# Pangolin Docs

> Modern networking and security platform providing secure access and connectivity to apps, infrastructure, and AI workloads. Connect and protect your users.

The full documentation as a single file is available at https://docs.pangolin.net/llms-full.txt. Append `.md` to any page URL to get its Markdown source.
An MCP server for searching and reading this documentation is available at https://docs.pangolin.net/mcp.


## About

- [Introduction to Pangolin](https://docs.pangolin.net/index.md): Connect and protect your users with an open-source networking and security platform
- [How Pangolin Works](https://docs.pangolin.net/about/how-pangolin-works.md): Learn about the fundamentals of Pangolin and how they work together.
- [Pangolin vs. Proxy vs. VPN](https://docs.pangolin.net/about/pangolin-vs-reverse-proxy-vs-vpn.md): What are the similarities and differences between Pangolin and traditional reverse proxies and VPNs?
- [Pangolin vs. Bifrost vs. LiteLLM](https://docs.pangolin.net/about/pangolin-vs-bifrost-vs-litellm.md): What are the similarities and differences between Pangolin's AI Gateway and traditional LLM gateways like Bifrost and LiteLLM?
- [Cloud vs. Self-Hosted](https://docs.pangolin.net/about/pangolin-cloud-vs-self-hosted.md): Choose managed Pangolin Cloud or run the same software on your own infrastructure

## Manage Pangolin

- Sites
  - [Understanding Sites](https://docs.pangolin.net/manage/sites/understanding-sites.md): Create a site to connect to a remote network and expose resources
  - [Install Sites](https://docs.pangolin.net/manage/sites/install-site.md): Install the site connector as a binary or Docker container
  - [Configure Sites](https://docs.pangolin.net/manage/sites/configure-site.md): Configure Pangolin site connector setting
  - [Update Sites](https://docs.pangolin.net/manage/sites/update-site.md): Update your site to the latest version
  - [Automatic Site Updates](https://docs.pangolin.net/manage/sites/auto-update.md): Let sites check for and install updates on their own
  - [Site Credentials](https://docs.pangolin.net/manage/sites/credentials.md): Understanding how site credentials work and how they can be rotated & regenerated
  - [Site Provisioning Keys](https://docs.pangolin.net/manage/sites/site-provisioning.md): Use long-lived provisioning tokens to bootstrap Pangolin sites at scale without pre-creating ID-secret pairs for every host
  - Kubernetes
    - [Helm](https://docs.pangolin.net/manage/sites/kubernetes/helm.md): Quick-start guide for installing Site (newt) on Kubernetes using Helm.
    - [Kustomize](https://docs.pangolin.net/manage/sites/kubernetes/kustomize.md): Deploy Newt on Kubernetes using Helm-rendered manifests and Kustomize overlays.
    - [Configuration](https://docs.pangolin.net/manage/sites/kubernetes/configuration.md): Configuration reference for Newt Kubernetes deployments.
    - [Troubleshooting](https://docs.pangolin.net/manage/sites/kubernetes/troubleshooting.md): Diagnose and resolve common Newt Kubernetes deployment issues.
