## What's Changed * Add [self-hosted managed mode](https://docs.digpangolin.com/manage/managed) to use the cloud for self-hosted highly available Pangolin * Move site from resource to target so you can have multiple targets for a resource on different sites. This will allow you to create more highly available deployments! * Auto redirect to IdP on a per-resource basis * Setup token required to setup account for first time * Fix domain picker to be more intuitive * *Breaking* Change integration API to port 3004 by default * General bugfixes and improvements ### From the community! * fix: adapt nix run command by @confusedalex in https://github.com/fosrl/pangolin/pull/1196 * Update versions by @Lokowitz in https://github.com/fosrl/pangolin/pull/1200 * System wide default language detection via browser language header by @Pallavikumarimdb in https://github.com/fosrl/pangolin/pull/1205 * Portbinding fixes by @Error-Gap in https://github.com/fosrl/pangolin/pull/1177 * make IPv6 optional during install by @Xentrice in https://github.com/fosrl/pangolin/pull/1212 * Added checks for port 80 and 443 by @aclfe in https://github.com/fosrl/pangolin/pull/1219 * Pangctl command to reset a user’s passkeys (WebAuthn credentials) by @adrianeastles in https://github.com/fosrl/pangolin/pull/1237 * Translation nb no by @EliasTors in https://github.com/fosrl/pangolin/pull/1242 * update node to LTS 22 by @Lokowitz in https://github.com/fosrl/pangolin/pull/1134 * fix: fixed api error message in createSite.ts by @jackrosenberg in https://github.com/fosrl/pangolin/pull/1262 * Update express to version 5 by @Lokowitz in https://github.com/fosrl/pangolin/pull/1246 * Add setup token security for initial server setup by @adrianeastles in https://github.com/fosrl/pangolin/pull/1208 * Form Signup Improvements - Password Requirements & Pre-Filled Email on signup form Invite by @adrianeastles in https://github.com/fosrl/pangolin/pull/1129 * add missing hostmeta export for PG schema by @Pallavikumarimdb in https://github.com/fosrl/pangolin/pull/1284 * fix: change default integration_api to 3004 by @jackrosenberg in https://github.com/fosrl/pangolin/pull/1281 **Full Changelog**: https://github.com/fosrl/pangolin/compare/1.8.0...1.9.0 ## New Contributors * @confusedalex made their first contribution in https://github.com/fosrl/pangolin/pull/1196 * @Pallavikumarimdb made their first contribution in https://github.com/fosrl/pangolin/pull/1205 * @Error-Gap made their first contribution in https://github.com/fosrl/pangolin/pull/1177 * @aclfe made their first contribution in https://github.com/fosrl/pangolin/pull/1219 * @EliasTors made their first contribution in https://github.com/fosrl/pangolin/pull/1242 ## How to Update > [!IMPORTANT] > Always back up your config app-data before updating. This will allow you to easily roll back if the update breaks your configuration. You will not be able to easily downgrade otherwise. [View documentation](https://docs.digpangolin.com/self-host/how-to-update) ## Managed Pangolin In this deployment modality you can host your own nodes with cloud coordination and automatic fail over. Data always transits your servers and the cloud handles orchestration between all of your nodes. It's essentially just the normal self hosted Pangolin setup, but with added benefits of cloud integration and coordinated fail over. You can deploy a managed Pangolin node in seconds [using the installer](https://docs.digpangolin.com/self-host/quick-install-managed). Or you can [convert your existing install](https://docs.digpangolin.com/self-host/quick-install-managed) ### How It Works - **You Host the node**: Run the same Pangolin stack as before with Traefik, which connects your Newt tunnels. - **We Handle the Rest**: Pangolin Cloud manages the control plane, DNS, certificate management, database, and backups.  For detailed information about how nodes work and their advantages, see our [nodes](https://docs.digpangolin.com/manage/nodes) documentation. ### Benefits - **High Availability**: Eliminates the complexity of managing high availability while still owning your own infrastructure. - **Less Management Overhead**: While we update the cloud with new features you don't need to touch your nodes unless you want to. - **Automatic updates** The cloud dashboard evolves quickly, so you get new features and bug fixes without having to manually pull new containers every time. - **Cloud failover** If your node goes down, your tunnels can temporarily fail over to our cloud points of presence until you bring it back online. Managed deployment is ideal for organizations that need high availability while maintaining control over their infrastructure and data transit.

