Feature Request: Improved Admin Panel Security + Shareable Link IP Whitelisting #1592

New Issue

MrUnknownDE · 2026-04-05T19:36:23+02:00

MrUnknownDE commented

2026-04-05 19:36:23 +02:00

Originally created by @shawnlocal on 4/22/2025

Hi! First off, thank you for this amazing project — Pangolin is clean, fast, and very promising.
I’d like to suggest a couple of features that could really improve security and usability:

1. Admin Panel: Better Security Options
Currently, the admin panel is only protected by a password, which might not be sufficient in many deployments.

Suggestions:

2FA Support: Optional TOTP-based two-factor authentication (e.g., Google Authenticator) for the admin panel.

Dedicated IP Binding for Admin Panel:
Allow binding the admin panel to a specific IP/interface on the VPS. This would enable setups like:
Proxying the admin panel through Cloudflare, using the main/public IP

Serving local/private services via another IP (unproxied), to better isolate the admin interface from the backend services.

2. Shareable Links: IP Whitelisting with Expiry
It would be great if we could generate shareable links with tighter control. For example:

Whitelist specific IPs or ranges that are allowed to access the resources.
Set expiration time and date for automatic access revocation

Thanks for the great work

*Originally created by @shawnlocal on 4/22/2025* Hi! First off, thank you for this amazing project — Pangolin is clean, fast, and very promising. I’d like to suggest a couple of features that could really improve security and usability: **_1. Admin Panel: Better Security Options_** Currently, the admin panel is only protected by a password, which might not be sufficient in many deployments. Suggestions: **2FA Support:** Optional TOTP-based two-factor authentication (e.g., Google Authenticator) for the admin panel. **Dedicated IP Binding for Admin Panel:** Allow binding the admin panel to a specific IP/interface on the VPS. This would enable setups like: Proxying the admin panel through Cloudflare, using the main/public IP Serving local/private services via another IP (unproxied), to better isolate the admin interface from the backend services. **_2. Shareable Links: IP Whitelisting with Expiry_** It would be great if we could generate shareable links with tighter control. For example: Whitelist specific IPs or ranges that are allowed to access the resources. Set expiration time and date for automatic access revocation Thanks for the great work

MrUnknownDE closed this issue

2026-04-05 19:36:23 +02:00

Sign in to join this conversation.

Branches Tags

main

dev

dependabot/npm_and_yarn/dev-minor-updates-b4e5d6b9c5

revert-2766-feature/systemd-install-instructions

dependabot/npm_and_yarn/prod-patch-updates-05702d39f2

dependabot/npm_and_yarn/next-16.2.1

dependabot/npm_and_yarn/recharts-3.8.1

alerting-rules

private-site-ha

dependabot/docker/docker/library/node-25-slim

ssh

delete-account

msg-delivery

org-only-idp

cicd

patch

site-targets-auto-login

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/pangolin#1592