- Resources
  - [Understanding Resources](https://docs.pangolin.net/manage/resources/understanding-resources.md): Resources are any network address you want to make available to users
  - [Resource Launcher](https://docs.pangolin.net/manage/resource-launcher.md): Find and open the resources you can access from one organization home page
  - Public Resources
    - [HTTP / HTTPS](https://docs.pangolin.net/manage/resources/public/http-https.md): Publish websites, APIs, and dashboards as authenticated public reverse proxies
    - [AI Gateway](https://docs.pangolin.net/manage/resources/public/ai-gateway.md): Publish an AI API on a public FQDN and authenticate coding agents with virtual API keys
    - [SSH](https://docs.pangolin.net/manage/resources/public/ssh.md): Access a remote shell in the browser with password, key, or Pangolin identity authentication
    - [RDP](https://docs.pangolin.net/manage/resources/public/rdp.md): Control a Windows computer remotely through a full RDP client rendered in the browser
    - [VNC](https://docs.pangolin.net/manage/resources/public/vnc.md): View and control a remote display through a VNC client rendered in the browser
    - [TCP / UDP](https://docs.pangolin.net/manage/resources/public/raw-resources.md): Expose raw TCP and UDP services on a Pangolin server port without authentication
    - [Authentication](https://docs.pangolin.net/manage/resources/public/authentication.md): Create identity and context aware rules to allow access
    - [Resource Policies](https://docs.pangolin.net/manage/resources/public/resource-policies.md): Share authentication and access rule settings across multiple public resources
    - [Targets](https://docs.pangolin.net/manage/resources/public/targets.md): Configure destination endpoints for resource routing and load balancing
    - [Wildcard Resources](https://docs.pangolin.net/manage/resources/public/wildcard-resources.md): Pangolin Cloud and Enterprise: route every hostname at a subdomain level through one public resource
    - [Health Checks and Failover](https://docs.pangolin.net/manage/resources/public/healthchecks-failover.md): Monitor public resource targets and automatically remove unhealthy targets from routing
    - [Maintenance Page](https://docs.pangolin.net/manage/resources/public/maintenance.md): Show a maintenance page to users when a resources is down for maintenance or targets are unhealthy
  - Private Resources
    - [Host](https://docs.pangolin.net/manage/resources/private/host.md): Route client traffic to a single IP address or FQDN on the remote network
    - [CIDR](https://docs.pangolin.net/manage/resources/private/cidr.md): Route client traffic to an entire IP range on the remote network
    - [Exit Node (route all traffic)](https://docs.pangolin.net/manage/resources/private/exit-node.md): Create private exit node resources to act as full
    - [HTTP / HTTPS](https://docs.pangolin.net/manage/resources/private/private-http.md): Private reverse proxy with optional TLS termination at the site edge over the Pangolin tunnel
    - [AI Gateway](https://docs.pangolin.net/manage/resources/private/ai-gateway.md): Reach an AI API over the Pangolin tunnel using the connected client's identity
    - [SSH](https://docs.pangolin.net/manage/resources/private/ssh.md): Connect to remote hosts over the Pangolin tunnel using the Pangolin CLI
    - [Authentication](https://docs.pangolin.net/manage/resources/private/authentication.md): Only allow access to resources to specific users, roles, and machines
    - [Destinations](https://docs.pangolin.net/manage/resources/private/destinations.md): What a private resource destination is and how to define it (FQDN, IP, or CIDR)
    - [Ports and ICMP](https://docs.pangolin.net/manage/resources/private/port-restrictions.md): Configure TCP and UDP port modes and ICMP (ping) for private resources
    - [Aliases](https://docs.pangolin.net/manage/resources/private/alias.md): Friendly names for resources, overlaps, loopback on the site host, and DNS behavior
    - [Multi-site Routing and High Availability](https://docs.pangolin.net/manage/resources/private/multi-site-routing.md): Use multiple sites on a private resource for resilient routing and failover
- Clients
  - [Understanding Clients](https://docs.pangolin.net/manage/clients/understanding-clients.md): Create a client to connect to your Pangolin network from a remote computer
  - [NAT Traversal](https://docs.pangolin.net/manage/clients/nat-traversal.md): How clients connect on the same network, hole punch through NAT, or relay through Pangolin
