What's Changed

• Update Next to 15.5.7 ref: CVE-2025-55182

Full Changelog: 1.12.2...1.12.3

What's Changed

• Update German translations for client and blueprint terms by @clemone210 in #1809
• Enhancement #906/Resources Dashboard: Targets Column, Customizable Columns & Status Indicators by @Pallavikumarimdb in #1328
• Fix typo in shareSeeOnce message by @robtec in #1824
• Update resourceRawSettingsDescription with details by @hetlelid in #1830
• Small Bug Fixes

New Contributors

• @clemone210 made their first contribution in #1809
• @robtec made their first contribution in #1824

Full Changelog: 1.12.1...1.12.2

What's Changed

• Fix issue causing Docker label blueprints to not be detected
• Other small improvements and bug fixes

Reference the major 1.12.0 release for more details.

Full Changelog: 1.12.0...1.12.1

What's Changed

• UI for managing and applying blueprints thanks to @Fredkiss3
• Show Olm client versions and update notifications in UI
• Allow cert resolver to be changed in the UI on domains @Pallavikumarimdb
• Show domain records in a domain view screen @Pallavikumarimdb
• Request, action, and access logs in the UI with CSV export and retention
• Enforce MFA, session, and password reset for org users
• Proxy protocol support for Raw TCP resources
• Add loading indicator when switching routes

Full Changelog: 1.11.1...1.12.0

New Contributors

• @jonasmerkel made their first contribution in #1728

How to Update

View documentation

Enabling Proxy Protocol

To enable proxy protocol on TCP resources, the following needs to be entered into the dynamic config for Traefik. This is because Traefik does not support serversTransport config from a dynamic source.

Edit dynamic_config.yml and add toward the bottom:

tcp:
  serversTransports:
    pp-transport-v1:
      proxyProtocol:
        version: 1
    pp-transport-v2:
      proxyProtocol:
        version: 2

RC

A Release Candidate (RC) is a near-final software version, stable but undergoing last tests before official release. It has all features and no known bugs.

• Users: Use cautiously due to potential undiscovered bugs. Not for critical systems unless prepared for issues. Report bugs.
• Developers/Testers: Perform crucial final validation and thorough testing, especially of recent changes, to catch last-minute major issues.
• Backup: Always back up data before installing an RC to allow rollback if problems arise.
• Feedback: Provide feedback; it's vital for a robust final release. Participate in the discussion linked at the bottom

What's Changed

• UI for managing and applying blueprints thanks to @Fredkiss3
• Show olm client versions and update notifications in UI
• Allow cert resolver to be changed in the UI on domains @Pallavikumarimdb
• Show domain records in a domain view screen @Pallavikumarimdb
• Request, action, and access logs in the UI and export
• Enforce MFA, session, and password reset in org on users
• Proxy protocol support for Raw TCP resources

Full Changelog: 1.11.1...1.12.0-rc.0

New Contributors

• @jonasmerkel made their first contribution in #1728

How to Update

View documentation

IMPORTANT

To enable proxy protocol on TCP resources, the following needs to be entered into the dynamic config for Traefik. This is because traefik does not support serversTransport config from a dynamic source.

Edit dynamic_config.yml and add toward the bottom:

tcp:
  serversTransports:
    pp-transport-v1:
      proxyProtocol:
        version: 1
    pp-transport-v2:
      proxyProtocol:
        version: 2

What's Changed

• Make priority optional in schema by @Pallavikumarimdb in #1684
• FR translation update by @barnabehvrd in #1689
• Sorting Resources Alphabetically by Default by @Pallavikumarimdb in #1693
• Make priority input box focused on pressing the up/down arrows by @Pallavikumarimdb in #1695
• Make it easier to delete things by @Pallavikumarimdb in #1699
• feat(actions): Sync Images from Docker to GHCR by @marcschaeferger in #1712
• Adding GHCR to CI/CD Release Workflow & further improvements by @marcschaeferger in #1715
• Fix exit nodes offline

Full Changelog: 1.11.0...1.11.1

What's Changed

• Add geo-blocking to rules engine
• Add health checks to targets
• Add path-rewriting to targets
• Add refresh buttons to more tables
• Add header auth authentication method
• Improved targets input
• Cleaned up docs and readme
• BREAKING: Managed Pangolin Nodes are now Remote Nodes with a new container image (see below)
• BREAKING: Default Integration API port changed from 3004 to 3003
  • If you use the integration API, you will need to update the port in the Traefik dynamic config.

Full Changelog: 1.10.3...1.11.0

New Contributors

• @vmfventura made their first contribution in #1572
• @Shamilius made their first contribution in #1550
• @nicolaus-hee made their first contribution in #1588
• @iconoclasthero made their first contribution in #1608
• @OddMagnet made their first contribution in #1539
• @jln-brtn made their first contribution in #1522

How to Update

View documentation

Managed -> Remote Nodes

In 1.9.0 we introduced Managed Pangolin Nodes which are self-hosted instances of Pangolin that are managed by our cloud control plane. Up until now, the main Pangolin container image could run as either a self-hosted instance or a Managed Node. This was too confusing and caused a lot of support issues.

Starting in 1.11.0, the main Pangolin container image (fosrl/pangolin) is only for self-hosted instances. Managed nodes are now called Remote Nodes and have their own container image (fosrl/pangolin-node). The code for remote nodes has been moved to its own repository: https://github.com/fosrl/pangolin-node.

Migration is very straightforward - just swap the container. Contact us via email or Discord if you need help.

services:
  pangolin:
    image: fosrl/pangolin-node:latest # It's best practice to pin to a specific version, e.g. pangolin-node:1.0.0
    # ...

License Update

Read the full post with details and more about how we arrived at this decision here: https://digpangolin.com/blog/posts/license-change

The high level:

The existing Pangolin Community Edition (CE) container (fosrl/pangolin) remains 100% AGPL‑3 compliant and fully open‑source – nothing has changed there.

We recently moved our SaaS (Cloud) code from a private downstream fork into the main repository to improve transparency and development speed. This cloud‑related code is licensed differently, as it powers our hosted service.

Additionally, we’re introducing a new Pangolin Enterprise Edition (EE), distributed separately under the Fossorial Commercial License (FCL). The EE container’s tag is prepended with ee. A few key things:

• It’s fully free for individuals (homelabbers, hobbyists, etc) and small businesses (under $100K annual revenue).
• The current EE build does not yet include enterprise‑specific features, but they’ll roll out soon. Right now, it’s identical to the CE.
• The CE remains the default. Using the EE is opt-in.

Read more in the documentation: https://docs.digpangolin.com/self-host/enterprise-edition

Our goal is to stay true to our open‑source principles, enable most of our large community to benefit from the full suite of features, and build a sustainable business that funds ongoing development.

What's Changed

• Fix upgrade @hookform/resolvers from 4.1.3 to 5.2.2 by @Lokowitz in #1525
• Resolve nullable error with headers input

Full Changelog: 1.10.2...1.10.3

What's Changed

• Fix bug when creating resource with blueprint protocol was http
• Allow complex strings input for headers
• Fix host header input not working without headers input

Full Changelog: 1.10.1...1.10.2

What's Changed

• Fix bug preventing a site with existing resource targets from being deleted

Full Changelog: 1.10.0...1.10.1

How to Update

View documentation