Update Pangolin to v1.11.0

cd8062ada3

.dockerignore

@@ -26,3 +26,7 @@ install/
 bruno/
 LICENSE
 CONTRIBUTING.md
+dist
+.git
+migrations/
+config/

.github/DISCUSSION_TEMPLATE/feature-requests.yml

@@ -0,0 +1,47 @@
+body:
+    - type: textarea
+      attributes:
+          label: Summary
+          description: A clear and concise summary of the requested feature.
+      validations:
+          required: true
+
+    - type: textarea
+      attributes:
+          label: Motivation
+          description: |
+              Why is this feature important?
+              Explain the problem this feature would solve or what use case it would enable.
+      validations:
+          required: true
+
+    - type: textarea
+      attributes:
+          label: Proposed Solution
+          description: |
+              How would you like to see this feature implemented?
+              Provide as much detail as possible about the desired behavior, configuration, or changes.
+      validations:
+          required: true
+
+    - type: textarea
+      attributes:
+          label: Alternatives Considered
+          description: Describe any alternative solutions or workarounds you've thought about.
+      validations:
+          required: false
+
+    - type: textarea
+      attributes:
+          label: Additional Context
+          description: Add any other context, mockups, or screenshots about the feature request here.
+      validations:
+          required: false
+
+    - type: markdown
+      attributes:
+          value: |
+              Before submitting, please:
+              - Check if there is an existing issue for this feature.
+              - Clearly explain the benefit and use case.
+              - Be as specific as possible to help contributors evaluate and implement.

.github/ISSUE_TEMPLATE/1.bug_report.yml

@@ -0,0 +1,51 @@
+name: Bug Report
+description: Create a bug report
+labels: []
+body:
+    - type: textarea
+      attributes:
+          label: Describe the Bug
+          description: A clear and concise description of what the bug is.
+      validations:
+          required: true
+
+    - type: textarea
+      attributes:
+          label: Environment
+          description: Please fill out the relevant details below for your environment.
+          value: |
+              - OS Type & Version: (e.g., Ubuntu 22.04)
+              - Pangolin Version:
+              - Gerbil Version:
+              - Traefik Version:
+              - Newt Version:
+              - Olm Version: (if applicable)
+      validations:
+          required: true
+
+    - type: textarea
+      attributes:
+          label: To Reproduce
+          description: |
+              Steps to reproduce the behavior, please provide a clear description of how to reproduce the issue, based on the linked minimal reproduction. Screenshots can be provided in the issue body below.
+
+              If using code blocks, make sure syntax highlighting is correct and double-check that the rendered preview is not broken.
+      validations:
+          required: true
+
+    - type: textarea
+      attributes:
+          label: Expected Behavior
+          description: A clear and concise description of what you expected to happen.
+      validations:
+          required: true
+
+    - type: markdown
+      attributes:
+          value: |
+              Before posting the issue go through the steps you've written down to make sure the steps provided are detailed and clear.
+
+    - type: markdown
+      attributes:
+          value: |
+              Contributors should be able to follow the steps provided in order to reproduce the bug.

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,8 @@
+blank_issues_enabled: false
+contact_links:
+    - name: Need help or have questions?
+      url: https://github.com/orgs/fosrl/discussions
+      about: Ask questions, get help, and discuss with other community members
+    - name: Request a Feature
+      url: https://github.com/orgs/fosrl/discussions/new?category=feature-requests
+      about: Feature requests should be opened as discussions so others can upvote and comment

.github/dependabot.yml

@@ -0,0 +1,62 @@
+version: 2
+updates:
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    groups:
+      dev-patch-updates:
+        dependency-type: "development"
+        update-types:
+          - "patch"
+      dev-minor-updates:
+        dependency-type: "development"
+        update-types:
+          - "minor"
+      prod-patch-updates:
+        dependency-type: "production"
+        update-types:
+          - "patch"
+      prod-minor-updates:
+        dependency-type: "production"
+        update-types:
+          - "minor"
+          
+  - package-ecosystem: "docker"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    groups:
+      patch-updates:
+        update-types:
+          - "patch"
+      minor-updates:
+        update-types:
+          - "minor"
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+
+  - package-ecosystem: "gomod"
+    directory: "/install"
+    schedule:
+      interval: "daily"
+    groups:
+      dev-patch-updates:
+        dependency-type: "development"
+        update-types:
+          - "patch"
+      dev-minor-updates:
+        dependency-type: "development"
+        update-types:
+          - "minor"
+      prod-patch-updates:
+        dependency-type: "production"
+        update-types:
+          - "patch"
+      prod-minor-updates:
+        dependency-type: "production"
+        update-types:
+          - "minor"

