--- title: Self-hosted Cloudflare + VPN replacement! Pangolin Tutorial description: Pangolin is an open-source identity-based remote access platform built on WireGuard that combines reverse proxy, VPN, and zero-trust network access (ZTNA)... canonical: https://daily.dev/posts/self-hosted-cloudflare-vpn-replacement-pangolin-tutorial-ddtvs1ipi twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Self-hosted Cloudflare + VPN replacement! Pangolin Tutorial | daily.dev og:description: Pangolin is an open-source identity-based remote access platform built on WireGuard that combines reverse proxy, VPN, and zero-trust network access (ZTNA)... og:url: https://daily.dev/posts/self-hosted-cloudflare-vpn-replacement-pangolin-tutorial-ddtvs1ipi og:image: https://api.daily.dev/og/posts/dDTvs1iPi.png og:image:alt: Self-hosted Cloudflare + VPN replacement! Pangolin Tutorial og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Self-hosted Cloudflare + VPN replacement! Pangolin Tutorial **[Christian Lempa](https://daily.dev/sources/christianlempa)** · 23 min read · 4 upvotes · 0 comments ## Summary Pangolin is an open-source identity-based remote access platform built on WireGuard that combines reverse proxy, VPN, and zero-trust network access (ZTNA) capabilities. The tutorial demonstrates installing Pangolin on a cloud VPS and connecting it to a local home lab network, eliminating the need for port forwarding or static IPs at home. It covers creating public resources with automatic TLS certificates via Traefik, setting up private resources with granular access controls, and configuring authentication methods including SSO, PIN codes, and client-based access. The platform provides centralized management, request analytics, and can replace solutions like Cloudflare Tunnels, Tailscale, and traditional VPNs. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [I replaced Tailscale with Pangolin for remote access, and it was much easier than I expected](https://daily.dev/posts/i-replaced-tailscale-with-pangolin-for-remote-access-and-it-was-much-easier-than-i-expected-zhudbuvn4) · XDA Developers · 1 upvotes · 0 comments - [I don't use Tailscale or Nginx to access my home lab remotely, here's what I use instead](https://daily.dev/posts/i-don-t-use-tailscale-or-nginx-to-access-my-home-lab-remotely-here-s-what-i-use-instead-kysdzy8la) · XDA Developers · 0 upvotes · 0 comments - [I replaced Cloudflare Tunnel with Pangolin, and finally own my whole ingress path](https://daily.dev/posts/i-replaced-cloudflare-tunnel-with-pangolin-and-finally-own-my-whole-ingress-path-h4z6wg0nm) · XDA Developers · 2 upvotes · 0 comments - [Switching from Tailscale to Pangolin was easy, but sharing a service with just a link is why I stayed](https://daily.dev/posts/switching-from-tailscale-to-pangolin-was-easy-but-sharing-a-service-with-just-a-link-is-why-i-staye-pw9lhqzzg) · XDA Developers · 0 upvotes · 0 comments - [Pangolin lets me reach my own apps from anywhere, and I didn't have to open a single port](https://daily.dev/posts/pangolin-lets-me-reach-my-own-apps-from-anywhere-and-i-didn-t-have-to-open-a-single-port-bibaxjtci) · XDA Developers · 0 upvotes · 0 comments --- Tags: [#infrastructure](https://daily.dev/tags/infrastructure), [#docker](https://daily.dev/tags/docker), [#vpn](https://daily.dev/tags/vpn), [#self-hosting](https://daily.dev/tags/self-hosting) [View this post on daily.dev](https://daily.dev/posts/self-hosted-cloudflare-vpn-replacement-pangolin-tutorial-ddtvs1ipi) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Self-hosted Cloudflare + VPN replacement! Pangolin Tutorial","url":"https://daily.dev/posts/self-hosted-cloudflare-vpn-replacement-pangolin-tutorial-ddtvs1ipi","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/self-hosted-cloudflare-vpn-replacement-pangolin-tutorial-ddtvs1ipi"},"datePublished":"2026-01-16T15:19:29.005Z","dateModified":"2026-01-16T15:21:25.955Z","description":"Pangolin is an open-source identity-based remote access platform built on WireGuard that combines reverse proxy, VPN, and zero-trust network access (ZTNA)...","image":"https://i.ytimg.com/vi/c8f-YPiUBZM/sddefault.jpg","thumbnailUrl":"https://i.ytimg.com/vi/c8f-YPiUBZM/sddefault.jpg","isAccessibleForFree":true,"articleSection":"Christian Lempa","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Christian Lempa","logo":"https://media.daily.dev/image/upload/s--r09bzzis--/f_auto/v1723788767/logos/christianlempa","url":"https://daily.dev/sources/christianlempa"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/self-hosted-cloudflare-vpn-replacement-pangolin-tutorial-ddtvs1ipi","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":4},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"infrastructure,docker,vpn,self-hosting","timeRequired":"PT23M","video":{"@type":"VideoObject","name":"Self-hosted Cloudflare + VPN replacement! Pangolin Tutorial","description":"Pangolin is an open-source identity-based remote access platform built on WireGuard that combines reverse proxy, VPN, and zero-trust network access (ZTNA)...","thumbnailUrl":"https://i.ytimg.com/vi/c8f-YPiUBZM/sddefault.jpg","uploadDate":"2026-01-16T15:19:29.005Z","duration":"PT23M","url":"https://api.daily.dev/r/dDTvs1iPi","embedUrl":"https://www.youtube.com/embed/c8f-YPiUBZM"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Christian Lempa","item":"https://daily.dev/sources/christianlempa"},{"@type":"ListItem","position":3,"name":"Self-hosted Cloudflare + VPN replacement! Pangolin Tutorial"}]} ```