  - Platforms
    - [Platforms](https://docs.pangolin.net/manage/clients/platforms.md): Install, configure, and update Pangolin clients, and shared DNS and routing preferences
    - [Windows](https://docs.pangolin.net/manage/clients/platforms/windows.md): Install, configure, and update the Pangolin client for Windows
    - [Mac](https://docs.pangolin.net/manage/clients/platforms/mac.md): Install, configure, and update the Pangolin client for Mac
    - [iOS/iPadOS](https://docs.pangolin.net/manage/clients/platforms/ios.md): Install, configure, and update the Pangolin app for iOS and iPadOS
    - [Android](https://docs.pangolin.net/manage/clients/platforms/android.md): Install, configure, and update the Pangolin app for Android
    - [Pangolin CLI](https://docs.pangolin.net/manage/clients/platforms/cli.md): Install, configure, and update Pangolin CLI on Linux, macOS, and Windows
    - [Olm (Deprecated)](https://docs.pangolin.net/manage/clients/platforms/olm.md): Deprecated command-line client for machine connections
  - [Client Logs](https://docs.pangolin.net/manage/clients/client-logs.md): View Pangolin client logs on Windows, Mac, Linux, Android, and iOS
  - [Subnet Router](https://docs.pangolin.net/manage/clients/subnet-router.md)
  - [Machine Client Credentials](https://docs.pangolin.net/manage/clients/credentials.md): How machine clients authenticate with an ID and secret, and how to rotate or regenerate those credentials
  - [Client Fingerprinting and Posture](https://docs.pangolin.net/manage/clients/fingerprinting.md): A summary of device information that is collected during the connection
  - [Archiving & Blocking](https://docs.pangolin.net/manage/clients/archiving-blocking.md): Manage clients and block unwanted connections
  - [Firewall Quirks](https://docs.pangolin.net/manage/clients/firewalls.md): Improve Pangolin direct-connect success behind restrictive firewalls
  - Kubernetes
    - [Deployment](https://docs.pangolin.net/manage/clients/kubernetes/deployment.md): Basic guide for running a Pangolin client in Kubernetes as a sidecar.
- AI Gateway
  - [AI Gateway Overview](https://docs.pangolin.net/manage/ai/overview.md): Route coding agents and AI clients through Pangolin with centralized providers and access control
  - [Multiple Gateway Resources](https://docs.pangolin.net/manage/ai/multiple-gateway-resources.md): Give different users and roles their own providers, model lists, and budgets with more than one AI Gateway resource
  - [Virtual API Keys](https://docs.pangolin.net/manage/ai/virtual-api-keys.md): Authenticate AI clients to public AI Gateway resources without sharing upstream provider keys
  - Providers
    - [AI Providers](https://docs.pangolin.net/manage/ai/providers/overview.md): Connect upstream model APIs once per organization, then attach them to AI Gateway resources
    - [Provider Configuration](https://docs.pangolin.net/manage/ai/providers/configuration.md): Capabilities, auth, routing, and model lists for AI Gateway providers
    - [Model Routing](https://docs.pangolin.net/manage/ai/providers/model-routing.md): Allow and block lists, inherit vs select, and how the gateway picks a provider
    - [OpenAI](https://docs.pangolin.net/manage/ai/providers/openai.md): Connect OpenAI as an AI Gateway provider
    - [Anthropic](https://docs.pangolin.net/manage/ai/providers/anthropic.md): Connect Anthropic as an AI Gateway provider
    - [Google Gemini](https://docs.pangolin.net/manage/ai/providers/google-gemini.md): Connect Google Gemini as an AI Gateway provider
    - [Vertex AI](https://docs.pangolin.net/manage/ai/providers/vertex-ai.md): Connect Google Vertex AI as an AI Gateway provider
    - [Amazon Bedrock](https://docs.pangolin.net/manage/ai/providers/bedrock.md): Connect Amazon Bedrock as an AI Gateway provider
    - [Microsoft Foundry](https://docs.pangolin.net/manage/ai/providers/microsoft-foundry.md): Connect Microsoft Foundry as an AI Gateway provider
    - [OpenRouter](https://docs.pangolin.net/manage/ai/providers/open-router.md): Connect OpenRouter as an AI Gateway provider
    - [Vercel AI Gateway](https://docs.pangolin.net/manage/ai/providers/vercel-ai-gateway.md): Connect Vercel AI Gateway as an AI Gateway provider
    - Custom
      - [Custom](https://docs.pangolin.net/manage/ai/providers/custom.md): Connect any upstream endpoint and assign whichever API capabilities it speaks
      - [Ollama](https://docs.pangolin.net/manage/ai/providers/custom/ollama.md): Point a Custom provider at Ollama on a Pangolin site