.github/workflows/cicd.yml

@@ -3,22 +3,22 @@ name: CI/CD Pipeline
 on:
     push:
         tags:
-            - "*"
+            - "[0-9]+.[0-9]+.[0-9]+"
 
 jobs:
     release:
         name: Build and Release
-        runs-on: ubuntu-latest
+        runs-on: amd64-runner
 
         steps:
             - name: Checkout code
-              uses: actions/checkout@v3
+              uses: actions/checkout@v5
 
             - name: Set up Docker Buildx
-              uses: docker/setup-buildx-action@v2
+              uses: docker/setup-buildx-action@v3
 
             - name: Log in to Docker Hub
-              uses: docker/login-action@v2
+              uses: docker/login-action@v3
               with:
                   username: ${{ secrets.DOCKER_HUB_USERNAME }}
                   password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}
@@ -28,9 +28,9 @@ jobs:
               run: echo "TAG=${GITHUB_REF#refs/tags/}" >> $GITHUB_ENV
 
             - name: Install Go
-              uses: actions/setup-go@v4
+              uses: actions/setup-go@v6
               with:
-                  go-version: 1.23.0
+                  go-version: 1.24
 
             - name: Update version in package.json
               run: |

.github/workflows/linting.yml

@@ -0,0 +1,35 @@
+name: ESLint
+
+on:
+    pull_request:
+        paths:
+            - '**/*.js'
+            - '**/*.jsx'
+            - '**/*.ts'
+            - '**/*.tsx'
+            - '.eslintrc*'
+            - 'package.json'
+            - 'yarn.lock'
+            - 'pnpm-lock.yaml'
+            - 'package-lock.json'
+
+jobs:
+    Linter:
+        runs-on: ubuntu-latest
+        steps:
+            - name: Checkout code
+              uses: actions/checkout@v5
+
+            - name: Set up Node.js
+              uses: actions/setup-node@v5
+              with:
+                node-version: '22'
+
+            - name: Install dependencies
+              run: npm ci
+
+            - name: Create build file
+              run: npm run set:oss
+
+            - name: Run ESLint
+              run: npx eslint . --ext .js,.jsx,.ts,.tsx

.github/workflows/stale-bot.yml

@@ -14,7 +14,7 @@ jobs:
   stale:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/stale@v9
+      - uses: actions/stale@v10
         with:
           days-before-stale: 14
           days-before-close: 14

.github/workflows/test.yml

@@ -0,0 +1,61 @@
+name: Run Tests
+
+on:
+  pull_request:
+    branches:
+      - main
+      - dev
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v5
+
+      - uses: actions/setup-node@v5
+        with:
+          node-version: '22'
+
+      - name: Copy config file
+        run: cp config/config.example.yml config/config.yml
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Create database index.ts
+        run: npm run set:sqlite
+
+      - name: Create build file
+        run: npm run set:oss
+
+      - name: Generate database migrations
+        run: npm run db:sqlite:generate
+
+      - name: Apply database migrations
+        run: npm run db:sqlite:push
+
+      - name: Test with tsc
+        run: npx tsc --noEmit
+
+      - name: Start app in background
+        run: nohup npm run dev &
+
+      - name: Wait for app availability
+        run: |
+          for i in {1..5}; do
+            if curl --silent --fail http://localhost:3002/auth/login; then
+              echo "App is up"
+              exit 0
+            fi
+            echo "Waiting for the app... attempt $i"
+            sleep 5
+          done
+          echo "App failed to start"
+          exit 1
+
+      - name: Build Docker image sqlite
+        run: make build-sqlite
+
+      - name: Build Docker image pg
+        run: make build-pg

.gitignore

@@ -18,6 +18,7 @@ yarn-error.log*
 next-env.d.ts
 *.db
 *.sqlite
+!Dockerfile.sqlite
 *.sqlite3
 *.log
 .machinelogs*.json
@@ -25,6 +26,14 @@ next-env.d.ts
 migrations
 tsconfig.tsbuildinfo
 config/config.yml
+config/config.saas.yml
+config/config.oss.yml
+config/config.enterprise.yml
+config/privateConfig.yml
+config/postgres
+config/postgres*
+config/openapi.yaml
+config/key
 dist
 .dist
 installer
@@ -32,4 +41,11 @@ installer
 bin
 .secrets
 test_event.json
-.idea/
+.idea/
+public/branding
+server/db/index.ts
+postgres/
+dynamic/
+*.mmdb
+scratch/
+/tmp

.nvmrc

@@ -1 +1 @@
-20
+22

CONTRIBUTING.md

@@ -4,11 +4,7 @@ Contributions are welcome!
 
