A modern Go module proxy — drop-in replacement for Athens

Toga is a Go module proxy powered by goproxy. It correctly handles vanity imports, gopkg.in redirects, and the full GOPROXY protocol by delegating module fetching to goproxy's GoFetcher, which uses the Go toolchain directly.

Toga maintains Athens-compatible storage layouts — point it at your existing S3/GCS/MinIO/Azure bucket and it just works.

Athens has a long-standing bug where vanity import URLs don't resolve correctly, and the project is no longer actively maintained. Toga fixes this while keeping full compatibility with your existing Athens storage.

• Athens-compatible storage — works with your existing module cache, no data migration
• Vanity import support — correctly resolves vanity URLs and gopkg.in redirects
• 5 storage backends — Disk, S3, MinIO, GCS, Azure Blob
• Web UI — browse cached modules with syntax-highlighted go.mod previews
• Health endpoints — /healthz and /readyz for orchestration
• TLS & basic auth — production-ready out of the box
• Network modes — fallback (default), strict (cache-only misses error), offline (no upstream)
• Single binary — no dependencies, no database

# Install
go install github.com/taigrr/toga/cmd/toga@latest

# Run with disk storage (default)
toga

# Point Go at it
go env -w GOPROXY=http://localhost:6060,direct

docker run -p 6060:6060 ghcr.io/taigrr/toga

TOGA_STORAGE_TYPE=s3 \
TOGA_S3_REGION=us-east-1 \
TOGA_S3_BUCKET=my-go-modules \
toga

Toga is configured with environment variables (prefix TOGA_) or a config file (toga.toml, toga.yaml, toga.json).

Create ~/.config/systemd/user/toga.service:

[Unit]
Description=Toga Go Module Proxy
After=network.target

[Service]
Type=simple
ExecStart=%h/go/bin/toga
Environment="TOGA_PORT=:6060"
Environment="TOGA_STORAGE_TYPE=disk"
Environment="TOGA_DISK_ROOT_PATH=%h/.cache/toga"
Restart=always
RestartSec=5

[Install]
WantedBy=default.target

# Reload, enable, start
systemctl --user daemon-reload
systemctl --user enable toga
systemctl --user start toga

# Enable lingering (keeps service running after logout)
loginctl enable-linger $USER

# Check status
systemctl --user status toga
journalctl --user -u toga -f

Create ~/Library/LaunchAgents/com.taigrr.toga.plist:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Label</key>
    <string>com.taigrr.toga</string>
    <key>ProgramArguments</key>
    <array>
        <string>/path/to/toga</string>
    </array>
    <key>EnvironmentVariables</key>
    <dict>
        <key>TOGA_PORT</key>
        <string>:6060</string>
        <key>TOGA_STORAGE_TYPE</key>
        <string>disk</string>
        <key>TOGA_DISK_ROOT_PATH</key>
        <string>/path/to/storage</string>
    </dict>
    <key>RunAtLoad</key>
    <true/>
    <key>KeepAlive</key>
    <true/>
    <key>StandardOutPath</key>
    <string>/tmp/toga.log</string>
    <key>StandardErrorPath</key>
    <string>/tmp/toga.err</string>
</dict>
</plist>

# Load and start
launchctl load ~/Library/LaunchAgents/com.taigrr.toga.plist

# Unload
launchctl unload ~/Library/LaunchAgents/com.taigrr.toga.plist

# Check status
launchctl list | grep toga

Toga reads Athens storage layouts directly — no data migration required. See the full Migration Guide for step-by-step instructions.

The short version:

1. Keep your existing storage bucket
2. Rename ATHENS_* env vars to TOGA_* equivalents
3. Swap the container image

0BSD