      - [vLLM](https://docs.pangolin.net/manage/ai/providers/custom/vllm.md): Point a Custom provider at a vLLM OpenAI server on a Pangolin site
      - [Bifrost](https://docs.pangolin.net/manage/ai/providers/custom/bifrost.md): Point a Custom provider at Bifrost for downstream model routing and identity-aware access control
      - [Cloud APIs Through a Site](https://docs.pangolin.net/manage/ai/providers/custom/cloud-apis-through-a-site.md): Send OpenAI or Anthropic traffic out through a Pangolin site so the vendor sees a fixed egress IP
  - Configure AI Clients and Agents
    - [Claude Code](https://docs.pangolin.net/manage/ai/configure-ai-clients/claude.md): Connect Claude Code to a Pangolin AI Gateway resource
    - [Codex](https://docs.pangolin.net/manage/ai/configure-ai-clients/codex.md): Connect Codex to a Pangolin AI Gateway resource
    - [OpenCode](https://docs.pangolin.net/manage/ai/configure-ai-clients/opencode.md): Connect OpenCode to a Pangolin AI Gateway resource
    - [Gemini CLI](https://docs.pangolin.net/manage/ai/configure-ai-clients/gemini.md): Connect Gemini CLI to a Pangolin AI Gateway resource
    - [Open WebUI](https://docs.pangolin.net/manage/ai/configure-ai-clients/open-webui.md): Connect Open WebUI to a Pangolin AI Gateway resource
    - [Claude Desktop](https://docs.pangolin.net/manage/ai/configure-ai-clients/claude-desktop.md): Connect Claude Desktop's third-party inference to a Pangolin AI Gateway resource
    - [OpenClaw](https://docs.pangolin.net/manage/ai/configure-ai-clients/openclaw.md): Connect OpenClaw to a Pangolin AI Gateway resource
  - [Budgets](https://docs.pangolin.net/manage/ai/budgets.md): Cap estimated USD spend or token usage on providers, models, resources, roles, and keys
  - [Model Catalog](https://docs.pangolin.net/manage/ai/model-catalog.md): Known models, pricing for budgets, and how to load a custom catalog
  - [AI Session Logs](https://docs.pangolin.net/manage/ai/session-logs.md): Prompt and response transcripts for AI Gateway requests in an organization
  - [AI Usage Analytics](https://docs.pangolin.net/manage/ai/usage-analytics.md): Cost, token usage, and request volume across providers, resources, roles, users, and keys
- [Domains](https://docs.pangolin.net/manage/domains.md): Learn how to configure domains for your Pangolin resources and understand the different domain types available
- Organizations
  - [Manage Organizations](https://docs.pangolin.net/manage/organizations/manage-organizations.md): View every organization on a self-hosted instance from the server admin panel
  - [Organization ID](https://docs.pangolin.net/manage/organizations/org-id.md): Understand organization IDs and how to locate yours in the dashboard
  - [Labels](https://docs.pangolin.net/manage/labels.md): Attach reusable string labels to sites, clients, and resources for metadata, search, and filtering
- Access Control
  - [Users and Roles](https://docs.pangolin.net/manage/access-control/create-user.md): Add internal or external users to your organization and manage roles
  - [Multi-Factor Authentication](https://docs.pangolin.net/manage/access-control/mfa.md): Enable and manage two-factor authentication and enforcement for your organization
  - [Security Keys](https://docs.pangolin.net/manage/access-control/security-keys.md): Use security keys for passwordless login to your Pangolin account
  - [Session Length](https://docs.pangolin.net/manage/access-control/session-length.md): Configure maximum session length and expiration policies for your organization
  - [Password Rotation](https://docs.pangolin.net/manage/access-control/password-rotation.md): Configure password expiration and rotation requirements for your organization
  - [Change Password](https://docs.pangolin.net/manage/access-control/change-password.md): Change or reset your Pangolin account password
  - [SSH Access](https://docs.pangolin.net/manage/ssh.md): SSH configuration, setup, and examples for public and private resources
  - [Rules](https://docs.pangolin.net/manage/access-control/rules.md): Configure rules to allow or deny access to resources without authentication
  - [Geo-blocking](https://docs.pangolin.net/manage/geoblocking.md): Configure geo-blocking to restrict access based on geographic location
  - [ASN Blocking](https://docs.pangolin.net/manage/asnblocking.md): Configure ASN blocking to restrict access based on Autonomous System Numbers
  - [Shareable Links](https://docs.pangolin.net/manage/access-control/links.md): Create Links and use access tokens for browser or programmatic access.
