selfhost.directory

The index of self-hostable projects — ranked, categorized and served with live updates.
Own your data and stop giving it to big tech.

WPMgr logo

Self-host WPMgr

v0.61.198

WordPress fleet management for backups and monitoring

BetaOpen CoreAGPL-3.0
Updated7 hours ago
LanguageGo
Setup difficultyModerate
Stars
165
CPU
2 vCPU
RAM
2 GB
Storage
20 GB SSD
Ports
8080 (API container-internal listen address), 8333 (SeaweedFS S3 gateway), 5556 (Dex OIDC provider), 3000 (Grafana UI (observability profile)), 4317 (OTLP gRPC (observability profile)), 4318 (OTLP HTTP (observability profile))
Requires
PostgreSQL, Redis
Docker
ghcr.io/mosamlife/wpmgr-api
Install with Docker Compose

What is WPMgr?

WPMgr is a self-hostable WordPress fleet management platform with a Go control plane, React dashboard, and PHP agent plugin for each managed site. It handles scheduled backups that capture changes incrementally and let you roll back to any point in time, bulk plugin and core updates with automatic rollback on failure, real-time uptime monitoring with TLS tracking, page caching and Redis object cache for performance, Core Web Vitals monitoring, AVIF/WebP image optimization, database cleaning, file integrity scanning, login protection, two-factor authentication (TOTP and WebAuthn), multi-tenant organizations with four-role RBAC, per-site collaborator sharing, white-label client reports, a read-only client portal, and a file manager. The stack runs via Docker Compose with PostgreSQL, Redis, SeaweedFS for S3-compatible storage, optional ClickHouse for metrics, and optional Dex for OIDC. Prebuilt multi-arch images are on GHCR. The agent works on any PHP 8.1+ WordPress 6.2+ host without shell access. Licensed AGPL-3.0 for the control plane and MIT for the agent.

Should you self-host WPMgr?

WPMgr scores 48/100 on selfhost.directory (how scoring works) and ranks #15 of 18 in Content Management. It has 165 GitHub stars.

It shipped 9 stable releases in the past year. The latest, v0.61.198, came out on 24 October 2026. New versions land roughly every 7 days.

Setup is moderate: expect some configuration beyond a single command. An official Docker image is available. It is AGPL-3.0-licensed and written mostly in Go.

Its closest alternative on selfhost.directory is EmDash (67/100, 14 022 stars). It scores higher overall, so compare the two before you pick. See WPMgr vs EmDash side by side.

Features

  • AVIF/WebP image optimization
  • Bulk fleet updates
  • Client Portal
  • Core Web Vitals monitoring
  • Database cleaner
  • File integrity scanning
  • Multi-tenant organizations
  • Page caching
  • Point-in-time restore
  • Real-time uptime monitoring
  • Scheduled and incremental backups
  • Two-factor authentication
  • White-label client reports
  • WordPress fleet management

WPMgr README

How to install WPMgr

Install WPMgr with Docker Compose

Environment variables
WPMGR_SESSION_SECRET, WPMGR_DB_USER, WPMGR_DB_PASSWORD, WPMGR_DB_HOST, WPMGR_DB_PORT, WPMGR_DB_NAME, WPMGR_DB_SSLMODE, WPMGR_DB_MIGRATION_DSN, WPMGR_REDIS_ADDR, WPMGR_SITE_DEST_AGE_SECRET, WPMGR_AGENT_SIGNING_PRIVATE_KEY, WPMGR_AGENT_SIGNING_PUBLIC_KEY, WPMGR_PUBLIC_BASE_URL, WPMGR_S3_ENDPOINT, WPMGR_S3_BUCKET, WPMGR_S3_ACCESS_KEY, WPMGR_S3_SECRET_KEY, WPMGR_S3_REGION, WPMGR_S3_FORCE_PATH_STYLE, WPMGR_WEB_PORT, WPMGR_API_PORT, WPMGR_S3_PORT, WPMGR_DEX_PORT, WPMGR_OIDC_ISSUER, WPMGR_OIDC_CLIENT_ID, WPMGR_OIDC_CLIENT_SECRET, WPMGR_OIDC_REDIRECT_URL, WPMGR_AUTH_WEBAUTHN_RPID, WPMGR_AUTH_WEBAUTHN_RP_ORIGINS

curl -fsSL https://raw.githubusercontent.com/mosamlife/wpmgr/main/scripts/quickstart-selfhost.sh | bash

Or with prebuilt images:

export WPMGR_VERSION=v0.61.183 docker compose -f infra/docker-compose.yml -f infra/docker-compose.prod.yml up -d

One-click installer script downloads all files, generates secrets, and prints the exact command to start. Prebuilt GHCR images available for production.

WPMgr releases & version history

FAQ

How many sites can I manage?

There is no built-in site limit. WPMgr is designed as fleet management for one site or many, with a real-time sites list, multi-tenant organizations, role-based access, and per-site sharing.

Is my data private?

If you self-host the control plane, your data stays on your own infrastructure. On hosted plans, backups default to a control-plane-managed bucket; on the Free plan, a site needs its own S3-compatible bucket or local folder. Nothing is encrypted client-side today.

Can I install the agent with Composer?

Yes. The directory listing is mirrored by both Composer repositories that serve WordPress.org. Require wpackagist-plugin/fleet-agent-site-manager for wpackagist.org or wp-plugin/fleet-agent-site-manager for repo.wp-packages.org.

Why is the plugin called Fleet Agent Site Manager on WordPress.org?

That is its listing name in the WordPress.org plugin directory, where it was reviewed and published. The project is WPMgr and the plugin is the WPMgr Agent.

Does it work on managed or locked-down WordPress hosts?

Yes. The agent is a lightweight PHP plugin that needs PHP 8.1+ and WordPress 6.2+, nothing more. Backups use a pure-PHP streaming dump and archiver with no shell access and no mysqldump binary.

Do I have to self-host it?

Self-hosting is the way WPMgr is built to run today. The bundled Docker Compose stack brings up the full system with a few commands, and prebuilt container images are published for production setups.

How do I contribute?

Fork the repository on GitHub, pick a good-first-issue, and open a pull request. The control plane is Go with a generated OpenAPI layer, the frontend is React 19, and the agent is PHP.

Is WPMgr free?

Yes, WPMgr is open source and free to self-host. The control plane and dashboard are AGPL-3.0, and the WordPress agent plugin is MIT-licensed. There is no paid tier or per-site fee to run it yourself.

More in Backup Management

Rate this project

Click to rate — no account needed.

0 comments

Posting as guest
Loading comments…