 Please see the contribution and local development guide on the docs page before getting started:
 
-https://docs.fossorial.io/development
+https://docs.digpangolin.com/development/contributing
-
-For ideas about what features to work on and our future plans, please see the roadmap:
-
-https://docs.fossorial.io/roadmap
 
 ### Licensing Considerations
 

Dockerfile

@@ -1,34 +1,55 @@
-FROM node:20-alpine AS builder
+FROM node:22-alpine AS builder
 
 WORKDIR /app
 
-COPY package.json package-lock.json ./
+ARG DATABASE=sqlite
-RUN npm install
+
+# COPY package.json package-lock.json ./
+COPY package*.json ./
+RUN apk update && apk add python3
+RUN npm ci
 
 COPY . .
 
-RUN npx drizzle-kit generate --dialect sqlite --schema ./server/db/schemas/ --out init
+RUN echo "export * from \"./$DATABASE\";" > server/db/index.ts
 
-RUN npm run build
+RUN if [ "$DATABASE" = "pg" ]; then npx drizzle-kit generate --dialect postgresql --schema ./server/db/pg/schema --out init; else npx drizzle-kit generate --dialect $DATABASE --schema ./server/db/$DATABASE/schema --out init; fi
 
-FROM node:20-alpine AS runner
+RUN mkdir -p dist
+RUN npm run next:build
+RUN node esbuild.mjs -e server/index.ts -o dist/server.mjs
+RUN if [ "$DATABASE" = "pg" ]; then \
+        node esbuild.mjs -e server/setup/migrationsPg.ts -o dist/migrations.mjs; \
+    else \
+        node esbuild.mjs -e server/setup/migrationsSqlite.ts -o dist/migrations.mjs; \
+    fi
+
+# test to make sure the build output is there and error if not
+RUN test -f dist/server.mjs
+
+RUN npm run build:cli
+
+FROM node:22-alpine AS runner
 
 WORKDIR /app
 
 # Curl used for the health checks
-RUN apk add --no-cache curl
+RUN apk add --no-cache curl tzdata
 
 # COPY package.json package-lock.json ./
-COPY package.json ./
+COPY package*.json ./
-RUN npm install --omit=dev && npm cache clean --force
+
+RUN npm ci --omit=dev && npm cache clean --force
 
 COPY --from=builder /app/.next/standalone ./
 COPY --from=builder /app/.next/static ./.next/static
 COPY --from=builder /app/dist ./dist
 COPY --from=builder /app/init ./dist/init
 
-COPY server/db/names.json ./dist/names.json
+COPY ./cli/wrapper.sh /usr/local/bin/pangctl
+RUN chmod +x /usr/local/bin/pangctl ./dist/cli.mjs
 
+COPY server/db/names.json ./dist/names.json
 COPY public ./public
 
-CMD ["npm", "start"]
+CMD ["npm", "run", "start"]

Dockerfile.dev

@@ -0,0 +1,14 @@
+FROM node:22-alpine
+
+WORKDIR /app
+
+COPY package*.json ./
+
+# Install dependencies
+RUN npm ci
+
+# Copy source code
+COPY . .
+
+# Use tsx watch for development with hot reload
+CMD ["npm", "run", "dev"]

LICENSE

@@ -1,5 +1,3 @@
-Copyright (c) 2025 Fossorial, LLC.
-
                     GNU AFFERO GENERAL PUBLIC LICENSE
                        Version 3, 19 November 2007
 

