ABOUT
Pangolin securely routes traffic over WireGuard tunnels to any private network. It works like a reverse proxy that spans multiple networks — no public IPs, DNS setup, or certificates required.
infoType `journalctl -u pangolin | grep -oP 'Token:\s*\K\w+'` into LXC console to get admin token which you will use to create admin account.
infoLXC has 4GB of RAM set initially for the build stage. After installation finishes, you can decrease the RAM allocated to 1024MB or 512MB even.
warningMake sure you edit `/opt/pangolin/config/config.yml` and change it to match your needs
warningPinned to a tested release because Pangolin's schema changes have repeatedly broken unattended updates. To try a newer version at your own risk, run: 'export PANGOLIN_VERSION=<tag>' and re-run update. If it breaks, please open an issue at https://github.com/community-scripts/ProxmoxVE/issues with the error log.
INSTALL
Approved local installer
DefaultDebian 13
Approved locally2 CPU4096 MB RAM10 GB disk
Config path/opt/pangolin/config/config.yml
Run this command in the Proxmox VE shell. It downloads the immutable approved file, verifies SHA-256, and only then executes it.
( url='https://scripts.francoisvw.com/snapshots/c19711ea1b2526bec67e34be948114e255b5a811/ct/pangolin.sh'; sha='d501be3f30e3c8e6d0135a2324929b89186c37f2734c3283dabc5fcb25220376'; tmp="$(mktemp)" || exit; curl -fsSL "$url" -o "$tmp" && printf '%s %s\n' "$sha" "$tmp" | sha256sum -c - && bash "$tmp"; rc=$?; rm -f "$tmp"; exit "$rc" )
View approved source ↗Path ct/pangolin.shSHA-256 d501be3f30e3c8e6d0135a2324929b89186c37f2734c3283dabc5fcb25220376 LOCAL CHANGE REVIEW
Approved vs latest fetched source
Sign in with a passkey to inspect pending source changes. Approved content remains public.