What's Changed

• Make priority optional in schema by @Pallavikumarimdb in #1684
• FR translation update by @barnabehvrd in #1689
• Sorting Resources Alphabetically by Default by @Pallavikumarimdb in #1693
• Make priority input box focused on pressing the up/down arrows by @Pallavikumarimdb in #1695
• Make it easier to delete things by @Pallavikumarimdb in #1699
• feat(actions): Sync Images from Docker to GHCR by @marcschaeferger in #1712
• Adding GHCR to CI/CD Release Workflow & further improvements by @marcschaeferger in #1715
• Fix exit nodes offline

Full Changelog: 1.11.0...1.11.1

What's Changed

• Add geo-blocking to rules engine
• Add health checks to targets
• Add path-rewriting to targets
• Add refresh buttons to more tables
• Add header auth authentication method
• Improved targets input
• Cleaned up docs and readme
• BREAKING: Managed Pangolin Nodes are now Remote Nodes with a new container image (see below)
• BREAKING: Default Integration API port changed from 3004 to 3003
  • If you use the integration API, you will need to update the port in the Traefik dynamic config.

Full Changelog: 1.10.3...1.11.0

New Contributors

• @vmfventura made their first contribution in #1572
• @Shamilius made their first contribution in #1550
• @nicolaus-hee made their first contribution in #1588
• @iconoclasthero made their first contribution in #1608
• @OddMagnet made their first contribution in #1539
• @jln-brtn made their first contribution in #1522

How to Update

View documentation

Managed -> Remote Nodes

In 1.9.0 we introduced Managed Pangolin Nodes which are self-hosted instances of Pangolin that are managed by our cloud control plane. Up until now, the main Pangolin container image could run as either a self-hosted instance or a Managed Node. This was too confusing and caused a lot of support issues.

Starting in 1.11.0, the main Pangolin container image (fosrl/pangolin) is only for self-hosted instances. Managed nodes are now called Remote Nodes and have their own container image (fosrl/pangolin-node). The code for remote nodes has been moved to its own repository: https://github.com/fosrl/pangolin-node.

Migration is very straightforward - just swap the container. Contact us via email or Discord if you need help.

services:
  pangolin:
    image: fosrl/pangolin-node:latest # It's best practice to pin to a specific version, e.g. pangolin-node:1.0.0
    # ...

License Update

Read the full post with details and more about how we arrived at this decision here: https://digpangolin.com/blog/posts/license-change

The high level:

The existing Pangolin Community Edition (CE) container (fosrl/pangolin) remains 100% AGPL‑3 compliant and fully open‑source – nothing has changed there.

We recently moved our SaaS (Cloud) code from a private downstream fork into the main repository to improve transparency and development speed. This cloud‑related code is licensed differently, as it powers our hosted service.

Additionally, we’re introducing a new Pangolin Enterprise Edition (EE), distributed separately under the Fossorial Commercial License (FCL). The EE container’s tag is prepended with ee. A few key things:

• It’s fully free for individuals (homelabbers, hobbyists, etc) and small businesses (under $100K annual revenue).
• The current EE build does not yet include enterprise‑specific features, but they’ll roll out soon. Right now, it’s identical to the CE.
• The CE remains the default. Using the EE is opt-in.

Read more in the documentation: https://docs.digpangolin.com/self-host/enterprise-edition

Our goal is to stay true to our open‑source principles, enable most of our large community to benefit from the full suite of features, and build a sustainable business that funds ongoing development.

What's Changed

• Fix upgrade @hookform/resolvers from 4.1.3 to 5.2.2 by @Lokowitz in #1525
• Resolve nullable error with headers input

Full Changelog: 1.10.2...1.10.3

What's Changed

• Fix bug when creating resource with blueprint protocol was http
• Allow complex strings input for headers
• Fix host header input not working without headers input

Full Changelog: 1.10.1...1.10.2

What's Changed

• Fix bug preventing a site with existing resource targets from being deleted

Full Changelog: 1.10.0...1.10.1

How to Update

View documentation

What's Changed

• Add Pangolin Blueprints (declarative config via YAML and Docker labels)
• Add ability to pass custom headers on resource
• Add path based routing to resource via targets
• Add "Auto Provisioned" override toggle to auto provisioned user so admins can manually edit user details
• Fix email undefined error when requesting email verification code
• Auto detect public IP address in Managed Self-hosted quick installer

Full Changelog: 1.9.4...1.10.0

How to Update

View documentation

New Contributors

• @AstralDestiny made their first contribution in #1413
• @hetlelid made their first contribution in #1444
• @marcschaeferger made their first contribution in #1465
• @olant made their first contribution in #1473
• @Tim5965 made their first contribution in #1476

Full Change Log

• Update Traefik to not declare an unnecessary path and make the config cleaner. by @AstralDestiny in #1413
• Fix: Include "region" field in ExitNode query to match schema by @Pallavikumarimdb in #1430
• Fix inconsistent destinationIp validation between create and update APIs by @Pallavikumarimdb in #1431
• Update page.tsx by @hetlelid in #1444
• Fix errors for dep updates by @Lokowitz in #1454
• Add declareivie config for resources, path matching, custom headers by @oschwartz10612 in #1449
• feat(sites): adding official kubernetes helm install command for newt by @marcschaeferger in #1465
• Enter key handling & hostname field reset in resource create by @Pallavikumarimdb in #1406
• Use niceId for resource URLs to prevent 307 redirects by @Pallavikumarimdb in #1475
• Update de-DE.json by @olant in #1473
• Update nl-NL.json; Translation errors by @Tim5965 in #1476

What's Changed

• Fix/hostname field reset port and method by @Pallavikumarimdb in #1394
• Enhancement #906/Persist User Preference for Entries Amount by @Pallavikumarimdb in #1395

Full Changelog: 1.9.3...1.9.4

How to Update

View documentation

What's Changed

• Preserve subdomain input when selecting a base domain by @Pallavikumarimdb in #1375
• Enhancement #906/Smart Host Parsing for Target Address by @Pallavikumarimdb in #1316
• Feature #1318/Make version numbers link to GitHub releases and add Discord community link by @Hetav21 in #1387
• Support Unicode Domain Input and Display by @Pallavikumarimdb in #1240
• Various bug fixes and improvements by moi

New Contributors

• @Hetav21 made their first contribution in #1387

Full Changelog: 1.9.2...1.9.3

How to Update

View documentation

What's Changed

• Bug fixes for registering exit nodes
• Managed geoblocking

BREAKING

If you are on a managed node and update Gerbil to 1.2.1 you need to allow the proxy protocol with something like the following in your config/traefik_config.yml

websecure:
    proxyProtocol:
      trustedIPs:
        - 0.0.0.0/0
        - ::1/128

Full Changelog: 1.9.1...1.9.2

How to Update

View documentation

What's Changed

General bug fixes to integration API and migrations

New Contributors

• @SINF-KEN made their first contribution in #1341

Full Changelog: 1.9.0...1.9.1

How to Update

View documentation