Makefile

@@ -1,10 +1,48 @@
+.PHONY: build build-pg build-release build-arm build-x86 test clean
+
+major_tag := $(shell echo $(tag) | cut -d. -f1)
+minor_tag := $(shell echo $(tag) | cut -d. -f1,2)
 build-release:
 	@if [ -z "$(tag)" ]; then \
-		echo "Error: tag is required. Usage: make build-all tag=<tag>"; \
+		echo "Error: tag is required. Usage: make build-release tag=<tag>"; \
 		exit 1; \
 	fi
-	docker buildx build --platform linux/arm64,linux/amd64 -t fosrl/pangolin:latest -f Dockerfile --push .
+	docker buildx build \
-	docker buildx build --platform linux/arm64,linux/amd64 -t fosrl/pangolin:$(tag) -f Dockerfile --push .
+		--build-arg BUILD=oss \
+		--build-arg DATABASE=sqlite \
+		--platform linux/arm64,linux/amd64 \
+		--tag fosrl/pangolin:latest \
+		--tag fosrl/pangolin:$(major_tag) \
+		--tag fosrl/pangolin:$(minor_tag) \
+		--tag fosrl/pangolin:$(tag) \
+		--push .
+	docker buildx build \
+		--build-arg BUILD=oss \
+		--build-arg DATABASE=pg \
+		--platform linux/arm64,linux/amd64 \
+		--tag fosrl/pangolin:postgresql-latest \
+		--tag fosrl/pangolin:postgresql-$(major_tag) \
+		--tag fosrl/pangolin:postgresql-$(minor_tag) \
+		--tag fosrl/pangolin:postgresql-$(tag) \
+		--push .
+	docker buildx build \
+		--build-arg BUILD=enterprise \
+		--build-arg DATABASE=sqlite \
+		--platform linux/arm64,linux/amd64 \
+		--tag fosrl/pangolin:ee-latest \
+		--tag fosrl/pangolin:ee-$(major_tag) \
+		--tag fosrl/pangolin:ee-$(minor_tag) \
+		--tag fosrl/pangolin:ee-$(tag) \
+		--push .
+	docker buildx build \
+		--build-arg BUILD=enterprise \
+		--build-arg DATABASE=pg \
+		--platform linux/arm64,linux/amd64 \
+		--tag fosrl/pangolin:ee-postgresql-latest \
+		--tag fosrl/pangolin:ee-postgresql-$(major_tag) \
+		--tag fosrl/pangolin:ee-postgresql-$(minor_tag) \
+		--tag fosrl/pangolin:ee-postgresql-$(tag) \
+		--push .
 
 build-arm:
 	docker buildx build --platform linux/arm64 -t fosrl/pangolin:latest .
@@ -12,8 +50,11 @@ build-arm:
 build-x86:
 	docker buildx build --platform linux/amd64 -t fosrl/pangolin:latest .
 
-build:
+build-sqlite:
-	docker build -t fosrl/pangolin:latest .
+	docker build --build-arg DATABASE=sqlite -t fosrl/pangolin:latest .
+
+build-pg:
+	docker build --build-arg DATABASE=pg -t fosrl/pangolin:postgresql-latest .
 
 test:
 	docker run -it -p 3000:3000 -p 3001:3001 -p 3002:3002 -v ./config:/app/config fosrl/pangolin:latest

README.md

@@ -1,152 +1,91 @@
 <div align="center">
-    <h2 align="center"><a href="https://fossorial.io"><img alt="pangolin" src="public/logo//word_mark.png" width="400" /></a></h2>
+    <h2>
-
+    <a href="https://digpangolin.com">
-[![Documentation](https://img.shields.io/badge/docs-latest-blue.svg?style=flat-square)](https://docs.fossorial.io/)
+        <picture>
-[![Docker](https://img.shields.io/docker/pulls/fosrl/pangolin?style=flat-square)](https://hub.docker.com/r/fosrl/pangolin)
+            <source media="(prefers-color-scheme: dark)" srcset="public/logo/word_mark_white.png">
-![Stars](https://img.shields.io/github/stars/fosrl/pangolin?style=flat-square)
+            <img alt="Pangolin Logo" src="public/logo/word_mark_black.png" width="350">
-[![Discord](https://img.shields.io/discord/1325658630518865980?logo=discord&style=flat-square)](https://discord.gg/HCJR8Xhme4)
+        </picture>
-[![Youtube](https://img.shields.io/badge/YouTube-red?logo=youtube&logoColor=white&style=flat-square)](https://www.youtube.com/@fossorial-app)
+    </a>
-
+    </h2>
-</div>
-
-<h3 align="center">Tunneled Mesh Reverse Proxy Server with Access Control</h3>
-<div align="center">
-
-_Your own self-hosted zero trust tunnel._
-
 </div>
 
