Secure Your

Looking for the safest and most reliable way to access your homelab from anywhere without exposing your entire network or relying on risky port forwarding? In this step-by-step guide, I show you how to build a zero-trust reverse proxy using Pangolin, Traefik, #wireguard , #Let’sEncrypt, and #proxmox to securely publish internal apps like FreshRSS, Uptime Kuma, #portainer, Home Assistant, #nextcloud , #jellyfin ellyfin, and more.

This setup uses a Pangolin Hub on a VPS, Namecheap DNS, Traefik for automated HTTPS, and a Newt + Gerbil WireGuard tunnel that creates a fully encrypted path back into your homelab—ensuring your internal apps stay private while remaining securely accessible at a public URL.
We deploy FreshRSS inside a lightweight Proxmox VM using Docker Compose, then connect it to Pangolin so Traefik can handle SSL certs, routing, and identity-based access. The result: a clean, scalable, production-style setup for hosting any self-hosted service without ever opening a port.

Here is a link to go the guide: https://docs.pangolin.net/self-host/q...

You’ll learn how to:
• Build a secure zero-trust homelab using Pangolin & Traefik
• Automate HTTPS with Let’s Encrypt and Namecheap DNS-01
• Use WireGuard tunnels for private external access
• Expose services safely online
• Deploy FreshRSS as a self-hosted RSS reader
• Scale the setup to any internal app

Ready to build your homelab? Visit: https://store.45homelab.com/configure... Configure your HL15 2.0 today. https://store.45homelab.com/configure... Configure your HL15

Beast today. Stay Connected Follow Us on Social:
Instagram:   / 45homelab  
Facebook:   / 45homelab-61577345404910  
X: https://www.x.com/45homelab

To be the first to receive 45HomeLab announcements, news, and events, subscribe to the 45HomeLab newsletter here: https://45homelab.com/#footer-heading.

Like the video, leave a comment, and subscribe for more homelab deep dives.

#zfs #proxmox #opensource #selfhosted #pangolin #tech #techtutorial #45homelab