pangolin-architect

Name: pangolin-architect
Availability: InStock
Author: Sammykins

Configure Pangolin to deploy an identity-aware reverse proxy with WireGuard support.

Updated Oct 31, 2024

Search Tags:#vpn #docker #identity #access-control #reverse-proxy #wireguard #pangolin

Ready to run

npx skills add https://github.com/thesammykins/dotfiles --skill pangolin-architect

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: pangolin-architect
Source: https://github.com/thesammykins/dotfiles/tree/main/.agents/skills/pangolin-architect
Command: npx skills add https://github.com/thesammykins/dotfiles --skill pangolin-architect

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Simplifies exposing internal services securely by providing an identity-aware, self-hosted reverse proxy that consolidates access control and secure tunneling.

Core Features & Use Cases

Deployment via Docker Compose to run the Pangolin server and clients.
Identity Providers integration and per-resource policies to enforce least-privilege access.
WireGuard-based tunnels for secure remote access without exposing ports.
Integration with connectors like newt and management tooling for provisioning and scaling.

Quick Start

Deploy Pangolin with Docker Compose to initialize the control plane and establish a WireGuard tunnel.

Frequently Asked Questions about pangolin-architect

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I set up an identity-aware reverse proxy for my home lab?▼

An identity-aware reverse proxy secures home lab access by authenticating users before routing traffic. You can deploy this using Docker Compose alongside an identity provider and per-resource policies to enforce least-privilege access.

How does WireGuard tunneling work for secure remote access without exposing ports?▼

WireGuard tunneling creates encrypted network connections between remote clients and your server. This reverse proxy uses WireGuard to provide secure remote access to internal services without requiring exposed public ports.

Do I need Docker Compose to deploy a self-hosted reverse proxy with WireGuard support?▼

Yes, Docker Compose is required to deploy the Pangolin server and clients. You also need an identity provider and policy definitions to enforce per-resource access controls.

Can I enforce per-resource access policies for small teams using a reverse proxy?▼

Yes, you can enforce per-resource access policies for small teams by integrating an identity provider. This allows you to apply granular, least-privilege access controls to individual internal services.

What is the best way to expose internal services securely without opening public ports?▼

The best way to expose internal services securely is using an identity-aware reverse proxy with WireGuard tunnels. This consolidates access control and secure tunneling, preventing direct port exposure.

How do I provision and scale reverse proxy clients for secure remote access?▼

You can provision and scale reverse proxy clients using management tooling and connectors like newt. These integrate with the control plane to manage deployment and WireGuard tunnel scaling.