 <div align="center">
   <h5>
-      <a href="https://fossorial.io">
+      <a href="https://digpangolin.com">
         Website
       </a>
       <span> | </span>
-      <a href="https://docs.fossorial.io/Getting%20Started/quick-install">
+      <a href="https://docs.digpangolin.com/">
-        Install Guide
+        Documentation
       </a>
       <span> | </span>
-      <a href="mailto:numbat@fossorial.io">
+      <a href="mailto:contact@fossorial.io">
         Contact Us
       </a>
   </h5>
 </div>
 
-Pangolin is a self-hosted tunneled reverse proxy server with identity and access control, designed to securely expose private resources on distributed networks. Acting as a central hub, it connects isolated networks — even those behind restrictive firewalls — through encrypted tunnels, enabling easy access to remote services without opening ports.
+<div align="center">
 
-<img src="public/screenshots/hero.png" alt="Preview"/>
+[![Discord](https://img.shields.io/discord/1325658630518865980?logo=discord&style=flat-square)](https://discord.gg/HCJR8Xhme4)
+[![Slack](https://img.shields.io/badge/chat-slack-yellow?style=flat-square&logo=slack)](https://digpangolin.com/slack)
+[![Docker](https://img.shields.io/docker/pulls/fosrl/pangolin?style=flat-square)](https://hub.docker.com/r/fosrl/pangolin)
+![Stars](https://img.shields.io/github/stars/fosrl/pangolin?style=flat-square)
+[![YouTube](https://img.shields.io/badge/YouTube-red?logo=youtube&logoColor=white&style=flat-square)](https://www.youtube.com/@fossorial-app)
 
-_Resources page of Pangolin dashboard (dark mode) showing multiple resources available to connect._
+</div>
+
+<p align="center">
+    <strong>
+        Start testing Pangolin at <a href="https://pangolin.fossorial.io/auth/signup">pangolin.fossorial.io</a>
+    </strong>
+</p>
+
+Pangolin is a self-hosted tunneled reverse proxy server with identity and context aware access control, designed to easily expose and protect applications running anywhere. Pangolin acts as a central hub and connects isolated networks — even those behind restrictive firewalls — through encrypted tunnels, enabling easy access to remote services without opening ports or requiring a VPN.
 
 This is a fork of Pangolin with all proprietary code removed. Proprietary and paywalled features
 will be reimplemented under the AGPL license.
 
+## Installation
+
+Check out the [quick install guide](https://docs.digpangolin.com/self-host/quick-install) for how to install and set up Pangolin.
+
+## Deployment Options
+
+| <img width=500 /> | Description |
+|-----------------|--------------|
+| **Self-Host: Community Edition** | Free, open source, and licensed under AGPL-3. |
+| **Self-Host: Enterprise Edition** | Licensed under Fossorial Commercial License. Free for personal and hobbyist use, and for businesses earning under \$100K USD annually. |
+| **Pangolin Cloud** | Fully managed service with instant setup and pay-as-you-go pricing — no infrastructure required. Or, self-host your own [remote node](https://docs.digpangolin.com/manage/remote-node/nodes) and connect to our control plane. |
+
 ## Key Features
 
-### Reverse Proxy Through WireGuard Tunnel
+Pangolin packages everything you need for seamless application access and exposure into one cohesive platform.
 
