Has anyone heard of / tried OPNexus for central OPNsense management?

[dev]

Hi everyone,I've come across a project called OPNexus (https://opnexus.dev and https://github.com/OPNexus-dev/OPNexus).
It presents itself as a self-hosted central management console for multiple OPNsense firewalls. But for free.

It is source-available (PolyForm Shield license), runs via Docker Compose, and claims to work purely through the OPNsense API.
I couldn't find any discussion about it in the OPNsense forum or elsewhere, so I wanted to ask:Has anyone here heard of OPNexus before?
Has anyone already tested or is currently using it?
Any experiences, impressions, or concerns (positive or negative)?

Thanks in advance for any feedback!

[Patrick M. Hausen]

The project is less than a month old and has a single maintainer/committer. So I doubt many have taken notice, already.

[sopex]

The biggest issue with these projects is that the person will get bored and abandon it... At that point, it will start breaking and you will have to either get your own AI to maintain or uninstall it.

If this sounds like something you want to do, why not?

Sure, first try to establish it's not malicious, and if it is not well isolated from the internet, I am sure it's riddled with security issues some AI will find and exploit.

[julian_bldt]

Hi, and thanks to dev for mentioning it. I'm the maintainer of OPNexus, so take this with the usual grain of salt.

Both concerns are fair. It's a one-person project and it's young, I won't argue with that. What I can say is that it only talks to the firewalls through the regular OPNsense API, so if I disappear tomorrow your firewalls keep running exactly as they are. The config lives on the firewalls, not in OPNexus.

The source is public, so checking whether it's malicious is easy and I'd encourage that. It's not meant to face the internet, it comes with HTTPS and 2FA, and the images are signed. Trying it on a test box first is the sensible way anyway.

Small correction: the licence is PolyForm Shield, so source-available, not open source.

Happy to answer questions or take bug reports.