Comment on Is they're an easy way to make my Jellyfin accessible outside of my home network

• ohshit604@sh.itjust.works ⁨1⁩ ⁨day⁩ ago

  Traefik is what it uses to proxy things. You’re comparing a full suite of tools with just one piece.

  I mean, that’s debatable. Taking a look at their docker-compose.yml there are 3 containers they recommend running, with a 4 optional container.

  • image: docker.io/fosrl/pangolin:latest # Pangolin itself
  • image: docker.io/fosrl/gerbil:latest # WireGuard server
  • image: docker.io/traefik:v3.6 # Traefik Reverse Proxy
  • hhftechnology/middleware-manager:latest # Optional middleware manager for Traefik

  To say this is a “full-suite” is a bit much when majority of the heavy lifting is done by Traefik, the middleware’s you assign to Traefik and WireGuard. Pangolin if I’m reading this correctly;

  “Pangolin combines reverse proxy and VPN capabilities into one platform.”

  Which is great! However as I mentioned previously, does not integrate well when these services are already setup to work standalone.

  original

  • FlexibleToast@lemmy.world ⁨1⁩ ⁨day⁩ ago

    Pangolin uses gerbil with newt for those wireguard tunnels. That’s a massive improvement already. It also adds a bunch more features like vpn, you can crowdsec, and more that I don’t use. To say it’s debatable if it’s a suite of tools is just wrong.

    original

    • ohshit604@sh.itjust.works ⁨1⁩ ⁨day⁩ ago

      To say it’s debatable if it’s a suite of tools is just wrong.

      How is it wrong to say it is debatable when Traefik and WireGuard have quite literally done majority of the development. Pangolin is just a man in the middle.

      Pangolin uses gerbil with newt for those wireguard tunnels. That’s a massive improvement already. It also adds a bunch more features like vpn.

      According to the Newt ReadMe -

      Newt is a fully user space WireGuard tunnel client and TCP/UDP proxy, designed to securely expose private resources controlled by Pangolin. By using Newt, you don’t need to manage complex WireGuard tunnels and NATing.

      Seems to me that WireGuard is their primary dependency, without WireGuard what use is it?

      you can crowdsec

      According to Pangolin docs they rely on the Crowdsec middleware offered by Traefik.

      By default, Crowdsec is installed with a basic configuration, which includes the Crowdsec Bouncer Traefik plugin

      original

      • FlexibleToast@lemmy.world ⁨14⁩ ⁨hours⁩ ago

        Do you not understand what a suite of tools is? It’s a curated collection of tools that have been chosen to work together. You’re describing the reasons why Pangolin is in fact a full suite. You’re right, Pangolin is the bit that orchestrates them and brings them together with an easier way to manage them. That’s what a suite of tools does.

        original