# ubnt-update

> Self-hosted nginx TLS stream proxy routing Ubiquiti firmware updates through a VPN tunnel when official servers are blocked. Runs via Docker Compose or manual nginx.

- **Category:** Networking
- **Licence:** MIT
- **Open source:** oss
- **Platforms:** Docker Compose, Linux
- **Tags:** Nginx, VPN, Networking, Tls, Docker, Docker Compose, Self Hosted, Ubiquiti, Unifi, Firmware update, Sni, Unifi Network, Unifi Network Application, Stream Proxy, Geo Blocking

## Description

ubnt-update is a self-hosted solution for updating Ubiquiti/UniFi network devices when the official firmware update servers (hosted on Amazon) are unreachable due to geo-blocking or sanctions. It provides nginx stream proxy configurations that terminate TLS connections to Ubiquiti update domains (fw-download.ubnt.com, fw-download.ui.com, etc.) and forward them through a VPN tunnel to a VPS or server located outside the restricted region. Three deployment methods are documented: (1) a local VM with nginx and a VPN tunnel, (2) a VPS with nginx and a VPN tunnel, (3) a VPS using Docker Compose with the provided nginx configuration. The project includes multiple nginx stream configuration variants covering different sets of Ubiquiti domains (firmware downloads, beta/early access, and full update domains). It runs as a Docker container (nginx:1.28.0-alpine-slim) exposing port 443, or as a manual nginx installation on Debian/Ubuntu. The software is open-source under the MIT license.

## Links

- [Homepage](https://github.com/naem53/ubnt-update)
- [GitHub Repository](https://github.com/naem53/ubnt-update)

---
Source: https://selfhost.directory/project/ubnt-update