Isn’t Pangolin just a reverse proxy?

I’m not sure if I understood, but on the host there are other services I do not want to share outside my LAN. My goal was to share a single service.

I know about Tailscale, but since it’s a commercial service I’m not keen to adopt it and then maybe they stop having a free tier. I’ll look into Headscale instead, I did not know that before.

Thanks for the link, I did not know this service. I’m still a bit reluctant to use commercial solutions which may do a rug pull in the future.

The service runs on another machine with address 192.168.1.10, so a different subnet than the WireGuard one, hence the port forward. I confirmed that this works, I can reach the service from phone on mobile data connected to WireGuard endpoint. wg1 is in zone dmz this is the port forward

I think this video explains it better than I could do https://videos.elenarossini.com/w/64VuNCccZNrP4u9MfgbhkN

From what I found, it’s a reverse proxy