-- Expose private resources on your network **without opening ports** (firewall punching).
+| <img width=500 />                                                                                                                                                                                                                                                                                                                                                                | <img width=500 />                                                  |
-- Secure and easy to configure site-to-site connectivity via a custom **user space WireGuard client**, [Newt](https://github.com/fosrl/newt).
+|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------|
-- Built-in support for any WireGuard client.
+| **Manage applications in one place**<br /><br /> Pangolin provides a unified dashboard where you can monitor, configure, and secure all of your services regardless of where they are hosted.                                                                                                                                                                                    | <img src="public/screenshots/hero.png" width=500 /><tr></tr> |
-- Automated **SSL certificates** (https) via [LetsEncrypt](https://letsencrypt.org/).
+| **Reverse proxy across networks anywhere**<br /><br />Route traffic via tunnels to any private network. Pangolin works like a reverse proxy that spans multiple networks and handles routing, load balancing, health checking, and more to the right services on the other end.                                                                                                  | <img src="public/screenshots/sites.png" width=500 /><tr></tr>          |
-- Support for HTTP/HTTPS and **raw TCP/UDP services**.
+| **Enforce identity and context aware rules**<br /><br />Protect your applications with identity and context aware rules such as SSO, OIDC, PIN, password, temporary share links, geolocation, IP, and more.                                                                                                                                                                                                | <img src="public/auth-diagram1.png" width=500 /><tr></tr>               |
-- Load balancing.
+| **Quickly connect Pangolin sites**<br /><br />Pangolin's lightweight [Newt](https://github.com/fosrl/newt) client runs in userspace and can run anywhere. Use it as a site connector to route traffic to backends across all of your environments.                                                                                                                                                                                   | <img src="public/clip.gif" width=500 /><tr></tr>               |
 
-### Identity & Access Management
+## Get Started
 
-- Centralized authentication system using platform SSO. **Users will only have to manage one login.**
+### Check out the docs
-- **Define access control rules for IPs, IP ranges, and URL paths per resource.**
-- TOTP with backup codes for two-factor authentication.
-- Create organizations, each with multiple sites, users, and roles.
-- **Role-based access control** to manage resource access permissions.
-- Additional authentication options include:
-    - Email whitelisting with **one-time passcodes.**
-    - **Temporary, self-destructing share links.**
-    - Resource specific pin codes.
-    - Resource specific passwords.
-- External identity provider (IdP) support with OAuth2/OIDC, such as Authentik, Keycloak, Okta, and others.
-    - Auto-provision users and roles from your IdP.
 
-### Simple Dashboard UI
+We encourage everyone to read the full documentation first, which is
+available at [docs.digpangolin.com](https://docs.digpangolin.com). This README provides only a very brief subset of
+the docs to illustrate some basic ideas.
 
-- Manage sites, users, and roles with a clean and intuitive UI.
+### Sign up and try now
-- Monitor site usage and connectivity.
-- Light and dark mode options.
-- Mobile friendly.
 
-### Easy Deployment
+For Pangolin's managed service, you will first need to create an account at
-
+[pangolin.fossorial.io](https://pangolin.fossorial.io). We have a generous free tier to get started.
-- Run on any cloud provider or on-premises.
-- **Docker Compose based setup** for simplified deployment.
-- Future-proof installation script for streamlined setup and feature additions.
-- Use any WireGuard client to connect, or use **Newt, our custom user space client** for the best experience.
-- Use the API to create custom integrations and scripts.
-    - Fine-grained access control to the API via scoped API keys.
-    - Comprehensive Swagger documentation for the API.
-
-### Modular Design
-
-- Extend functionality with existing [Traefik](https://github.com/traefik/traefik) plugins, such as [CrowdSec](https://plugins.traefik.io/plugins/6335346ca4caa9ddeffda116/crowdsec-bouncer-traefik-plugin) and [Geoblock](github.com/PascalMinder/geoblock).
-    - **Automatically install and configure Crowdsec via Pangolin's installer script.**
-- Attach as many sites to the central server as you wish.
-
-<img src="public/screenshots/collage.png" alt="Collage"/>
-
-## Deployment and Usage Example
-
-1. **Deploy the Central Server**:
-
-    - Deploy the Docker Compose stack onto a VPS hosted on a cloud platform like RackNerd, Amazon EC2, DigitalOcean Droplet, or similar. There are many cheap VPS hosting options available to suit your needs.
-
-> [!TIP]
-> Many of our users have had a great experience with [RackNerd](https://my.racknerd.com/aff.php?aff=13788). Depending on promotions, you can likely get a **VPS with 1 vCPU, 1GB RAM, and ~20GB SSD for just around $12/year**. That's a great deal!
-> We are part of the [RackNerd](https://my.racknerd.com/aff.php?aff=13788) affiliate program, so if you purchase through [our link](https://my.racknerd.com/aff.php?aff=13788), we receive a small commission which helps us maintain the project and keep it free for everyone.
-
-2. **Domain Configuration**:
-
-    - Point your domain name to the VPS and configure Pangolin with your preferred settings.
-
-3. **Connect Private Sites**:
-
-    - Install Newt or use another WireGuard client on private sites.
-    - Automatically establish a connection from these sites to the central server.
-
-4. **Expose Resources**:
-
-    - Add resources to the central server and configure access control rules.
-    - Access these resources securely from anywhere.
-
-**Use Case Example - Bypassing Port Restrictions in Home Lab**:  
- Imagine private sites where the ISP restricts port forwarding. By connecting these sites to Pangolin via WireGuard, you can securely expose HTTP and HTTPS resources on the private network without any networking complexity.
-
-**Use Case Example - Deploying Services For Your Business**:
-You can use Pangolin as an easy way to expose your business applications to your users behind a safe authentication portal you can integrate into your IdP solution. Expose resources on prem and on the cloud.
-
-**Use Case Example - IoT Networks**:  
- IoT networks are often fragmented and difficult to manage. By deploying Pangolin on a central server, you can connect all your IoT sites via Newt or another WireGuard client. This creates a simple, secure, and centralized way to access IoT resources without the need for intricate networking setups.
-
-## Similar Projects and Inspirations
-
-**Cloudflare Tunnels**:  
- A similar approach to proxying private resources securely, but Pangolin is a self-hosted alternative, giving you full control over your infrastructure.
-
-**Authelia**:  
- This inspired Pangolin’s centralized authentication system for proxies, enabling robust user and role management.
-
-## Project Development / Roadmap
-
-> [!NOTE]
-> Pangolin is under heavy development. The roadmap is subject to change as we fix bugs, add new features, and make improvements.
-
-View the [project board](https://github.com/orgs/fosrl/projects/1) for more detailed info.
 
