this post was submitted on 05 Jul 2026
113 points (95.2% liked)

Selfhosted

60451 readers
943 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS
 

I have docker installed, but only have a vague idea of how it works.

Back in the day, I would just port forward, but even then, I would need a static IP somehow.

I have heard a reverse proxy is an option, but that is an entirely new topic to me.

Surely there is an easy way to access Jellyfin outside of my home network that I'm just missing.

you are viewing a single comment's thread
view the rest of the comments
[–] FlexibleToast@lemmy.world 4 points 16 hours ago (1 children)

Free vps in oracle cloud with Pangolin. Never have to worry about explaining VPNs.

[–] ohshit604@sh.itjust.works 2 points 15 hours ago (1 children)

Free vps in oracle cloud with Pangolin

If I’m not mistaken I tried setting up pangolin to work along side my already running Traefik setup and it was just an absolute nightmare.

I just don’t have the time nor energy to reinvent my already running configuration.

[–] FlexibleToast@lemmy.world 2 points 14 hours ago (1 children)

I've set it up next to my NPM and it's more complicated, but so much more capable. Traefik is what it uses to proxy things. You're comparing a full suite of tools with just one piece.

[–] ohshit604@sh.itjust.works 2 points 13 hours ago* (last edited 13 hours ago) (1 children)

Traefik is what it uses to proxy things. You're comparing a full suite of tools with just one piece.

I mean, that’s debatable. Taking a look at their docker-compose.yml there are 3 containers they recommend running, with a 4 optional container.

  • image: docker.io/fosrl/pangolin:latest # Pangolin itself
  • image: docker.io/fosrl/gerbil:latest # WireGuard server
  • image: docker.io/traefik:v3.6 # Traefik Reverse Proxy
  • image: hhftechnology/middleware-manager:latest # Optional middleware manager for Traefik

To say this is a “full-suite” is a bit much when majority of the heavy lifting is done by Traefik, the middleware’s you assign to Traefik and WireGuard. Pangolin if I’m reading this correctly;

“Pangolin combines reverse proxy and VPN capabilities into one platform.”

Which is great! However as I mentioned previously, does not integrate well when these services are already setup to work standalone.

I suspect the same reaction from folks when they hear “download pangolin from the App Store, and use xyz credentials to connect.” And “download WireGuard from the App Store, and use xyz file to connect.”

[–] FlexibleToast@lemmy.world 1 points 5 hours ago (1 children)

Pangolin uses gerbil with newt for those wireguard tunnels. That's a massive improvement already. It also adds a bunch more features like vpn, you can crowdsec, and more that I don't use. To say it's debatable if it's a suite of tools is just wrong.

[–] ohshit604@sh.itjust.works 1 points 1 hour ago

To say it's debatable if it's a suite of tools is just wrong.

How is it wrong to say it is debatable when Traefik and WireGuard have quite literally done majority of the development. Pangolin is just a man in the middle.

Pangolin uses gerbil with newt for those wireguard tunnels. That's a massive improvement already. It also adds a bunch more features like vpn.

According to the Newt ReadMe -

Newt is a fully user space WireGuard tunnel client and TCP/UDP proxy, designed to securely expose private resources controlled by Pangolin. By using Newt, you don't need to manage complex WireGuard tunnels and NATing.

Seems to me that WireGuard is their primary dependency, without WireGuard what use is it?

you can crowdsec

According to Pangolin docs they rely on the Crowdsec middleware offered by Traefik.

By default, Crowdsec is installed with a basic configuration, which includes the Crowdsec Bouncer Traefik plugin