I recently installed Pangolin in Hetzner and spun up a statefulset in my k3s cluster for the Newt container. It works beautifully. With it you can proxy Pangolin to the cluster address of your service very easily.

For example: sonarr.media.svc.cluster.local:8989 Format being: deploymentName.namespace.svc.cluster.local

Internally I still use Traefik for my services and just left all the CNAMEs in PiHole pointed to Traefik but if you are external your DNS would look at what’s public on my domain and route through Pangolin.