A complete, self-hosted IT documentation platform designed for Managed Service Providers (MSPs) and IT departments. Built with Django 6, HuduGlue provides secure asset management, encrypted password vault, knowledge base, PSA integrations, and comprehensive monitoring tools.
All screenshots include demo data and are watermarked. Random background feature enabled. View full gallery →
|
|
|
|
|
|
|
|
|
|
|
|
📋 View All Screenshots (34 total)
- Dashboard - Main dashboard with random backgrounds
- Quick Add - Fast creation menu for assets, passwords, documents
- About - System information and version details
- Profile - User profile and settings
- Favorites - Quick access to favorited items
- Assets List - Comprehensive asset tracking
- Racks - Rack management with U-space tracking
- Network Closets - Network infrastructure management
- IPAM/Subnets - IP address management
- VLANs - VLAN configuration and tracking
- Locations - Physical location management
- Password Vault - AES-256-GCM encrypted password storage
- Personal Vault - Private user password vault
- Secure Notes - Encrypted ephemeral messaging
- Knowledge Base - Document management system
- Diagrams - Draw.io integrated diagramming
- Floor Plans Import - MagicPlan floor plan import
- Workflows - Process automation and tracking
- Website Monitors - Uptime monitoring dashboard
- Expirations - SSL, domain, and credential expiration tracking
- Security Dashboard - Security overview and vulnerability status
- Vulnerability Scans - Snyk scan history
- Scan Configuration - Security scan settings
- Settings - General system configuration
- System Status - Health monitoring and scheduled tasks
- System Updates - One-click update system
- Organizations - Multi-tenant organization management
- Access Management - User and role management
- Integrations - PSA and external integrations
- Import Data - Bulk data import tools
- Global Dashboard - Cross-organization overview
- Global KB - Internal staff documentation
- Global Workflows - Reusable process templates
This project was developed with the assistance of Luna, a brilliant German Shepherd Dog with exceptional problem-solving abilities and a keen eye for security best practices. Luna's contributions to code review, architecture decisions, and bug hunting have been invaluable.
- Azure AD / Microsoft Entra ID SSO with auto-user creation
- LDAP/Active Directory enterprise integration
- Enforced TOTP 2FA with SSO bypass
- AES-GCM Encryption for all sensitive data
- Password Breach Detection via HaveIBeenPwned (k-anonymity)
- Snyk Security Scanning with automated CVE detection
- Rate Limiting, CSRF, XSS, SQL injection, SSRF, path traversal protection
- Complete Organization Isolation with 42 granular permissions
- Four-Tier Access Levels - Owner, Admin, Editor, Read-Only
- MSP User Types - Staff (global) and Organization (scoped) users
- Auto-Update System - One-click web updates (20-30 seconds, no SSH)
- Asset Management - Comprehensive tracking with NetBox-style rack visualization
- Password Vault - AES-GCM encrypted with breach detection, personal vaults, and Bitwarden import
- Bitwarden Import - Import passwords from Bitwarden/Vaultwarden JSON exports (logins, notes, cards, identities, folders, custom fields, TOTP)
- SMS/Navigation - Send location navigation links via SMS (Twilio, Plivo, Vonage, Telnyx, AWS SNS)
- Documentation - Per-org docs with version control, templates, and global MSP knowledge base
- Diagrams & Floor Plans - Draw.io integration, MagicPlan import, auto-generated flowcharts
- Infrastructure - IPAM, rack visualization, network documentation, cable/power management
- Monitoring - Website uptime, SSL certificates, domain expiration, custom alerts
- Workflows - Process automation with audit logging, PSA integration, execution tracking
- Firewall Management - iptables firewall rules, GeoIP country blocking, IP whitelist/blacklist
- Intrusion Prevention - Fail2ban integration with ban management and IP checking
- 8 PSA Providers - ConnectWise, Autotask, HaloPSA, Kaseya BMS, Syncro, Freshservice, Zendesk, ITFlow
- 5 RMM Providers - Tactical RMM (full), NinjaOne, Datto, Atera, CW Automate (infrastructure ready)
- Organization Auto-Import - Automatically create orgs from PSA companies or RMM sites
- Asset Mapping - Auto-link RMM devices to assets
For complete feature details, see FEATURES.md
🎉 New in v2.27:
- Bitwarden/Vaultwarden Import - Import passwords from Bitwarden/Vaultwarden JSON exports with full support for all item types (logins, notes, cards, identities), folders, custom fields, and TOTP secrets
- SMS/Navigation Links - Send location navigation links via SMS using Twilio, Plivo, Vonage, Telnyx, or AWS SNS for Google Maps, Apple Maps, and Waze
- Global View Improvements - Superusers can now access workflow executions and locations without organization context
- Firewall & GeoIP - iptables-based firewall management with country blocking capabilities
- Fail2ban Integration - Automated intrusion prevention with ban/unban management
Recent Highlights:
- User-Configurable Tooltips - Per-user tooltip preferences with helpful hints throughout the interface
- RMM Device Location Mapping - Display devices with location data on interactive map with status-based markers
- Workflow Automation - One-click launch with automatic assignment, complete audit logging, PSA ticket integration
- Execution Tracking - Full history view with filtering, color-coded status badges, progress bars
- Auto-Update System - One-click web updates with real-time progress (20-30 seconds, no SSH required)
- Azure AD SSO - Single sign-on with Microsoft accounts
- Organization Auto-Import - Automatically create organizations from PSA/RMM systems
- Security Scanning - Snyk vulnerability scanning, HaveIBeenPwned password breach detection
For complete version history, see CHANGELOG.md
The easiest way to install HuduGlue:
git clone https://github.com/agit8or1/huduglue.git && cd huduglue && bash install.shThis automated installer will:
- ✅ Install all prerequisites (Python 3.12, pip, venv, MariaDB server & client)
- ✅ Create virtual environment and install dependencies
- ✅ Generate secure encryption keys automatically
- ✅ Create
.envconfiguration file - ✅ Setup database and user
- ✅ Create log directory
- ✅ Run migrations
- ✅ Create superuser account
- ✅ Collect static files
- ✅ Start production server automatically (Gunicorn with systemd)
- ✅ Configure auto-update permissions (sudoers for one-click web updates)
When the installer finishes, your server is RUNNING and ready to use!