## What's Changed - Add i18n support for UI translations (initial languages shown below) - Remove the need for setting `users.server_admin.password` and `users.server_admin.email` in config - Add onboarding UI on new installs for setting the server admin credentials - Add `pangctl` CLI tool for setting/resetting server admin credentials - Fix bug preventing integration API users from creating raw TCP resources - Forward headers from server component requests to API - `server.trust_proxy` in config file supports setting an integer according to the [Express.js docs](https://expressjs.com/en/guide/behind-proxies.html) - OIDC usernames are no longer case sensitive **Full Changelog**: https://github.com/fosrl/pangolin/compare/1.5.1...1.6.0 ## How to Update >[!WARNING] > For PostgresSQL users coming from version < 1.6.0, please upgrade directly to >=1.6.2, as there is a broken migration script in this version. > [!IMPORTANT] > Always back up your config app-data before updating. This will allow you to easily roll back if the update breaks your configuration. You will not be able to easily downgrade otherwise. [View documentation](https://docs.digpangolin.com/self-host/how-to-update) ## Translations Pangolin now has i18n support for internationalization! Huge thank you to everyone who worked on this and @Lokowitz for leading this effort. > [!TIP] > We are looking for people to help us manage and review translations. If you're interested, please email us at **[numbat@fossorial.io](mailto:numbat@fossorial.io)**. Translations can always be improved. If you spot an issue, want to enhance an existing translation, or would like to contribute a new language, we welcome all contributions. <img width="251" alt="Pasted image 20250621170355" src="https://github.com/user-attachments/assets/d931f3ae-07bc-4abe-a43c-fc5f006d2c9d" /> ## `pangctl` and Admin Credentials Up until now, the "server admin" credentials were set in the config file or environment variables. Moving forward, new installations of Pangolin will need to go to `https://<pangolin-dashboard-domain>/auth/initial-setup` set these credentials when first visiting the dashboard. **For those of you updating, we recommend you now remove the `users` section from the `config.yml` and remove the environment variables: `USERS_SERVERADMIN_PASSWORD` and `USERS_SERVERADMIN_EMAIL`. The migration script will not do this automatically.** Alongside this change, we're introducing `pangctl`, an internal CLI tool baked into the Pangolin container, to set the email and password if you ever need to change these credentials. Read more about this in [the docs](https://docs.fossorial.io/Pangolin/pangolin-cli). We plan to add more helpful scripts to this tool as needed in the future.

## Read the 1.18 Announcement Read the full announcement with discussion of new features: [Pangolin 1.18 - HTTPS Private Resources, Multi-Site Routing, and Alerting](https://pangolin.net/news/1-18-release) ## What's Changed * Fix status history and status of resources not updating in CE * Add support for customizing webhook body for alerts * Support scraping multiple acme json files if directory provided in `acme_json_path` * Support scraping in certificates from a HTTP endpoint using `acme_http_endpoint` * Various other bug fixes and improvements **Full Changelog**: https://github.com/fosrl/pangolin/compare/1.18.1...1.18.2 ## How to Update For Pangolin Enterprise: the server now scrapes in the certificates from Treafik's acme.json file. On default installs, this should work out of the box importing from `config/letsencrypt/acme.json` which is mounted into the container. **If your Traefik acme.json file is not mounted into this default location [update the config in privateConfig.yml](https://docs.pangolin.net/self-host/advanced/private-config-file#acme-configuration)** > [!IMPORTANT] > Always back up your config app-data before updating. This will allow you to easily roll back if the update breaks your configuration. You will not be able to easily downgrade otherwise. [View documentation](https://docs.pangolin.net/self-host/how-to-update)

