Add native support for Pangolin (self-hosted alternative to Cloudflare Tunnel)

[andrea-tr2]

Many Dokploy users rely on Cloudflare Tunnel snippets to publish services without opening ports, yet that path still depends on Cloudflare's SaaS.

Pangolin achieves the same outward-facing tunnel while remaining fully self-hosted. It runs its own WireGuard relay, exposes private resources through a single outbound connection, and includes the access controls that ordinarily require Cloudflare Access: per-path, role and IP rules, one-time share links, native OIDC (Logto, ZITADEL, Authentik, Keycloak) and forwarding for any single-port TCP or UDP service in addition to HTTP/HTTPS.

Repo: https://github.com/fosrl/pangolin

Integrating Pangolin mainly involves a lightweight Newt container - https://github.com/fosrl/newt (Pangolin's WireGuard tunnel client, functionally similar to cloudflared.)

[dev-Blaze]

Would love to see this implemented

[poyasyn]

would be genuinely awesome! pangolin seems to be the straight up OS default and alternative for Cloudflare and the team is super positively interactive with community, seems like a stable relationship

[Siumauricio]

Maybe we need to add some docs about this, cloudflare tunnels are working fine docs incoming Dokploy/website#95

[leadvic]

I also think it's a really good idea. That way I can easily deploy services on servers that don't have acess to open ports easily, hopefully dokploy+pangolin and the remote servers features of dokploy; it would be so awesome to see!!