Feature Request: "Master gateway VM" including Netbird or Headscale self-hosted capabilities alongside Pango #1680

New Issue

MrUnknownDE · 2026-04-05T19:39:13+02:00

MrUnknownDE commented

2026-04-05 19:39:13 +02:00

Originally created by @TheLinuxGuy on 3/24/2025

This FR is asking for an "All-in-one" self-hosting solution docker-compose stack that could be installed on a single VM instance. The proposal is:

Extend the installation script with an additional module for nerdbird self-hosted.

This would enable users to acquire a single VM from Racknerd or another provider and with a single stack installation on that unique public IP VM host both a reverse proxy (pangolin stack) + zero-trust VPN for device-to-device communications. This would make it "a killer all-in-one solution"™️

The current version of pangolin depends on the following network ports: 80, 443, 51820, 6060 (crowdsec) - running netbird docker-compose alongside the pangolin stack will require some changes as there are conflicts.

Netbird self-hosted requires: TCP ports 80, 443, 33073, 10000 and 33080; and UDP ports: 3478, 49152-65535.

There is a conflict with ports 80 and 443 because both netbird and pangolin stack require both to work. This FR is raised in the hopes of a recommended well-lit path, such as a Netbird module in pangolin is added to the install.

*Originally created by @TheLinuxGuy on 3/24/2025* This FR is asking for an "All-in-one" self-hosting solution docker-compose stack that could be installed on a single VM instance. The proposal is: - Extend the installation script with an additional module for [nerdbird self-hosted](https://docs.netbird.io/selfhosted/selfhosted-quickstart). This would enable users to acquire a single VM from Racknerd or another provider and with a single stack installation on that unique public IP VM host both a reverse proxy (pangolin stack) + zero-trust VPN for device-to-device communications. This would make it "a killer all-in-one solution"™️ The current version of pangolin depends on the following network ports: 80, 443, 51820, 6060 (crowdsec) - running netbird docker-compose alongside the pangolin stack will require some changes as there are conflicts. Netbird self-hosted requires: TCP ports 80, 443, 33073, 10000 and 33080; and UDP ports: 3478, 49152-65535. There is a conflict with ports 80 and 443 because both netbird and pangolin stack require both to work. This FR is raised in the hopes of a recommended well-lit path, such as a Netbird module in pangolin is added to the install.

MrUnknownDE closed this issue

2026-04-05 19:39:13 +02:00

Sign in to join this conversation.

Branches Tags

main

dev

dependabot/npm_and_yarn/dev-minor-updates-b4e5d6b9c5

revert-2766-feature/systemd-install-instructions

dependabot/npm_and_yarn/prod-patch-updates-05702d39f2

dependabot/npm_and_yarn/next-16.2.1

dependabot/npm_and_yarn/recharts-3.8.1

alerting-rules

private-site-ha

dependabot/docker/docker/library/node-25-slim

ssh

delete-account

msg-delivery

org-only-idp

cicd

patch

site-targets-auto-login

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/pangolin#1680