## Read the 1.18 Announcement Read the full announcement with discussion of new features: [Pangolin 1.18 - HTTPS Private Resources, Multi-Site Routing, and Alerting](https://pangolin.net/news/1-18-release) ## What's Changed - Add cert status in public resources table - Add cert status in private resources table - Fix handle backward compatible siteId in site-resource API calls - Fix handle sans in the acme.json - Fix cert status failed when no EE license is present - Fix migration to handle possible not null for TCP, UDP, and ICMP - Fix broken underlined font rendering in FireFox browsers - Fix migration to calculate actual resource status - Fix health check input to only allow Newt sites - Fix don't show site online status for local sites - Fix scrape certs from ALL resolvers - Other small visual fixes and improvements **Full Changelog**: https://github.com/fosrl/pangolin/compare/1.18.0...1.18.1 ## How to Update For Pangolin Enterprise: the server now scrapes in the certificates from Treafik's acme.json file. On default installs, this should work out of the box importing from `config/letsencrypt/acme.json` which is mounted into the container. **If your Traefik acme.json file is not mounted into this default location [update the config in privateConfig.yml](https://docs.pangolin.net/self-host/advanced/private-config-file#acme-configuration)** > [!IMPORTANT] > Always back up your config app-data before updating. This will allow you to easily roll back if the update breaks your configuration. You will not be able to easily downgrade otherwise. [View documentation](https://docs.pangolin.net/self-host/how-to-update)

## What's Changed - Fix bug preventing a site with existing resource targets from being deleted **Full Changelog**: https://github.com/fosrl/pangolin/compare/1.10.0...1.10.1 ## How to Update > [!IMPORTANT] > Always back up your config app-data before updating. This will allow you to easily roll back if the update breaks your configuration. You will not be able to easily downgrade otherwise. [View documentation](https://docs.digpangolin.com/self-host/how-to-update)

## What's Changed - Add Pangolin SSH auth-daemon support: https://docs.pangolin.net/manage/ssh - Add list of accessible private resources to non-admin/member landing page - Add server side pagination, filter, sort, and search to major tables - Add support pathname in logo URL for branding - Add delete account from profile - Add improved user prompt dialogs to installer script - Other minor bug fixes and visual enhancements ## New Contributors * @Abhinav-kodes made their first contribution in https://github.com/fosrl/pangolin/pull/2535 * @rodneyosodo made their first contribution in https://github.com/fosrl/pangolin/pull/2491 **Full Changelog**: https://github.com/fosrl/pangolin/compare/1.15.4...1.16.0 ## How to Update > [!IMPORTANT] > Always back up your config app-data before updating. This will allow you to easily roll back if the update breaks your configuration. You will not be able to easily downgrade otherwise. [View documentation](https://docs.pangolin.net/self-host/how-to-update)

## RC A Release Candidate (RC) is a near-final software version, stable but undergoing last tests before official release. It has all features and no known bugs. * Users: Use cautiously due to potential undiscovered bugs. Not for critical systems unless prepared for issues. Report bugs. * Developers/Testers: Perform crucial final validation and thorough testing, especially of recent changes, to catch last-minute major issues. * Backup: Always back up data before installing an RC to allow rollback if problems arise. * Feedback: Provide feedback; it's vital for a robust final release. ## What's Changed - Add Pangolin SSH auth-daemon support: - Add list of accessible private resources to non-admin/member landing page - Add server side pagination, filter, sort, and search to major tables - Add support pathname in logo URL for branding - Add delete account from profile - Add improved user prompt dialogs to installer script - Other minor bug fixes and visual enhancements ## New Contributors * @Abhinav-kodes made their first contribution in https://github.com/fosrl/pangolin/pull/2535 * @rodneyosodo made their first contribution in https://github.com/fosrl/pangolin/pull/2491 **Full Changelog**: https://github.com/fosrl/pangolin/compare/1.15.4...1.16.0-rc.0 ## How to Update > [!IMPORTANT] > Always back up your config app-data before updating. This will allow you to easily roll back if the update breaks your configuration. You will not be able to easily downgrade otherwise. [View documentation](https://docs.pangolin.net/self-host/how-to-update)

## What's Changed - Use `fosrl/pangolin-cli` container in Machine Client install commands - Fix newly created site not showing in private resource site dropdown **Full Changelog**: https://github.com/fosrl/pangolin/compare/1.15.3...1.15.4