  - [Device Approvals](https://docs.pangolin.net/manage/access-control/approvals.md): Only allow trusted devices to connect to an organization
  - [Forwarded Headers](https://docs.pangolin.net/manage/access-control/forwarded-headers.md): Learn how Pangolin forwards user identity information to your backend applications through HTTP headers
  - [Custom Login Page](https://docs.pangolin.net/manage/access-control/login-page.md): Configure a custom authentication page URL for your organization
- Identity Providers
  - [Add Identity Providers](https://docs.pangolin.net/manage/identity-providers/add-an-idp.md): Configure external identity providers for user authentication to resources and the organization
  - [Auto Provisioning](https://docs.pangolin.net/manage/identity-providers/auto-provisioning.md): Automatically create and manage user accounts from external identity providers
  - [OAuth2/OIDC](https://docs.pangolin.net/manage/identity-providers/openid-connect.md): Configure OpenID Connect identity provider for external authentication
  - [Google](https://docs.pangolin.net/manage/identity-providers/google.md): Configure Google Single Sign-On
  - [Azure Entra ID](https://docs.pangolin.net/manage/identity-providers/azure.md): Configure Azure Entra ID Single Sign-On
- Logs & Analytics
  - [HTTPS Request Logs](https://docs.pangolin.net/manage/analytics/request.md): Request logs are a record of each HTTP request to a resource
  - [Authentication Logs](https://docs.pangolin.net/manage/analytics/access.md): Authentication logs are a record of each authenticated access attempt to a resource
  - [Network Logs](https://docs.pangolin.net/manage/analytics/connection.md): Network logs are a record of TCP and UDP sessions between clients and private resources on sites
  - [Admin Action Logs](https://docs.pangolin.net/manage/analytics/action.md): Admin Action logs are a record of each event taken by users in the organization
  - [AI Session Logs](https://docs.pangolin.net/manage/ai/session-logs.md): Prompt and response transcripts for AI Gateway requests in an organization
  - [AI Usage Analytics](https://docs.pangolin.net/manage/ai/usage-analytics.md): Cost, token usage, and request volume across providers, resources, roles, users, and keys
  - Event Streaming
    - [Event Streaming](https://docs.pangolin.net/manage/analytics/streaming.md): Stream Pangolin log events to external collectors and SIEM tools
    - [HTTP webhook](https://docs.pangolin.net/manage/analytics/streaming/http.md): Forward audit logs to any HTTP endpoint with optional custom body templates
    - [Amazon S3](https://docs.pangolin.net/manage/analytics/streaming/s3.md): Archive audit logs to S3 or S3-compatible object storage
- Alerting
  - [Alert Rules](https://docs.pangolin.net/manage/alerting/alert-rules.md): Subscribe to Pangolin events on sites, resources, and health checks and deliver email, webhooks, or integrations
  - [Health Checks](https://docs.pangolin.net/manage/alerting/health-checks.md): Monitor reachability and response for public resource targets and arbitrary endpoints from your sites
- Blueprints
  - [Blueprints](https://docs.pangolin.net/manage/blueprints.md): Define Pangolin resources and site settings declaratively with YAML or container labels
  - [Community Blueprints](https://docs.pangolin.net/manage/community-blueprints-repo.md): Community-maintained library of ready-to-use Pangolin Blueprints for self-hosted applications
- Remote Nodes
  - [Remote Nodes](https://docs.pangolin.net/manage/remote-node/understanding-nodes.md): Control your own Pangolin node with cloud management
  - [Quick Install Guide](https://docs.pangolin.net/manage/remote-node/quick-install-remote.md): Deploy your own remote Pangolin node in under 10 minutes with our automated installer
