Zapped

A secure and fast Zig Zap web server with built-in privacy features.

WARNING
Still early development and security testing, Use at your own risk.

Zapped Features

• 🔥 Hot Reloading
• 🚀 Performance Optimized
• 🔒 Security Features
  • CORS protection
  • Rate limiting
  • CSRF protection
  • Security headers
  • IP blacklisting
• 🕶️ Privacy Features
  • Tor hidden services (.onion) (Onion-Location Header)
  • I2P network support (.i2p)
  • SAM bridge integration
  • Private networking
• 📦 Asset Optimization
  • Compression (Gzip/Brotli)
  • Cache control
  • MIME type handling
• 📊 Monitoring
  • Metrics endpoint
  • Memory stats
  • Request tracking
• 🔐 SSL Support
  • Automatic certificate generation
• 🐋 Containers
  • Docker
  • Podman
  • Rootless

Quick Start

1. Install dependencies:

   • Zig
   • Zap
   • Docker or Podman
   • Tor (optional)
   • I2P (optional)

2. Drop your website into the public directory.

3. Edit zapped.json to your liking.

4. Run the following commands:

Replace docker with podman to use Podman instead of Docker.

make docker
make docker-run

or with Tor:

make docker-privacy
make docker-run-privacy USE_I2P=false # change to true to use I2P

git clone https://github.com/Sudo-Ivan/zapped.git
cd zapped

With SSL

make sure port 80/443 is open on server

make docker-run-ssl DOMAIN=example.com [email protected]

Check SSL certificates

make check-certs DOMAIN=example.com

Run with SSL + Tor + I2P

make docker-run-privacy-ssl DOMAIN=example.com [email protected]

# Run with SSL + Tor
make docker-run-ssl DOMAIN=example.com [email protected] USE_I2P=true

Privacy Features

Tor Hidden Services

• Automatic .onion address generation
• Hidden service configuration
• Onion-Location Header

I2P Integration

• SAM bridge support
• I2P network tunnels

Configuration

Edit zapped.json to customize:

• Server settings
• Security options
• Tor configuration
• I2P settings
• Compression settings
• Cache control
• CORS settings
• Rate limiting

Port Configuration Issues

For non-root port binding (80/443), you can either:

1. Set system-wide unprivileged port start:

sudo sysctl net.ipv4.ip_unprivileged_port_start=80

1. Or use higher ports (3000/3443) with reverse proxy