Pangolin is a self-hosted tunneled reverse proxy with identity and access management.

Once it is up and running, you may want to monitor and manage your reverse proxy setup through the Traefik dashboard. Traefik is the HTTP proxy component used by Pangolin to route incoming traffic to the appropriate services, and its dashboard provides valuable insights into routes, middlewares, services, and more.

In this guide, we’ll walk you through how to securely access the Traefik dashboard in a Pangolin-powered environment — whether you’re running it locally or on a remote VPS.

This guide assumes you have already installed Pangolin, and that you are familiar with the terminal.

Add the Traefik ressource

Use the wizard to add a new ressource as usual:

create pangolin ressource

Leave the targets empty:

view pangolin ressource

At this point, you should be able to access the specified URL and see an error 503 “no available server”.

Enable the dashboard

Now, we’ll connect to your VPS to modify the Traefik configuration. Don’t worry; it’s straightforward.

Once connected, the configuration should be located inside the config/traefik folder relative to your Pangolin folder.

william@my-vps:~/pangolin/config/traefik$ ls -la
total 24
drwxr-xr-x 3 root root 4096 Mar  7 11:55 .
drwxr-xr-x 8 root root 4096 Mar  7 11:59 ..
-rw-r--r-- 1 root root 5380 Apr 14 15:14 dynamic_config.yml
drwxr-xr-x 2 root root 4096 Mar  7 12:00 logs
-rw-r--r-- 1 root root 1820 Apr  7 12:08 traefik_config.yml

Open the traefik_config.yml with your favorite editor:

nano traefik_config.yml

Add the following lines :

api:
  dashboard: true
  insecure: true

Modify the dynamic config

Open the dynamic_config.yml file with:

nano dynamic_config.yml

Locate the HTTP routers section and add the following lines:

http:
  # ...
  routers:
    # ...
    traefik-pangolin:
      entryPoints:
        - websecure
      middlewares:
        - security-headers
        - badger@http
      rule: Host(`traefik-pangolin.example.com`) # add your domain here
      service: api@internal
      priority: 100
      tls:
        certresolver: mycertresolver # change here accordingly to your config
  # ...

Save the configuration. If you made the changes without errors, you should be able to reload the page in your browser and access the Traefik Dashboard.

traefik dashboard

Thanks for following this guide !