Tunneled Mesh Reverse Proxy Server with Identity and Access Control and Dashboard UI https://fossorial.io
Find a file
MoweME b0566d3c6f fix(i18n): correct German site terminology
Updates the German translation to use "Standort" (site) instead of "Seite" (page) for consistency with the site context.
2026-01-29 10:01:30 -08:00
.github Properly insert PANGOLIN_SETUP_TOKEN into db 2026-01-28 15:03:31 -08:00
.vscode clean up paid features check 2026-01-22 15:18:27 -08:00
bruno Creating olm working 2025-11-03 16:54:06 -08:00
cli add delete client/device cli command 2026-01-21 12:47:04 -08:00
config Merge branch 'main' into dev 2026-01-21 14:39:15 -08:00
install Merge branch 'main' into dev 2026-01-21 14:39:15 -08:00
messages fix(i18n): correct German site terminology 2026-01-29 10:01:30 -08:00
public update screenshots and readme 2025-12-10 21:13:09 -05:00
server Properly insert PANGOLIN_SETUP_TOKEN into db 2026-01-28 15:03:31 -08:00
src fix input border 2026-01-22 21:24:28 -08:00
test Add clean up our few tests and add tests for #228 2025-03-08 11:43:22 -05:00
.dockerignore Handle tsconfig 2025-10-14 16:34:11 -07:00
.editorconfig add .editorconfig and fix db imports in scripts 2024-09-28 17:42:07 -04:00
.eslintrc.json Format all files 2025-12-09 10:56:14 -05:00
.gitignore 🙈 do not include claude.md in gitignore 2026-01-06 01:51:54 +01:00
.nvmrc Update lock, downgrade to node 24 2025-12-06 15:12:58 -05:00
.prettierignore 🔨Add format script and install prettier 2025-12-08 19:57:08 +01:00
.prettierrc env context and refactor api support different ports 2024-12-12 22:46:58 -05:00
components.json Format all files 2025-12-09 10:56:14 -05:00
CONTRIBUTING.md change digpangolin.com to pangolin.net 2025-10-18 11:51:09 -07:00
crowdin.yml Add first i18n stuff 2025-05-04 15:11:42 +00:00
docker-compose.drizzle.yml 🔨 add drizzle in docker-compose DEV for viewing the postgres db in local development 2025-10-30 00:10:49 +01:00
docker-compose.example.yml Update Traefik image version to v3.6 2025-11-18 12:44:10 +01:00
docker-compose.pgr.yml 🔨 add drizzle in docker-compose DEV for viewing the postgres db in local development 2025-10-30 00:10:49 +01:00
docker-compose.yml Update build process 2025-09-05 11:23:43 -07:00
Dockerfile Dont terminate on archive 2026-01-16 17:06:16 -08:00
Dockerfile.dev modified: .github/workflows/cicd.yml 2025-07-26 14:17:55 +00:00
drizzle.pg.config.ts Format all files 2025-12-09 10:56:14 -05:00
drizzle.sqlite.config.ts Format all files 2025-12-09 10:56:14 -05:00
esbuild.mjs Format all files 2025-12-09 10:56:14 -05:00
eslint.config.js Format all files 2025-12-09 10:56:14 -05:00
LICENSE Chungus 2025-10-04 18:36:44 -07:00
Makefile Merge branch 'main' into dev 2026-01-11 14:19:59 -08:00
next.config.ts add org auth slug with device auth support 2025-12-19 17:04:37 -05:00
package-lock.json Bump the prod-minor-updates group across 1 directory with 12 updates 2026-01-19 17:50:46 -08:00
package.json Merge branch 'main' into dev 2026-01-21 14:39:15 -08:00
postcss.config.mjs Format all files 2025-12-09 10:56:14 -05:00
README.md add ios and android to readme 2026-01-22 15:18:27 -08:00
SECURITY.md Update domain 2025-10-19 11:59:10 -07:00
tsconfig.enterprise.json Handle tsconfig 2025-10-14 16:34:11 -07:00
tsconfig.oss.json Handle tsconfig 2025-10-14 16:34:11 -07:00
tsconfig.saas.json Handle tsconfig 2025-10-14 16:34:11 -07:00

Discord Slack Docker Stars YouTube

We're Hiring!

Start testing Pangolin at app.pangolin.net

Pangolin is an open-source, identity-based remote access platform built on WireGuard that enables secure, seamless connectivity to private and public resources. Pangolin combines reverse proxy and VPN capabilities into one platform, providing browser-based access to web applications and client-based access to any private resources, all with zero-trust security and granular access control.

Installation

Deployment Options

Description
Self-Host: Community Edition Free, open source, and licensed under AGPL-3.
Self-Host: Enterprise Edition Licensed under Fossorial Commercial License. Free for personal and hobbyist use, and for businesses earning under $100K USD annually.
Pangolin Cloud Fully managed service with instant setup and pay-as-you-go pricing — no infrastructure required. Or, self-host your own remote node and connect to our control plane.

Key Features

Connect remote networks with sites

Pangolin's lightweight site connectors create secure tunnels from remote networks without requiring public IP addresses or open ports. Sites make any network anywhere available for authorized access.
Browser-based reverse proxy access

Expose web applications through identity and context-aware tunneled reverse proxies. Pangolin handles routing, load balancing, health checking, and automatic SSL certificates without exposing your network directly to the internet. Users access applications through any web browser with authentication and granular access control.
Client-based private resource access

Access private resources like SSH servers, databases, RDP, and entire network ranges through Pangolin clients. Intelligent NAT traversal enables connections even through restrictive firewalls, while DNS aliases provide friendly names and fast connections to resources across all your sites.
Zero-trust granular access

Grant users access to specific resources, not entire networks. Unlike traditional VPNs that expose full network access, Pangolin's zero-trust model ensures users can only reach the applications and services you explicitly define, reducing security risk and attack surface.

Download Clients

Download the Pangolin client for your platform:

Get Started

Check out the docs

We encourage everyone to read the full documentation first, which is available at docs.pangolin.net. This README provides only a very brief subset of the docs to illustrate some basic ideas.

Sign up and try now

For Pangolin's managed service, you will first need to create an account at app.pangolin.net. We have a generous free tier to get started.

Licensing

Pangolin is dual licensed under the AGPL-3 and the Fossorial Commercial License. For inquiries about commercial licensing, please contact us at contact@pangolin.net.

Contributions

Please see CONTRIBUTING in the repository for guidelines and best practices.


WireGuard® is a registered trademark of Jason A. Donenfeld.