So, I’m trying to get pangolin up and running.
What I have: Ubuntu server running in proxmox, docker running on that Ubuntu, dynamic IP, duckdns in docker to counter that, domain name
What I did: installed pangolin with the installation script, said yes to crowdsec because it looked like the safest option (over time) even if I don’t know what it is/does, set a CNAME from pangolin.mydomain.com to my.duckdns.org, set a port forward for ports 80 and 443 on TCP and for port 51520 on UDP
What is happening: well, fairly, not much. If I test it from outside the network, I get a connection refused. If I test it locally (in portainer click on the 443 or 80 port) I get page not found
What I want: I want it to just work without a hastle and hope one of you can help me out here, cause I’m starting to lose my mind
According to the docs, you should be using UDP port 51820 (unless you changed the port in the docker compose file).
You should also check the dynamic config file to be sure that it’s using the correct domain name. See this page: https://docs.fossorial.io/Getting%20Started/Manual%20Install%20Guides/docker-compose
If you’re still having issues, make sure the containers are running with
docker compose stats
and check the logs withdocker compose logs -f
. It might also be worth checking the domain name to be sure that it’s resolving to the correct IP address, both locally and externally.Just to clarify. I have 80 and 443 as TCP and 51820 (sorry for the typo) as UDP. I used the automatic installer script. Doesn’t that generate the config files? If not, then probably there lies my problem.
As a sanity check, I just completed the same setup that you described (Ubuntu Server 24.04 running in a Proxmox VM, Domain name pointing to a CNAME that points to the Dynamic IP, using the installer script, enabled CrowdSec, etc.), and everything worked out of the box. A couple of things I noticed that would also be worth checking now that I’m more familiar with this specific setup are:
dig pangolin.mydomain.com
ordig @1.1.1.1 pangolin.mydomain.com
should show the CNAME that points to the A record.I hope that helps!
The script should take care of that config, but it’s something to check just in case there was a typo or anything else like that.
Did you check to make sure the DNS records are resolving properly?