Your apps, all in one place.
Frontdoor is a self-hosted, open-source homepage for the internal tools your team uses every day. Sign in once with Microsoft SSO, see exactly the apps you are authorized to use, and launch them in one click — no juggling bookmarks, no "which subdomain was it?", no stale sessions. Admins manage who sees what through groups and per-group visibility, and can tailor the homepage's look and branding from the UI.
Built for IT teams who got tired of intranet wikis full of half-broken links.
Documentation: frontdoor.buildbandits.com/docs (italiano). FEATURES.md is the full capability map.
docker compose -f docker-compose.demo.yml up --buildOpen http://localhost:3001 and use the Dev Login panel to sign in as owner, admin, admin_readonly or user. Dev Login lets anyone pick any role, so never expose the demo to a network. Remove it with docker compose -f docker-compose.demo.yml down -v.
npm install
cp .env.example.node .env # DEV_LOGIN=true is already set: no Entra registration needed
npm run devFrontend: http://localhost:5173 | API: http://localhost:3001
cp .env.example.docker .env # fill in your Microsoft Entra and domain settings
docker compose up -d --buildPrebuilt images are published to GitHub Container Registry for every release: ghcr.io/buildbandits/frontdoor-oss:latest, :X.Y.Z and :X.Y, plus :dev from main.
See Install with Docker and Microsoft Entra setup for a real deployment.
Node.js 24 LTS and Express 5 on the backend, React 19 with React Router, Vite and Tailwind CSS 4 on the frontend, SQLite through better-sqlite3, Microsoft SSO with @azure/msal-node plus JWT sessions, and a multi-stage Docker image based on node:24-bookworm-slim (pinned to a patched release).
| Topic | Page |
|---|---|
| Installation | Docker, Node.js and the local demo |
| Configuration and environment variables | Configuration reference |
| Microsoft Entra | Microsoft Entra setup |
| Upgrades | Upgrade and rollback |
| Security | Security notes |
| API | API reference |
| Satellite apps | Authentication for satellite apps |
| Plugins | Plugins (locked off in current releases) |
| Admin guide | Apps, groups, users, customization, logs, backup |
The documentation sources live in BuildBandits/frontdoor.buildbandits.com. See CHANGELOG.md for what changed in each release.
Contributions are welcome. See CONTRIBUTING.md for development setup, the checks to run, the pull-request workflow and the DCO sign-off requirement. Project governance is in GOVERNANCE.md, and all participants are expected to follow the Code of Conduct.
Report vulnerabilities privately as described in SECURITY.md. Do not open a public GitHub issue for security findings.
MIT — see LICENSE. The license covers the source code; it does not grant rights to use the Frontdoor™ name, logo or brand identity. See TRADEMARK.md.