ZTNA

If you’re self-hosting a web app behind Nginx Proxy Manager and running a separate WireGuard VPN for team access, you’re juggling two stacks with overlapping jobs. Look, this Pangolin VPN review covers fosrl/pangolin, an open-source project that merges both roles — identity-aware VPN, tunneled reverse proxy, and zero-trust access control — into a single self-hosted reverse proxy VPN platform on your own VPS. Quick Verdict: Pangolin is an open-source ZTNA platform replacing the typical multi-tool remote access stack with one control plane. It handles WireGuard-based VPN connectivity, exposes web apps through a clientless reverse proxy with SSO and custom domains, and in v1.19 added browser-based SSH, RDP, and VNC. It’s not a Tailscale killer. But for self-hosters who want data sovereignty and a simpler stack, it’s one of the most compelling options right now. ...