Pangolin

Pangolin is a self-hosted zero trust access platform that reverse proxies and tunnels traffic to services spread across your networks, with a dashboard for users, sites and resources. It builds WireGuard tunnels so remote sites reach the server without opening ports, issues Let's Encrypt certificates, and puts SSO, TOTP and per resource rules in front of HTTP, SSH and TCP services.

It fits a homelab or small company that wants Cloudflare Tunnel style exposure and identity aware access on a server it owns.

Running the control plane yourself keeps the resource list, identity rules and audit trail in your infrastructure, with no per-user pricing and no third party deciding who may reach what.