  - [Configuration File](https://docs.pangolin.net/manage/remote-node/config-file.md): Configure your remote node using the config.yml file
  - [Site to Cloud Backhaul](https://docs.pangolin.net/manage/remote-node/backhaul.md): Turn a remote node into a network concentrator that routes traffic between a cloud VPC and your Pangolin sites for edge to cloud backhaul
- [Endpoints & Relays](https://docs.pangolin.net/manage/endpoints-and-pops.md): Pangolin Cloud hostnames for firewall allowlists and network whitelisting
- [Integration API](https://docs.pangolin.net/manage/integration-api.md): Learn how to use Pangolin's REST API to automate and script operations with fine-grained permissions
- [Branding](https://docs.pangolin.net/manage/branding.md): Learn how to customize the look your Pangolin dashboard and login pages with custom branding

## Self-host Pangolin

- [Quick Install Guide](https://docs.pangolin.net/self-host/quick-install.md): Deploy your own fully self-hosted instance of Pangolin Community Edition
- [Choosing a VPS](https://docs.pangolin.net/self-host/choosing-a-vps.md): Compare hosting options and find the best VPS for your Pangolin deployment
- Manual Installation
  - [Docker Compose](https://docs.pangolin.net/self-host/manual/docker-compose.md): Deploy Pangolin manually using Docker Compose without the automated installer
  - [Unraid Deployment](https://docs.pangolin.net/self-host/manual/unraid.md): Deploy Pangolin on Unraid for local reverse proxy and tunneling
  - Kubernetes
    - [Overview](https://docs.pangolin.net/self-host/manual/kubernetes/overview.md): Deploy Pangolin, Sites (Newt), and related components on Kubernetes.
    - [Choose an Installation Path](https://docs.pangolin.net/self-host/manual/kubernetes/choose-method.md): Choose the Kubernetes deployment workflow for Pangolin and Sites (Newt).
    - [Prerequisites](https://docs.pangolin.net/self-host/manual/kubernetes/prerequisites.md): Cluster, tooling, networking, and storage requirements for deploying Pangolin and Sites (Newt) on Kubernetes.
    - [Helm](https://docs.pangolin.net/self-host/manual/kubernetes/helm.md): Kubernetes installation using Helm charts for Pangolin and Newt.
    - [Kustomize](https://docs.pangolin.net/self-host/manual/kubernetes/kustomize.md): Customize Helm-rendered Kubernetes manifests with Kustomize overlays.
    - [Helmfile](https://docs.pangolin.net/self-host/manual/kubernetes/helmfile.md): Advanced Kubernetes installation using Helmfile for multi-release orchestration.
    - GitOps
      - [GitOps Overview](https://docs.pangolin.net/self-host/manual/kubernetes/gitops/overview.md): Deploy Pangolin and Sites (Newt) with GitOps workflows such as Argo CD or Flux.
      - [Argo CD](https://docs.pangolin.net/self-host/manual/kubernetes/gitops/argocd.md): Deploy Pangolin and Newt using Argo CD for Git-driven GitOps reconciliation.
      - [Flux](https://docs.pangolin.net/self-host/manual/kubernetes/gitops/flux.md): Deploy Pangolin and Newt using Flux for Git-driven GitOps reconciliation.
    - Pangolin
      - [Helm](https://docs.pangolin.net/self-host/manual/kubernetes/pangolin/helm.md): Quick-start guide for installing Pangolin on Kubernetes using Helm.
      - [Kustomize](https://docs.pangolin.net/self-host/manual/kubernetes/pangolin/kustomize.md): Deploy Pangolin on Kubernetes using Helm-rendered manifests and Kustomize overlays.
      - [Configuration](https://docs.pangolin.net/self-host/manual/kubernetes/pangolin/configuration.md): Configuration reference for Pangolin Kubernetes deployments.
      - [Troubleshooting](https://docs.pangolin.net/self-host/manual/kubernetes/pangolin/troubleshooting.md): Diagnose and resolve Pangolin Kubernetes deployment issues.