 ## Licensing
 
-Pangolin is dual licensed under the AGPL-3 and the Fossorial Commercial license. Please see the [LICENSE](./LICENSE) file in the repository for details. For inquiries about commercial licensing, please contact us at [numbat@fossorial.io](mailto:numbat@fossorial.io).
+Pangolin is dual licensed under the AGPL-3 and the [Fossorial Commercial License](https://digpangolin.com/fcl.html). For inquiries about commercial licensing, please contact us at [contact@fossorial.io](mailto:contact@fossorial.io).
 
 ## Contributions
 
 Please see [CONTRIBUTING](./CONTRIBUTING.md) in the repository for guidelines and best practices.
-
-Please post bug reports and other functional issues in the [Issues](https://github.com/fosrl/pangolin/issues) section of the repository.
-For all feature requests, or other ideas, please use the [Discussions](https://github.com/orgs/fosrl/discussions) section.

blueprint.py

@@ -0,0 +1,72 @@
+import requests
+import yaml
+import json
+import base64
+
+# The file path for the YAML file to be read
+# You can change this to the path of your YAML file
+YAML_FILE_PATH = 'blueprint.yaml'
+
+# The API endpoint and headers from the curl request
+API_URL = 'http://api.pangolin.fossorial.io/v1/org/test/blueprint'
+HEADERS = {
+    'accept': '*/*',
+    'Authorization': 'Bearer <your_token_here>',
+    'Content-Type': 'application/json'
+}
+
+def convert_and_send(file_path, url, headers):
+    """
+    Reads a YAML file, converts its content to a JSON payload,
+    and sends it via a PUT request to a specified URL.
+    """
+    try:
+        # Read the YAML file content
+        with open(file_path, 'r') as file:
+            yaml_content = file.read()
+
+        # Parse the YAML string to a Python dictionary
+        # This will be used to ensure the YAML is valid before sending
+        parsed_yaml = yaml.safe_load(yaml_content)
+
+        # convert the parsed YAML to a JSON string
+        json_payload = json.dumps(parsed_yaml)
+        print("Converted JSON payload:")
+        print(json_payload)
+
+        # Encode the JSON string to Base64
+        encoded_json = base64.b64encode(json_payload.encode('utf-8')).decode('utf-8')
+
+        # Create the final payload with the base64 encoded data
+        final_payload = {
+            "blueprint": encoded_json
+        }
+
+        print("Sending the following Base64 encoded JSON payload:")
+        print(final_payload)
+        print("-" * 20)
+
+        # Make the PUT request with the base64 encoded payload
+        response = requests.put(url, headers=headers, json=final_payload)
+
+        # Print the API response for debugging
+        print(f"API Response Status Code: {response.status_code}")
+        print("API Response Content:")
+        print(response.text)
+
+        # Raise an exception for bad status codes (4xx or 5xx)
+        response.raise_for_status()
+
+    except FileNotFoundError:
+        print(f"Error: The file '{file_path}' was not found.")
+    except yaml.YAMLError as e:
+        print(f"Error parsing YAML file: {e}")
+    except requests.exceptions.RequestException as e:
+        print(f"An error occurred during the API request: {e}")
+    except Exception as e:
+        print(f"An unexpected error occurred: {e}")
+
+# Run the function
+if __name__ == "__main__":
+    convert_and_send(YAML_FILE_PATH, API_URL, HEADERS)
+

