[Feature Request] Configure allow and deny for subfolders #1375

New Issue

MrUnknownDE · 2026-04-05T19:16:30+02:00

MrUnknownDE commented

2026-04-05 19:16:30 +02:00

Originally created by @Joly0 on 6/9/2025

Hey, from what i can see, Pangolin supports two rule types, "Always Allow" and "Always Deny".
This is in general helpful, but if i want to expose just a specific endpoint with a specific subfolder to the public world and deny everything else i would have no option to do so.
So for example i want to run homeassistant at my home, but doesnt want to expose the full homeassistant instance to the public world, but still want to expose the webhook endpoint publicly BUT with authentication through pangolin, i have no chance for that.
As far as i can see, i only could deny everything, and allow the webhook subfolder, but that would leave the webhook subfolder without authentication from pangolin.

Would be great, if this was possible to do. So i could also configure a deny all in general for an endpoint/service and then have various subfolders (paths) with authentication and some without. This would help a lot.

So tl;dr, would be great to have an "Always Allow" but with authentication.

*Originally created by @Joly0 on 6/9/2025* Hey, from what i can see, Pangolin supports two rule types, "Always Allow" and "Always Deny". This is in general helpful, but if i want to expose just a specific endpoint with a specific subfolder to the public world and deny everything else i would have no option to do so. So for example i want to run homeassistant at my home, but doesnt want to expose the full homeassistant instance to the public world, but still want to expose the webhook endpoint publicly BUT with authentication through pangolin, i have no chance for that. As far as i can see, i only could deny everything, and allow the webhook subfolder, but that would leave the webhook subfolder without authentication from pangolin. Would be great, if this was possible to do. So i could also configure a deny all in general for an endpoint/service and then have various subfolders (paths) with authentication and some without. This would help a lot. So tl;dr, would be great to have an "Always Allow" but with authentication.

MrUnknownDE closed this issue

2026-04-05 19:16:30 +02:00

MrUnknownDE added the enhancement enhancement enhancement enhancement enhancement enhancement enhancement enhancement enhancement enhancement enhancement enhancement enhancement enhancement enhancement enhancement enhancement enhancement enhancement enhancement enhancement enhancement enhancement enhancement enhancement enhancement labels 2026-04-05 19:16:32 +02:00

Sign in to join this conversation.

Branches Tags

main

dev

dependabot/npm_and_yarn/dev-minor-updates-b4e5d6b9c5

revert-2766-feature/systemd-install-instructions

dependabot/npm_and_yarn/prod-patch-updates-05702d39f2

dependabot/npm_and_yarn/next-16.2.1

dependabot/npm_and_yarn/recharts-3.8.1

alerting-rules

private-site-ha

dependabot/docker/docker/library/node-25-slim

ssh

delete-account

msg-delivery

org-only-idp

cicd

patch

site-targets-auto-login

No Label enhancement enhancement enhancement enhancement enhancement enhancement enhancement enhancement enhancement enhancement enhancement enhancement enhancement enhancement enhancement enhancement enhancement enhancement enhancement enhancement enhancement enhancement enhancement enhancement enhancement enhancement

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/pangolin#1375