Comment on Is they're an easy way to make my Jellyfin accessible outside of my home network

ohshit604@sh.itjust.works ⁨1⁩ ⁨day⁩ ago

• FlexibleToast@lemmy.world ⁨1⁩ ⁨day⁩ ago

  I’ve set it up next to my NPM and it’s more complicated, but so much more capable. Traefik is what it uses to proxy things. You’re comparing a full suite of tools with just one piece.

  original

  • ohshit604@sh.itjust.works ⁨1⁩ ⁨day⁩ ago

    Traefik is what it uses to proxy things. You’re comparing a full suite of tools with just one piece.

    I mean, that’s debatable. Taking a look at their docker-compose.yml there are 3 containers they recommend running, with a 4 optional container.

    • image: docker.io/fosrl/pangolin:latest # Pangolin itself
    • image: docker.io/fosrl/gerbil:latest # WireGuard server
    • image: docker.io/traefik:v3.6 # Traefik Reverse Proxy
    • hhftechnology/middleware-manager:latest # Optional middleware manager for Traefik

    To say this is a “full-suite” is a bit much when majority of the heavy lifting is done by Traefik, the middleware’s you assign to Traefik and WireGuard. Pangolin if I’m reading this correctly;

    “Pangolin combines reverse proxy and VPN capabilities into one platform.”

    Which is great! However as I mentioned previously, does not integrate well when these services are already setup to work standalone.

    original

    • FlexibleToast@lemmy.world ⁨1⁩ ⁨day⁩ ago

      Pangolin uses gerbil with newt for those wireguard tunnels. That’s a massive improvement already. It also adds a bunch more features like vpn, you can crowdsec, and more that I don’t use. To say it’s debatable if it’s a suite of tools is just wrong.

      original

      • ohshit604@sh.itjust.works ⁨1⁩ ⁨day⁩ ago

        To say it’s debatable if it’s a suite of tools is just wrong.

        How is it wrong to say it is debatable when Traefik and WireGuard have quite literally done majority of the development. Pangolin is just a man in the middle.

        Pangolin uses gerbil with newt for those wireguard tunnels. That’s a massive improvement already. It also adds a bunch more features like vpn.

        According to the Newt ReadMe -

        Newt is a fully user space WireGuard tunnel client and TCP/UDP proxy, designed to securely expose private resources controlled by Pangolin. By using Newt, you don’t need to manage complex WireGuard tunnels and NATing.

        Seems to me that WireGuard is their primary dependency, without WireGuard what use is it?

        you can crowdsec

        According to Pangolin docs they rely on the Crowdsec middleware offered by Traefik.

        By default, Crowdsec is installed with a basic configuration, which includes the Crowdsec Bouncer Traefik plugin

        original

        • -> View More Comments