Reverse Proxy

Starting a Docker container should be enough to make it reachable over Tailscale. That’s the idea behind TSDProxy (almeidapaulopt/tsdproxy) — and it actually delivers. But traditional reverse proxies ask for config files, certificate resolvers, entrypoints, and network setup before you see a single service online. TSDProxy skips all that. Add one label to a container, and it gets https://<name>.<tailnet>.ts.net automatically. No sidecars, no reverse proxy config, no manual SSL work. ...

If you’re self-hosting a web app behind Nginx Proxy Manager and running a separate WireGuard VPN for team access, you’re juggling two stacks with overlapping jobs. Look, this Pangolin VPN review covers fosrl/pangolin, an open-source project that merges both roles — identity-aware VPN, tunneled reverse proxy, and zero-trust access control — into a single self-hosted reverse proxy VPN platform on your own VPS. Quick Verdict: Pangolin is an open-source ZTNA platform replacing the typical multi-tool remote access stack with one control plane. It handles WireGuard-based VPN connectivity, exposes web apps through a clientless reverse proxy with SSO and custom domains, and in v1.19 added browser-based SSH, RDP, and VNC. It’s not a Tailscale killer. But for self-hosters who want data sovereignty and a simpler stack, it’s one of the most compelling options right now. ...