What Is New in Nginx Proxy Manager 2.16?

Nginx Proxy Manager 2.16 is a new stable release of the open-source reverse-proxy management platform. The project provides a web interface for managing proxy hosts, redirects, streams, SSL certificates, access lists and related Nginx configuration without requiring administrators to edit every configuration file manually. citeturn0search5turn0search0

The 2.16 release focuses on easier troubleshooting, more granular access control, networking behavior, security hardening and certificate-management updates. The project currently lists the 2.16.x series as the supported stable branch for security updates. citeturn0search3

Built-In Log Viewer Arrives

The most visible change in Nginx Proxy Manager 2.16 is a new Logs viewer inside the administration interface. The project exposes log-related API functionality for system logs, Let’s Encrypt activity and per-host logs, allowing administrators to inspect operational information directly through the management interface. citeturn0search0turn0search6

This can simplify day-to-day troubleshooting. Instead of immediately opening a shell and searching files or container output, an administrator can start the investigation from the Nginx Proxy Manager UI.

Per-Path Access Lists

Version 2.16 also adds per-path access lists to the Proxy Host modal. Previously, access restrictions were commonly applied at the host level. Per-path rules provide a more granular option when different paths on the same hostname need different access controls. citeturn0search0

For example, an administrator could expose a public application while applying a separate access policy to a sensitive administrative path. The exact policy should still be tested against the application’s routing behavior and authentication requirements.

Security Improvements in Nginx Proxy Manager 2.16

Security is a significant part of this release. The official release notes list several security-related changes, including a change to escape ordering intended to prevent RCE, token invalidation after a password change, local generation of 2FA QR codes, improved private-key permission handling, and removal of DNS provider credentials from disk after Certbot completes. citeturn0search0

The release also fixes permission and authorization-related behavior, including returning HTTP 403 for denied requests in the relevant PermissionError path instead of 404. Administrators should still treat the reverse proxy as an exposed security boundary and apply strong authentication, least-privilege access and secure TLS configuration.

Networking and Performance Changes

Nginx Proxy Manager 2.16 adds reuseport support. The project describes this as a change intended to improve performance and reduce packet drops. The practical effect depends on workload, traffic patterns, host networking and the underlying Nginx worker configuration. citeturn0search0

The release also updates the s6 overlay to support Podman socket activation and fixes IPv6 forwarding for Streams so valid Nginx upstream configurations are generated.

Certificate Management and Certbot Changes

Nginx Proxy Manager relies on Certbot for certificate automation, and version 2.16 updates that component. The release adds DNS plugins for LWS and Tencent Cloud EdgeOne and updates plugins for Timeweb Cloud, Websupport and Azure DNS. It also includes a fix for Tencent Cloud apex and wildcard certificate issuance. citeturn0search0

Configuration Troubleshooting Gets Easier

Several changes improve visibility when configuration operations fail. Failed Nginx configurations are now retained as .conf.err files, while another fix addresses cases where configuration changes did not take effect. Custom locations were also reorganized into a filterable list, which can help administrators working with larger proxy configurations. citeturn0search0

Other Changes in Version 2.16

• Improved handling of insufficient private-key permissions.
• Removal of broken sorting from Audit Logs.
• Authenticated users visiting the login page are redirected to the dashboard.
• DNS provider credentials are removed from disk after Certbot execution.
• Configuration regeneration now uses the row’s own model and host type.
• Additional DNS-provider integrations and updates are included.
• New and updated translations include Azerbaijani, Ukrainian, Persian, German, Estonian and Turkish.

These changes are documented in the project’s v2.16.0 release notes. citeturn0search0

What Nginx Proxy Manager 2.16 Means for Administrators

For homelab, small-business and infrastructure administrators, the built-in log viewer is likely to be the most immediately noticeable operational improvement because troubleshooting can begin from the same interface used to configure proxy hosts.

Per-path access lists are more architectural: they give administrators another way to separate access requirements within a single hostname. The security and certificate-management changes are equally important because Nginx Proxy Manager is frequently placed directly in front of Internet-facing applications.

Upgrade Checklist

1. Back up the Nginx Proxy Manager data and Let’s Encrypt data volumes.
2. Record your current image tag and deployment configuration.
3. Review any custom DNS plugins used for certificate issuance.
4. Test certificate renewal if you depend on DNS-based validation.
5. Review Proxy Host access lists and any custom locations after upgrading.
6. Check the new Logs viewer for proxy, certificate and upstream errors.
7. Verify HTTP/HTTPS access, streams, redirects and authentication workflows.
8. For production systems, stage the upgrade before changing the live deployment.

How to Run Nginx Proxy Manager with Docker

The official documentation provides a Docker Compose deployment using the jc21/nginx-proxy-manager image. The standard setup exposes ports 80, 443 and 81, with persistent volumes for application data and Let’s Encrypt data. citeturn0search4

For an existing deployment, follow the project’s current upgrade documentation and retain your persistent data volumes. Avoid changing multiple infrastructure variables simultaneously when troubleshooting an upgrade.

Availability and Official Documentation

Nginx Proxy Manager 2.16.0 is published as an official release, with Docker images including jc21/nginx-proxy-manager:2.16.0. The project’s security policy currently identifies 2.16.x as the supported stable series. citeturn0search0turn0search3

Editorial note: This article summarizes publicly documented Nginx Proxy Manager 2.16 changes and adds practical infrastructure context. VMoreCloud has not independently reproduced every upstream fix or benchmark described in the release notes. Test upgrades in a controlled environment before applying them to production systems.