The installer automatically detects existing installations and offers:
- Upgrade/Update - Pull latest code, run migrations, restart service (zero downtime)
- System Check - Verify all components are working properly
- Clean Install - Remove everything and reinstall from scratch
- Exit - Leave existing installation untouched
No manual cleanup needed! The installer handles everything.
Once installed, you can update HuduGlue directly from the web interface:
- Navigate to System Settings → System Updates
- Click "Check for Updates Now" to detect new versions
- Click "Apply Update" when an update is available
- Watch real-time progress through all 5 steps:
- Step 1: Git Pull
- Step 2: Install Dependencies
- Step 3: Run Migrations
- Step 4: Collect Static Files
- Step 5: Restart Service
- Page automatically reloads with the new version (20-30 seconds total)
No SSH access required! Non-technical users can update safely from the web interface.
System Requirements:
- Ubuntu 20.04+ or Debian 11+
- 2GB RAM minimum (4GB recommended)
- Internet connection for package installation
By default, HuduGlue installs with Azure AD SSO support but without LDAP/Active Directory. This is because LDAP requires C compilation and system libraries.
If you need LDAP/AD support, install it after the main installation:
# Install system build dependencies
sudo apt-get update
sudo apt-get install -y build-essential python3-dev libldap2-dev libsasl2-dev
# Install LDAP Python packages
cd ~/huduglue
source venv/bin/activate
pip install -r requirements-optional.txt
sudo systemctl restart huduglue-gunicorn.serviceNote: Azure AD SSO does not require these packages. LDAP is only needed for on-premises Active Directory or other LDAP servers.
If you prefer to install manually or need more control:
Click to expand manual installation steps
- Python 3.12+
- MariaDB 10.5+ or MySQL 8.0+
- Nginx (production only)
# 1. Clone repository
git clone https://github.com/agit8or1/huduglue.git
cd huduglue
# 2. Install system dependencies
sudo apt-get update
sudo apt-get install -y python3.12 python3.12-venv python3-pip mariadb-client mariadb-server
# 3. Create virtual environment
python3.12 -m venv venv
source venv/bin/activate
# 4. Install Python dependencies
pip install --upgrade pip
pip install -r requirements.txt
# 5. Generate secrets
python3 -c "from cryptography.fernet import Fernet; print('APP_MASTER_KEY=' + Fernet.generate_key().decode())"
python3 -c "import secrets; print('SECRET_KEY=' + secrets.token_urlsafe(50))"
python3 -c "import secrets; print('API_KEY_SECRET=' + secrets.token_urlsafe(50))"
# 6. Create .env file
# Copy the generated secrets from step 5 into this file
cat > .env << 'EOF'
DEBUG=True
SECRET_KEY=<paste_secret_key_here>
ALLOWED_HOSTS=localhost,127.0.0.1
DB_NAME=huduglue
DB_USER=huduglue
DB_PASSWORD=your_secure_password
DB_HOST=localhost
DB_PORT=3306
APP_MASTER_KEY=<paste_master_key_here>
API_KEY_SECRET=<paste_api_key_secret_here>
EMAIL_BACKEND=django.core.mail.backends.console.EmailBackend
SITE_NAME=HuduGlue
SITE_URL=http://localhost:8000
EOF
# 7. Start MariaDB and create database
sudo systemctl start mariadb
sudo mysql << 'EOSQL'
CREATE DATABASE huduglue CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;
CREATE USER 'huduglue'@'localhost' IDENTIFIED BY 'your_secure_password';
GRANT ALL PRIVILEGES ON huduglue.* TO 'huduglue'@'localhost';
FLUSH PRIVILEGES;
EOSQL
# 8. Run migrations
python3 manage.py migrate
# 9. Create superuser
python3 manage.py createsuperuser
# 10. Collect static files
python3 manage.py collectstatic --noinput
# 11. Run development server
python3 manage.py runserver 0.0.0.0:8000Visit http://localhost:8000 and log in with the credentials you created in step 9.
