Boilerplate, Not Framework
You own the code. No vendor lock-in. No magic.
You Own It
No black boxes, no abstractions. Full control over your codebase.
Opinionated
Best practices baked in. Security, performance, and DX prioritized.
Fully Customizable
Modify anything. Remove what you don't need. It's your code.
No Plugin Hell
Everything built-in and tested together. No dependency conflicts.
300+ Hours of Work. Done.
Stop reinventing the wheel. Focus on your product, not plumbing.
Complete Auth System
Magic Link, password flows, OAuth, email verification, password reset, session management. All tested and secure.
Subscription System
Polar & Stripe support, webhook handling, feature gating, subscription management. Payment flows that just work.
Enterprise Security
CSRF protection, CSP with nonces, rate limiting, security headers. OWASP compliant, no configuration needed.
Blog & Docs System
Markdown rendering, syntax highlighting, frontmatter, sidebar navigation. Native CMS, no dependencies.
Email System
Resend integration, transactional emails, newsletter support, templates. Dev mode for local testing.
UI & Components
Built with templUI components. TailwindCSS, dark mode, responsive design. Beautiful UI out of the box.
SEO & Meta Tags
OpenGraph, Twitter Cards, dynamic sitemap, robots.txt. Optimized for search engines and social media.
Database & Migrations
SQLite/PostgreSQL setup, migrations, connection pooling, WAL mode. Production-ready from day one.
File Upload System
S3-compatible storage with AWS S3. Magic number validation, size limits, content-type checks, secure file handling.
Analytics & Monitoring
GA4 + Plausible analytics. Structured logging with slog (JSON/pretty output). Health checks, optional Sentry integration.
User Dashboard
Complete profile pages, account settings, subscription management UI, toast notifications for user feedback.
Development & Deployment
Hot reload dev environment, Make commands. Production Dockerfile, Docker Compose. Comprehensive documentation, deployment guides.
At $75/hour, that's over $23,000 in development costs.
Get it all for $149 (50% launch discount).
Everything You Need
Production-ready features from day one
Complete Auth System
Magic Link + Password + OAuth (Google/GitHub). Email verification, password reset, flexible management.
Subscriptions Built-in
Polar & Stripe support. Feature gating, webhook handling, subscription management. Production-ready payments.
Native Blog & Docs
Markdown-based content system. No CMS required. Frontmatter support, syntax highlighting included.
Email System
Resend integration. 3,000 free emails/month. Transactional emails and newsletter support.
Database Ready
SQLite by default (WAL mode), PostgreSQL optional. Migrations, connection pooling configured.
Beautiful UI
templ components + TailwindCSS. Dark mode, responsive design. Type-safe templates.
SEO Optimized
Meta tags, OpenGraph, Twitter Cards. Dynamic sitemap generation, robots.txt configured.
Analytics Ready
Google Analytics 4 + Plausible support. Privacy-first options. GDPR compliant.
Structured Logging
Native Go slog. JSON in production, pretty in dev. Optional Sentry integration for error tracking.
Docker Ready
Production Dockerfile included. Docker Compose for local dev. Deploy anywhere in minutes.
Legal Pages
Terms, Privacy Policy, Cookie Policy templates. Ready to customize for your business.
File Uploads
S3-compatible storage. Magic number validation, size limits, content-type checks.
Security Built-In
OWASP best practices. NIST compliance. No plugins required.
CSRF Protection
Double Submit Cookie pattern. HttpOnly, SameSite. All forms protected.
Rate Limiting
5 req/15min on auth endpoints. Prevents brute force attacks.
Security Headers
CSP with nonces, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy.
Password Security
bcrypt hashing. 12+ char minimum. Common pattern detection. NIST compliant.
JWT Security
HttpOnly cookies (not localStorage!). 7-day expiry. Minimal claims.
Token Security
32-byte random tokens. Hashed storage. Single-use. Time-limited expiry.
OAuth Security
State parameter validation. CSRF prevention. Secure callback handling.
File Upload Security
Magic number validation. Size limits. Content-Type verification.
Simple Pricing
One-time payment. Lifetime updates. No subscriptions.
Single
Perfect for indie developers
Team
Best for small teams
Enterprise
For larger organizations
Single
goilerplate + templUI Pro
Team
goilerplate + templUI Pro Team
Enterprise
goilerplate + templUI Pro Enterprise
Unlimited
goilerplate + templUI ProThe complete bundle for organizations that need complete freedom. Unlimited developers, unlimited projects.
Modern Tech Stack
No JavaScript frameworks. No build complexity. Just Go.
Frequently Asked Questions
What's included in goilerplate?
Everything you need to build a production-ready Go application: complete authentication system (Magic Link + Password + OAuth), subscription management with Polar, native blog & docs system, email integration with Resend, database setup with migrations, beautiful UI components with templ, Docker configuration, comprehensive security features (CSRF, CSP, rate limiting), SEO optimization, analytics support, and detailed documentation.
Does goilerplate work with AI coding tools?
Yes! goilerplate works great with AI coding assistants like Claude Code, Cursor, GitHub Copilot, and others. The codebase is clean, well-documented, and follows consistent patterns that AI tools understand easily.
Can I use this commercially?
Yes! Use goilerplate in unlimited commercial projects, client work, and even open source projects. Your license tier determines how many developers can use it (Single: 1, Team: 5, Enterprise: 25).
Not allowed: Selling or redistributing goilerplate as templates, themes, or competing boilerplates. See our License for details.
How do team licenses work?
All licenses get private GitHub repository access via Polar.
Team (5 devs) and Enterprise (25 devs): Fork the repository to your organization's GitHub and manage team access with the industry-standard upstream/origin pattern.
What's your refund policy?
No refunds for digital products once accessed. If you have issues, contact support. Accidental duplicate payments are refunded immediately.