skills.rest
thesammykins
thesammykinsCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

pangolin-architect

Configure Pangolin to deploy an identity-aware reverse proxy with WireGuard support.

Updated Oct 31, 2024
Search Tags:#vpn#docker#identity#access-control#reverse-proxy#wireguard#pangolin
One-click install
npx skills add https://github.com/thesammykins/dotfiles --skill pangolin-architect
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: pangolin-architect
Source: https://github.com/thesammykins/dotfiles/tree/main/.agents/skills/pangolin-architect
Command: npx skills add https://github.com/thesammykins/dotfiles --skill pangolin-architect

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Simplifies exposing internal services securely by providing an identity-aware, self-hosted reverse proxy that consolidates access control and secure tunneling.

Core Features & Use Cases

  • Deployment via Docker Compose to run the Pangolin server and clients.
  • Identity Providers integration and per-resource policies to enforce least-privilege access.
  • WireGuard-based tunnels for secure remote access without exposing ports.
  • Integration with connectors like newt and management tooling for provisioning and scaling.

Quick Start

Deploy Pangolin with Docker Compose to initialize the control plane and establish a WireGuard tunnel.

Frequently Asked Questions about pangolin-architect

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I set up an identity-aware reverse proxy for my home lab?▼

An identity-aware reverse proxy secures home lab access by authenticating users before routing traffic. You can deploy this using Docker Compose alongside an identity provider and per-resource policies to enforce least-privilege access.

How does WireGuard tunneling work for secure remote access without exposing ports?▼

WireGuard tunneling creates encrypted network connections between remote clients and your server. This reverse proxy uses WireGuard to provide secure remote access to internal services without requiring exposed public ports.

Do I need Docker Compose to deploy a self-hosted reverse proxy with WireGuard support?▼

Yes, Docker Compose is required to deploy the Pangolin server and clients. You also need an identity provider and policy definitions to enforce per-resource access controls.

Can I enforce per-resource access policies for small teams using a reverse proxy?▼

Yes, you can enforce per-resource access policies for small teams by integrating an identity provider. This allows you to apply granular, least-privilege access controls to individual internal services.

What is the best way to expose internal services securely without opening public ports?▼

The best way to expose internal services securely is using an identity-aware reverse proxy with WireGuard tunnels. This consolidates access control and secure tunneling, preventing direct port exposure.

How do I provision and scale reverse proxy clients for secure remote access?▼

You can provision and scale reverse proxy clients using management tooling and connectors like newt. These integrate with the control plane to manage deployment and WireGuard tunnel scaling.

Related Skills

Explore More Software Engineering Skills→
guiledoguiledo

docker-infra-workflow

Automate Docker and Docker Compose infrastructure with multi-stage builds and healthchecks.

Community
Advanced
alsk1992alsk1992
650

remote

Manage secure remote access and tunneling for local services via SSH, ngrok, and Cloudflare Tunnels.

Community
Intermediate
HouseGarofaloHouseGarofalo
3

wireguard

Set up and manage WireGuard VPN configurations for secure network tunneling.

Official
Intermediate
MassimilianoPiliMassimilianoPili

oauth2-proxy-patterns

Implement OAuth2 Proxy dual-instance deployment with Keycloak OIDC and nginx auth_request.

Community
Advanced