  - [Podman Quadlets (Rootless)](https://docs.pangolin.net/self-host/manual/podman-quadlets.md): Deploy Pangolin manually using Podman Quadlets (rootless) without the automated installer
- Clustering
  - [Understanding Clustering](https://docs.pangolin.net/self-host/clustering/understanding-clustering.md): Architecture and concepts behind running Pangolin as a highly available cluster
  - [Clustering Requirements](https://docs.pangolin.net/self-host/clustering/requirements.md): Hosts, networking, and DNS delegation needed before deploying a Pangolin cluster
  - [Deploy a Cluster](https://docs.pangolin.net/self-host/clustering/deploy-a-cluster.md): Step-by-step walkthrough for deploying a two-node highly available Pangolin cluster
- [DNS & Networking](https://docs.pangolin.net/self-host/dns-and-networking.md): Configure your domain, DNS records, and network settings for Pangolin deployment
- Advanced Configuration
  - [Configuration File](https://docs.pangolin.net/self-host/advanced/config-file.md): Configure Pangolin using the config.yml file with detailed settings for all components
  - [Increasing Site and Client Capacity](https://docs.pangolin.net/self-host/advanced/increasing-subnet-capacity.md): Understand the Gerbil subnet hierarchy and how to raise the number of sites and clients an exit node can serve
  - [Private Configuration File](https://docs.pangolin.net/self-host/advanced/private-config-file.md): Configure advanced Pangolin settings using the privateConfig.yml file for enterprise features
  - [Wildcard Domains](https://docs.pangolin.net/self-host/advanced/wild-card-domains.md): Configure wildcard TLS certificates with Traefik DNS-01 challenges
  - [Cloudflare Proxy](https://docs.pangolin.net/self-host/advanced/cloudflare-proxy.md)
  - [Without Tunneling](https://docs.pangolin.net/self-host/advanced/without-tunneling.md): Use Pangolin as a local reverse proxy without Gerbil tunneling
  - [Internal CLI (pangctl)](https://docs.pangolin.net/self-host/advanced/container-cli-tool.md): Command-line tool for managing your Pangolin instance
  - [Database Options](https://docs.pangolin.net/self-host/advanced/database-options.md): Configure SQLite or PostgreSQL database for Pangolin
  - [Enable Integration API](https://docs.pangolin.net/self-host/advanced/integration-api.md): Enable and configure the Integration API for external access
  - [Metrics and Observability](https://docs.pangolin.net/self-host/advanced/observability.md): Understand metrics, traces, logs, and profiling support across Pangolin components
  - [Enable Geo-location](https://docs.pangolin.net/self-host/advanced/enable-geolocation.md): Configuration requirements to enable geolocation features in Pangolin
  - [Enable ASN Lookup](https://docs.pangolin.net/self-host/advanced/enable-asn-lookup.md): Configuration requirements to enable ASN lookup features in Pangolin
  - [Traefik Access Log Rotation](https://docs.pangolin.net/self-host/advanced/traefik-log-rotation.md): How to manage and rotate Traefik access logs when CrowdSec is installed
  - [Telemetry](https://docs.pangolin.net/self-host/telemetry.md): Understanding Pangolin's anonymous usage data collection
- [How to Update](https://docs.pangolin.net/self-host/how-to-update.md): Keep your self-hosted Pangolin server up to date with the latest features and security patches
- Community Guides
  - [Overview](https://docs.pangolin.net/self-host/community-guides/overview.md)
  - [Bypass Rules](https://docs.pangolin.net/self-host/community-guides/rules.md): Community bypass rules for common self hosted apps
  - [Remove GeoBlock Plugin](https://docs.pangolin.net/self-host/community-guides/remove-geoblock-plugin.md)
  - [CrowdSec](https://docs.pangolin.net/self-host/community-guides/crowdsec.md)
  - [Metrics](https://docs.pangolin.net/self-host/community-guides/metrics.md)
  - [Home Assistant Add-on](https://docs.pangolin.net/self-host/community-guides/homeassistant.md)
  - [Middleware Manager](https://docs.pangolin.net/self-host/community-guides/middlewaremanager.md)
  - [Traefik Log Dashboard (v2 – Agent Architecture)](https://docs.pangolin.net/self-host/community-guides/traefiklogsdashboard.md)
  - [Securing Traefik Post-Install](https://docs.pangolin.net/self-host/community-guides/traefik-hardening.md): Hardening steps after Traefik v3 install—split file provider rules, TLS options, security headers, HTTPS redirects, and EC384 ACME certificates.
