Best Practice for running Pangolin both locally and for tunneling? #1235

New Issue

MrUnknownDE · 2026-04-05T18:33:45+02:00

MrUnknownDE commented

2026-04-05 18:33:45 +02:00

Originally created by @silverjerk on 7/15/2025

Read through the docs, but still unclear on best practice for running Pangolin both locally and remotely with tunneling.

Running a 3-node Proxmox Cluster along with 2 local NAS devices. Running Pihole along with NPM for managing all local DNS and proxy to both the PVE nodes and NAS devices, along with Cloudflare for tunnels and certs when needed.

Deployed a Hetzner VPS with Pangolin to manage tunneling for the local services that require external access, mostly a few of my development services (accessed rarely) across both the PVE nodes and one of the NAS devices. Using two domains for this; one is almost always used for internal services, the other is outward facing -- but there is overlap.

Is the best practice to spin up a separate instance of Pangolin locally on my cluster and replace NPM with Pangolin for proxy management? How best to handle provisioning certs with this sort of setup, where I'm pointing my A records and wildcards to the VPS?

*Originally created by @silverjerk on 7/15/2025* Read through the docs, but still unclear on best practice for running Pangolin both locally and remotely with tunneling. Running a 3-node Proxmox Cluster along with 2 local NAS devices. Running Pihole along with NPM for managing all local DNS and proxy to both the PVE nodes and NAS devices, along with Cloudflare for tunnels and certs when needed. Deployed a Hetzner VPS with Pangolin to manage tunneling for the local services that require external access, mostly a few of my development services (accessed rarely) across both the PVE nodes and one of the NAS devices. Using two domains for this; one is almost always used for internal services, the other is outward facing -- but there is overlap. Is the best practice to spin up a separate instance of Pangolin locally on my cluster and replace NPM with Pangolin for proxy management? How best to handle provisioning certs with this sort of setup, where I'm pointing my A records and wildcards to the VPS?

MrUnknownDE closed this issue

2026-04-05 18:33:45 +02:00

Sign in to join this conversation.

Branches Tags

main

dev

dependabot/npm_and_yarn/dev-minor-updates-b4e5d6b9c5

revert-2766-feature/systemd-install-instructions

dependabot/npm_and_yarn/prod-patch-updates-05702d39f2

dependabot/npm_and_yarn/next-16.2.1

dependabot/npm_and_yarn/recharts-3.8.1

alerting-rules

private-site-ha

dependabot/docker/docker/library/node-25-slim

ssh

delete-account

msg-delivery

org-only-idp

cicd

patch

site-targets-auto-login

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/pangolin#1235