Releases: fosrl/pangolin
1.12.0-rc.0
RC
A Release Candidate (RC) is a near-final software version, stable but undergoing last tests before official release. It has all features and no known bugs.
- Users: Use cautiously due to potential undiscovered bugs. Not for critical systems unless prepared for issues. Report bugs.
- Developers/Testers: Perform crucial final validation and thorough testing, especially of recent changes, to catch last-minute major issues.
- Backup: Always back up data before installing an RC to allow rollback if problems arise.
- Feedback: Provide feedback; it's vital for a robust final release. Participate in the discussion linked at the bottom
NOTE: MIGRATIONS MAY BREAK BETWEEN RC VERSIONS
What's Changed
- UI for managing and applying blueprints thanks to @Fredkiss3
- Show olm client versions and update notifications in UI
- Allow cert resolver to be changed in the UI on domains @Pallavikumarimdb
- Show domain records in a domain view screen @Pallavikumarimdb
- Request, action, and access logs in the UI and export
- Enforce MFA, session, and password reset in org on users
- Proxy protocol support for Raw TCP resources
Full Changelog: 1.11.1...1.12.0-rc.0
New Contributors
- @jonasmerkel made their first contribution in #1728
How to Update
Important
Always back up your config app-data before updating. This will allow you to easily roll back if the update breaks your configuration. You will not be able to easily downgrade otherwise.
IMPORTANT
To enable proxy protocol on TCP resources, the following needs to be entered into the dynamic config for Traefik. This is because traefik does not support serversTransport config from a dynamic source.
Edit dynamic_config.yml and add toward the bottom:
tcp:
serversTransports:
pp-transport-v1:
proxyProtocol:
version: 1
pp-transport-v2:
proxyProtocol:
version: 2
Contributors
Assets 4
1.11.1
6fd6c77
oschwartz10612
Owen Schwartz
What's Changed
- Make priority optional in schema by @Pallavikumarimdb in #1684
- FR translation update by @barnabehvrd in #1689
- Sorting Resources Alphabetically by Default by @Pallavikumarimdb in #1693
- Make priority input box focused on pressing the up/down arrows by @Pallavikumarimdb in #1695
- Make it easier to delete things by @Pallavikumarimdb in #1699
- feat(actions): Sync Images from Docker to GHCR by @marcschaeferger in #1712
- Adding GHCR to CI/CD Release Workflow & further improvements by @marcschaeferger in #1715
- Fix exit nodes offline
Full Changelog: 1.11.0...1.11.1
Contributors
Assets 4
1.11.0
3af1e0e
oschwartz10612
Owen Schwartz
What's Changed
- Add geo-blocking to rules engine
- Add health checks to targets
- Add path-rewriting to targets
- Add refresh buttons to more tables
- Add header auth authentication method
- Improved targets input
- Cleaned up docs and readme
- BREAKING: Managed Pangolin Nodes are now Remote Nodes with a new container image (see below)
- BREAKING: Default Integration API port changed from
3004to3003- If you use the integration API, you will need to update the port in the Traefik dynamic config.
Full Changelog: 1.10.3...1.11.0
New Contributors
- @vmfventura made their first contribution in #1572
- @Shamilius made their first contribution in #1550
- @nicolaus-hee made their first contribution in #1588
- @iconoclasthero made their first contribution in #1608
- @OddMagnet made their first contribution in #1539
- @jln-brtn made their first contribution in #1522
How to Update
Important
Always back up your config app-data before updating. This will allow you to easily roll back if the update breaks your configuration. You will not be able to easily downgrade otherwise.
Managed -> Remote Nodes
In 1.9.0 we introduced Managed Pangolin Nodes which are self-hosted instances of Pangolin that are managed by our cloud control plane. Up until now, the main Pangolin container image could run as either a self-hosted instance or a Managed Node. This was too confusing and caused a lot of support issues.
Starting in 1.11.0, the main Pangolin container image (fosrl/pangolin) is only for self-hosted instances. Managed nodes are now called Remote Nodes and have their own container image (fosrl/pangolin-node). The code for remote nodes has been moved to its own repository: https://github.com/fosrl/pangolin-node.
Migration is very straightforward - just swap the container. Contact us via email or Discord if you need help.
services:
pangolin:
image: fosrl/pangolin-node:latest # It's best practice to pin to a specific version, e.g. pangolin-node:1.0.0
# ...License Update
Read the full post with details and more about how we arrived at this decision here: https://digpangolin.com/blog/posts/license-change
The high level:
The existing Pangolin Community Edition (CE) container (fosrl/pangolin) remains 100% AGPL‑3 compliant and fully open‑source – nothing has changed there.
We recently moved our SaaS (Cloud) code from a private downstream fork into the main repository to improve transparency and development speed. This cloud‑related code is licensed differently, as it powers our hosted service.