  - [GeoLite2 Automation](https://docs.pangolin.net/self-host/community-guides/geolite2automation.md): A simple automation to download & update your GeoLite2 databases with geoipupdate
- Enterprise Edition
  - [Enterprise Edition](https://docs.pangolin.net/self-host/enterprise-edition.md): Licensing, plans, and how to get started with self-hosted Enterprise Edition
  - [Personal Use](https://docs.pangolin.net/self-host/enterprise-edition/personal-use.md): Free Enterprise Edition licenses for personal use and small organizations
  - [Commercial Use](https://docs.pangolin.net/self-host/enterprise-edition/commercial-use.md): Paid Enterprise Edition licenses for organizations above the revenue threshold
  - [Features](https://docs.pangolin.net/self-host/enterprise-edition/features.md): Where to compare Enterprise Edition features and plan tiers
  - [License Limits](https://docs.pangolin.net/self-host/enterprise-edition/limits.md): How Enterprise Edition counts users and sites, and what happens when you go over
  - [Activate a License](https://docs.pangolin.net/self-host/enterprise-edition/activate.md): Switch to the Enterprise Edition image and activate a license key
  - [Purchase a License Key](https://docs.pangolin.net/self-host/enterprise-edition/purchase-license-key.md): How to buy an Enterprise license key for Pangolin from the dashboard
  - [Enterprise Edition FAQ](https://docs.pangolin.net/self-host/enterprise-edition/faq.md): Common questions about Enterprise Edition licensing, editions, and limits

## Development

- [System Architecture](https://docs.pangolin.net/development/system-architecture.md): A technical overview of how Pangolin's control plane, nodes, connectors, and clients fit together
- [Contribution Guide](https://docs.pangolin.net/development/contributing.md): Set up your local development environment for contributing to Pangolin
- [Feature Requests & Bug Reports](https://docs.pangolin.net/development/feature-requests-and-bug-reports.md): How to submit feature requests and report bugs for Pangolin
- [Common API Routes](https://docs.pangolin.net/manage/common-api-routes.md): API routes and patterns for the most common actions and flows

## Optional

- [Join Us!](https://docs.pangolin.net/careers/join-us.md)
- [Software Engineer - Full Stack](https://docs.pangolin.net/careers/software-engineer-full-stack.md)
- [Software Engineer - Go + Network](https://docs.pangolin.net/careers/software-engineer-go.md)
- [DNS Cache](https://docs.pangolin.net/manage/dns-cache.md): What is a DNS cache and how to manage it with private resources
- [Pocket ID](https://docs.pangolin.net/manage/identity-providers/pocket-id.md): Configure Pocket ID Single Sign-On using OpenID Connect
- [Zitadel](https://docs.pangolin.net/manage/identity-providers/zitadel.md): Configure Zitadel Single Sign-On using OpenID Connect
- [Integration API](https://docs.pangolin.net/manage/integration-api/using-the-integration-api.md): Learn how to use Pangolin's REST API to automate and script operations with fine-grained permissions
- [Install Newt](https://docs.pangolin.net/manage/sites/install-newt.md): Install Newt as a binary or Docker container
- [Database Options](https://docs.pangolin.net/self-host/advanced/postgresql.md): Configure SQLite or PostgreSQL database for Pangolin
- [Container Timezone](https://docs.pangolin.net/self-host/advanced/timezone.md): Configure the timezone for Pangolin, Gerbil, and Traefik containers to match your local time.
- [GeoBlock](https://docs.pangolin.net/self-host/community-guides/geoblock.md)
- [Docker Compose](https://docs.pangolin.net/self-host/manual/manual-install.md): Deploy managed Pangolin manually using Docker Compose without the automated installer
- [Supporter Program](https://docs.pangolin.net/self-host/supporter-program.md): Support Pangolin development and remove UI elements with a supporter key