this post was submitted on 30 May 2025
61 points (95.5% liked)

Selfhosted

59858 readers
659 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam.

  3. Posts here are to be centered around self-hosting. Please ensure it is clear in your post how it relates to self-hosting.

  4. Don't duplicate the full text of your blog or git here. Just post the link for folks to click.

  5. Submission headline should match the article title.

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS
 

Hi fellow homelabbers! I hope your day / night is going great.

Just stubled across this self-hosted cloudflare tunnel alternernative called Pangolin.

  • Does anyone use it for exposing their homelab? It looks awesome, but I've never heard of it before.

  • Should I be reluctant since it's developed by a US-based company? I mean security-wise. (I'll remove this question if it's too political.)

  • Does anyone know of alternatives pieces or stacks or software that achieve the same without relying on cloudflare?

Your insights are highly appreciated!

you are viewing a single comment's thread
view the rest of the comments
[โ€“] YodaDaCoda@aussie.zone 10 points 1 year ago (1 children)

I think Pangolin works a bit differently... Correct me if I'm wrong...

Where headscale is a coordination server for a wireguard mesh, pangolin is a reverse proxy server that connects to the backend services via wireguard tunnels

[โ€“] nimmo@social.nimmog.uk 2 points 1 year ago

That's likely true.

The first I heard of Pangolin was in a conversation that followed on from one about head/tailscale and I accept that I may have jumped to a conclusion. I am certain I've seen people talking about using it as a reverse proxy tool. Just found a blog post on the tailscale site talking about how to do it and they're using tailscale and caddy, rather than everything being handled by tailscale alone, so I'll accept that I'm wrong on this one. https://tailscale.com/blog/last-reverse-proxy-you-need