Additionally, we’re introducing a new Pangolin Enterprise Edition (EE), distributed separately under the Fossorial Commercial License (FCL). The EE container’s tag is prepended with ee. A few key things:
- It’s fully free for individuals (homelabbers, hobbyists, etc) and small businesses (under $100K annual revenue).
- The current EE build does not yet include enterprise‑specific features, but they’ll roll out soon. Right now, it’s identical to the CE.
- The CE remains the default. Using the EE is opt-in.
Read more in the documentation: https://docs.digpangolin.com/self-host/enterprise-edition
Our goal is to stay true to our open‑source principles, enable most of our large community to benefit from the full suite of features, and build a sustainable business that funds ongoing development.
Contributors
Assets 4
1.10.3
d10fdac
oschwartz10612
Owen Schwartz
What's Changed
- Fix upgrade @hookform/resolvers from 4.1.3 to 5.2.2 by @Lokowitz in #1525
- Resolve nullable error with headers input
Full Changelog: 1.10.2...1.10.3
Contributors
Assets 4
1.10.2
1f9f3fd
oschwartz10612
Owen Schwartz
What's Changed
- Fix bug when creating resource with blueprint protocol was http
- Allow complex strings input for headers
- Fix host header input not working without headers input
Full Changelog: 1.10.1...1.10.2
1.10.1
What's Changed
- Fix bug preventing a site with existing resource targets from being deleted
Full Changelog: 1.10.0...1.10.1
How to Update
Important
Always back up your config app-data before updating. This will allow you to easily roll back if the update breaks your configuration. You will not be able to easily downgrade otherwise.
1.10.0
What's Changed
- Add Pangolin Blueprints (declarative config via YAML and Docker labels)
- Add ability to pass custom headers on resource
- Add path based routing to resource via targets
- Add "Auto Provisioned" override toggle to auto provisioned user so admins can manually edit user details
- Fix email undefined error when requesting email verification code
- Auto detect public IP address in Managed Self-hosted quick installer
Full Changelog: 1.9.4...1.10.0
How to Update
Important
Always back up your config app-data before updating. This will allow you to easily roll back if the update breaks your configuration. You will not be able to easily downgrade otherwise.
New Contributors
- @AstralDestiny made their first contribution in #1413
- @hetlelid made their first contribution in #1444
- @marcschaeferger made their first contribution in #1465
- @olant made their first contribution in #1473
- @Tim5965 made their first contribution in #1476
Full Change Log
- Update Traefik to not declare an unnecessary path and make the config cleaner. by @AstralDestiny in #1413
- Fix: Include "region" field in ExitNode query to match schema by @Pallavikumarimdb in #1430
- Fix inconsistent destinationIp validation between create and update APIs by @Pallavikumarimdb in #1431
- Update page.tsx by @hetlelid in #1444
- Fix errors for dep updates by @Lokowitz in #1454
- Add declareivie config for resources, path matching, custom headers by @oschwartz10612 in #1449
- feat(sites): adding official kubernetes helm install command for newt by @marcschaeferger in #1465
- Enter key handling & hostname field reset in resource create by @Pallavikumarimdb in #1406
- Use niceId for resource URLs to prevent 307 redirects by @Pallavikumarimdb in #1475
- Update de-DE.json by @olant in #1473
- Update nl-NL.json; Translation errors by @Tim5965 in #1476
Contributors
Assets 4
1.9.4
What's Changed
- Fix/hostname field reset port and method by @Pallavikumarimdb in #1394
- Enhancement #906/Persist User Preference for Entries Amount by @Pallavikumarimdb in #1395
Full Changelog: 1.9.3...1.9.4
How to Update
Important
Always back up your config app-data before updating. This will allow you to easily roll back if the update breaks your configuration. You will not be able to easily downgrade otherwise.
Contributors
Assets 4
1.9.3
What's Changed
- Preserve subdomain input when selecting a base domain by @Pallavikumarimdb in #1375
- Enhancement #906/Smart Host Parsing for Target Address by @Pallavikumarimdb in #1316
- Feature #1318/Make version numbers link to GitHub releases and add Discord community link by @Hetav21 in #1387
- Support Unicode Domain Input and Display by @Pallavikumarimdb in #1240
- Various bug fixes and improvements by moi
New Contributors
Full Changelog: 1.9.2...1.9.3
How to Update
Important
Always back up your config app-data before updating. This will allow you to easily roll back if the update breaks your configuration. You will not be able to easily downgrade otherwise.
Contributors
Assets 4
1.9.2
What's Changed
- Bug fixes for registering exit nodes
- Managed geoblocking
BREAKING
If you are on a managed node and update Gerbil to 1.2.1 you need to allow the proxy protocol with something like the following in your config/traefik_config.yml
websecure:
proxyProtocol:
trustedIPs:
- 0.0.0.0/0
- ::1/128Full Changelog: 1.9.1...1.9.2
How to Update
Important
Always back up your config app-data before updating. This will allow you to easily roll back if the update breaks your configuration. You will not be able to easily downgrade otherwise.