From a24dd370dc6ee769b7f379379c6f3b16392e1e1b Mon Sep 17 00:00:00 2001 From: admin Date: Sat, 21 Feb 2026 10:04:34 +0100 Subject: [PATCH] docs(tunnel): allgemeines Setup --- docs/network/tunnel.md | 73 ++++++++++++++++++++++++++++++++++++++++-- 1 file changed, 71 insertions(+), 2 deletions(-) diff --git a/docs/network/tunnel.md b/docs/network/tunnel.md index b3a84a8..9338183 100644 --- a/docs/network/tunnel.md +++ b/docs/network/tunnel.md @@ -1,5 +1,74 @@ -##Tunnel +# Pangolin-Tunnel: Zugriff über Hetzner + +## Sicherheits-Setup + +``` + +------------------+ + | Internet | + +--------+---------+ + | + | TCP 80 / 443 + v ++------------------------------------------------------------------+ +| Hetzner Server | +| seanluc1 | +| | +| +------------+ shared docker network +---------------+ | +| | Traefik | <--------------------------> | CrowdSec | | +| | v3.4.1 | | LAPI | | +| | | | | | +| | :80 :443 | | Decisions | | +| | :8080 | | (CAPI) | | +| +------+-----+ +---------------+ | +| | | +| | dynamic config (file provider) | +| v | +| +-----------------------------------------------------------+ | +| | Pangolin | | +| | v1.14.1 | | +| | | | +| | Web UI :3002 | | +| | API :3000 | | +| | Internal API :3001 | | +| | | | +| | - generates Traefik routers | | +| | - manages resources | | +| | - controls Gerbil / Newt | | +| +-----------+-----------------------------------------------+ | +| | | +| | WireGuard control | +| v | +| +-----------------------------------------------------------+ | +| | Gerbil | | +| | | | +| | WireGuard Exit Node | | +| | wg0: 100.89.128.1/24 | | +| | Control API :3003 | | +| | | | +| | - terminates tunnel | | +| | - forwards TCP ports | | +| +-----------+-----------------------------------------------+ | +| | | ++---------------|--------------------------------------------------+ + | + | WireGuard tunnel (encrypted) + v ++------------------------------------------------------------------+ +| Local Network (LAN) | +| | +| +-------------+ +------------------------------------+ | +| | Newt | | Target Services | | +| | | | | | +| | wg IP | | Home Assistant | | +| | 100.89.128.4| | 192.168.178.203:8123 | | +| | | | | | +| | TCP Proxy | | Wiki / Bitwarden | | +| +-------------+ +------------------------------------+ | +| | ++------------------------------------------------------------------+ +``` + + -#Sicherheits-Setup