Originally published on eve.gd on 4 October 2025, last updated 6 September 2026.
Read this post on the web (with images, PDF and citation details)
I have been playing around with Pangolin, a really nice management system for exposing internal services over HTTPS.
However, I found that its internal wireguard networking does not play nicely if you already have another wireguard system, like tailscale, on the box. The solution was actually simple, but has a potential tripwire.
In your docker-compose.yml, set something like this under Gerbil’s ports:
- 51821:51821/udp
However, importantly: these ports must MATCH. You cannot have “- 51821:51820/udp” or similar. This will cause the Newt tunnels to fail.
Then, in pangolin/config/config.yml, make sure that the Gerbil port is set to 51821 or whatever your selected port is. Tada.
This reference list has been generated, in many cases, through an automated process and may therefore contain errors or incomplete metadata. It is provided purely as assistance for finding the items mentioned within this post.
1. ‘GitHub - fosrl/pangolin: Modern networking and security platform providing secure access and connectivity to apps, infrastructure, and AI workloads. Connect and protect your users.’, GitHub <https://github.com/fosrl/pangolin>