thesammykins/pangolin-architect
.agents/skills/pangolin-architect/SKILL.md
Expert setup and configuration for Pangolin (Fossorial), the self-hosted tunneled reverse proxy. Handles Identity, Access Control, and WireGuard tunnels.
development
Updated Apr 17, 2026
$ install --global
skillsauthnpx skillsauth add thesammykins/dotfiles pangolin-architectInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 17, 2026, 5:35 AM5.5s1 file scanned
SKILL.md
- name:
- pangolin-architect
- description:
- Expert setup and configuration for Pangolin (Fossorial), the self-hosted tunneled reverse proxy. Handles Identity, Access Control, and WireGuard tunnels.
- license:
- MIT
What I do
- Deploy Pangolin Server (Control Plane) using Docker.
- Configure Identity Providers (OIDC) and Access Policies.
- Manage WireGuard tunnels for secure remote access without opening ports.
- Integrate with
newt(connectors) andgerbil(WG management).
When to use me
- When user asks to "expose local services safely" or "self-host cloudflare tunnel".
- When configuring
fosrl/pangolin. - When setting up reverse proxying with identity awareness.
- Triggers: "pangolin", "fossorial", "tunnel proxy", "wireguard proxy".
Instructions
1. Deployment (Docker Compose)
- Image:
fosrl/pangolin:latest - Ports: Needs UDP/51820 (WireGuard) and TCP/443 (HTTPS) exposed publicly.
- Volumes: Persist
/datafor configuration and certificates. - Env Vars:
PANGOLIN_PUBLIC_DOMAIN: The domain where dashboard is accessible.PANGOLIN_WG_ENDPOINT: Public IP/DNS:Port for WireGuard connections.
2. Identity & Access
- Strategy: Pangolin is identity-aware. Always define an IDP (Pocket-ID, Authentik, Keycloak) before exposing sensitive apps.
- Policies: Use "Least Privilege". Create specific policies for specific resources (e.g., "Admins Only" for Portainer).
3. Architecture
- Server: The Pangolin instance runs on a VPS or DMZ.
- Client (Newt): Runs inside the private network (Homelab).
- Flow: User -> Pangolin (VPS) -> WireGuard Tunnel -> Newt (Home) -> Service (192.168.x.x).
4. Troubleshooting
- Logs: Check
docker logs pangolinfor WireGuard handshake issues. - DNS: Ensure wildcard DNS (
*.tunnel.example.com) points to Pangolin if using subdomains.
Related Skills
thesammykins/vercel-react-best-practices
development
VerifiedTrustedCommunity
React and Next.js performance optimization guidelines from Vercel Engineering. This skill should be used when writing, reviewing, or refactoring React/Next.js code to ensure optimal performance patterns. Triggers on tasks involving React components, Next.js pages, data fetching, bundle optimization, or performance improvements.
SKILL.mdUpdated Apr 17, 2026
thesammykins/ralph
development
VerifiedTrustedCommunity
Autonomous feature development - setup and execution. Triggers on: ralph, set up ralph, run ralph, run the loop, implement tasks. Two phases: (1) Setup - chat through feature, create tasks with dependencies (2) Loop - pick ready tasks, implement, commit, repeat until done.
SKILL.mdUpdated Apr 17, 2026
thesammykins/python-modern-standards
tools
VerifiedTrustedCommunity
Enforces the 2025 Python stack. Replaces legacy tools (pip, flake8, isort) with modern, fast equivalents (uv, ruff). Mandates strict type hints.
SKILL.mdUpdated Apr 17, 2026
thesammykins/prd
documentation
VerifiedTrustedCommunity
Generate a Product Requirements Document (PRD) for a new feature. Use when planning a feature, starting a new project, or when asked to create a PRD. Triggers on: create a prd, write prd for, plan this feature, requirements for, spec out.
SKILL.mdUpdated Apr 17, 2026