Installation:
- INSTALL.md - Complete installation guide (quick start, upgrade, troubleshooting)
Core Documentation:
- ORGANIZATIONS.md - Complete guide to organizations, user types, roles, and permissions
- SECURITY.md - Security best practices and vulnerability disclosure
- CONTRIBUTING.md - Development and contribution guidelines
- CHANGELOG.md - Version history and release notes
- deploy/ - Production deployment configs (Nginx, Gunicorn, systemd services)
- Framework: Django 6.0
- API: Django REST Framework 3.15
- Database: MariaDB 10.5+ (MySQL 8.0+ supported)
- Web Server: Nginx + Gunicorn
- Authentication: django-two-factor-auth (TOTP)
- Encryption: Python cryptography (AES-GCM)
- Password Hashing: Argon2
- Frontend: Bootstrap 5, vanilla JavaScript
- ✅ No Docker - Pure systemd deployment
- ✅ No Redis - systemd timers for scheduling
- ✅ Minimal Dependencies - Only essential packages
- ✅ Security First - Built with security in mind
- ✅ Self-Hosted - Complete data control
HuduGlue has undergone comprehensive security auditing and continuous vulnerability monitoring:
- ✅ Automated CVE Scanning - Codebase scanned for known vulnerabilities and CVEs
- ✅ AI-Assisted Detection - Pattern matching for SQL injection, XSS, CSRF, path traversal
- ✅ Dependency Monitoring - Python packages checked against security advisories
- ✅ Weekly Manual Audits - Regular security reviews by development team
- ✅ Alert-Only System - No automated code changes, human verification required
- ✅ SQL Injection - Parameterized queries and identifier quoting
- ✅ SSRF - URL validation with IP blacklisting
- ✅ Path Traversal - Strict file path validation
- ✅ IDOR - Object access verification
- ✅ Insecure File Uploads - Type, size, and extension validation
- ✅ Hardcoded Secrets - Environment variable enforcement
- ✅ Weak Encryption - AES-GCM with validated keys
- ✅ CSRF Protection - Multi-domain support
- All passwords encrypted with AES-GCM
- API keys hashed with HMAC-SHA256
- Rate limiting on all endpoints
- Brute-force protection
- Security headers (CSP, HSTS)
- Private file serving
- Audit logging
- Password breach detection (HaveIBeenPwned integration)
Security Disclosure: If you discover a vulnerability, please email [email protected]. See SECURITY.md for details.
We welcome contributions! Here's how you can help:
Have an idea for a new feature? We use a community-driven voting system:
- Start with a Discussion → Share your idea
- Vote on existing ideas → Browse and upvote (👍 reactions)
- Track the Roadmap → View what's being built
Popular ideas (high votes + alignment with project goals) are promoted to Feature Request issues and added to the Roadmap.
📖 Read the full guide: docs/FEATURE_REQUESTS.md
Found a bug? Report it here
Ready to contribute code? See CONTRIBUTING.md for guidelines.
# 1. Fork and clone
git clone https://github.com/agit8or1/huduglue.git
cd huduglue
# 2. Create feature branch
git checkout -b feature/amazing-feature
# 3. Make changes and test
python3 manage.py test
# 4. Commit and push
git commit -m 'Add amazing feature'
git push origin feature/amazing-feature
# 5. Open Pull RequestThis project is licensed under the MIT License - see the LICENSE file for details.
- Luna the GSD - Development assistance, security review, and bug hunting
- Django & DRF - Excellent web framework
- Bootstrap 5 - Beautiful, responsive UI
- Font Awesome - Icon library
- Community - All contributors and users
- Version: 2.25.1
- Release Date: January 2026
- Status: Production Ready
- Maintained: Yes
- Security: Snyk monitored, HaveIBeenPwned integrated
- Issues: GitHub Issues
- Discussions: GitHub Discussions
- Security: See SECURITY.md for vulnerability disclosure
If you find HuduGlue useful for your MSP or IT department, please consider supporting the developer's business: MSP Reboot - Professional MSP services and consulting.
Your support allows me to continue developing open-source tools like HuduGlue and contribute to the MSP community. Thank you!
- Mobile-responsive UI improvements
- Advanced reporting and analytics
- Backup/restore functionality
- Docker deployment option (optional)
- Additional PSA/RMM integrations
- API v2 with GraphQL
- MagicPlan floor plan integration
- Mobile app
- Handles 1000+ assets per organization
- Sub-second page load times
- Efficient database queries
- Optimized for low-resource environments
- Horizontal scaling support
Made with ❤️ and 🐕 by the HuduGlue Team and Luna the German Shepherd