blueprint.yaml

@@ -0,0 +1,69 @@
+client-resources:
+  client-resource-nice-id-uno:
+    name: this is my resource
+    protocol: tcp
+    proxy-port: 3001
+    hostname: localhost
+    internal-port: 3000
+    site: lively-yosemite-toad
+  client-resource-nice-id-duce:
+    name: this is my resource
+    protocol: udp
+    proxy-port: 3000
+    hostname: localhost
+    internal-port: 3000
+    site: lively-yosemite-toad
+
+proxy-resources:
+  resource-nice-id-uno:
+    name: this is my resource
+    protocol: http
+    full-domain: duce.test.example.com
+    host-header: example.com
+    tls-server-name: example.com
+    # auth:
+      # pincode: 123456
+      # password: sadfasdfadsf
+      # sso-enabled: true
+      # sso-roles:
+      #   - Member
+      # sso-users:
+      #   - owen@fossorial.io
+      # whitelist-users:
+      #   - owen@fossorial.io
+    headers:
+      - name: X-Example-Header
+        value: example-value
+      - name: X-Another-Header
+        value: another-value
+    rules:
+      - action: allow
+        match: ip
+        value: 1.1.1.1
+      - action: deny
+        match: cidr 
+        value: 2.2.2.2/32
+      - action: pass
+        match: path
+        value: /admin
+    targets:
+    - site: lively-yosemite-toad
+      path: /path
+      pathMatchType: prefix
+      hostname: localhost
+      method: http
+      port: 8000
+    - site: slim-alpine-chipmunk
+      hostname: localhost
+      path: /yoman
+      pathMatchType: exact
+      method: http
+      port: 8001
+  resource-nice-id-duce:
+    name: this is other resource
+    protocol: tcp
+    proxy-port: 3000
+    targets:
+    - site: lively-yosemite-toad 
+      hostname: localhost
+      port: 3000

bruno/API Keys/Create API Key.bru

@@ -0,0 +1,17 @@
+meta {
+  name: Create API Key
+  type: http
+  seq: 1
+}
+
+put {
+  url: http://localhost:3000/api/v1/api-key
+  body: json
+  auth: inherit
+}
+
+body:json {
+  {
+    "isRoot": true
+  }
+}

bruno/API Keys/Delete API Key.bru

@@ -0,0 +1,11 @@
+meta {
+  name: Delete API Key
+  type: http
+  seq: 2
+}
+
+delete {
+  url: http://localhost:3000/api/v1/api-key/dm47aacqxxn3ubj
+  body: none
+  auth: inherit
+}

bruno/API Keys/List API Key Actions.bru

@@ -0,0 +1,11 @@
+meta {
+  name: List API Key Actions
+  type: http
+  seq: 6
+}
+
+get {
+  url: http://localhost:3000/api/v1/api-key/ex0izu2c37fjz9x/actions
+  body: none
+  auth: inherit
+}

bruno/API Keys/List Org API Keys.bru

@@ -0,0 +1,11 @@
+meta {
+  name: List Org API Keys
+  type: http
+  seq: 4
+}
+
+get {
+  url: http://localhost:3000/api/v1/org/home-lab/api-keys
+  body: none
+  auth: inherit
+}

bruno/API Keys/List Root API Keys.bru

@@ -0,0 +1,11 @@
+meta {
+  name: List Root API Keys
+  type: http
+  seq: 3
+}
+
+get {
+  url: http://localhost:3000/api/v1/root/api-keys
+  body: none
+  auth: inherit
+}

bruno/API Keys/Set API Key Actions.bru

@@ -0,0 +1,17 @@
+meta {
+  name: Set API Key Actions
+  type: http
+  seq: 5
+}
+
+post {
+  url: http://localhost:3000/api/v1/api-key/ex0izu2c37fjz9x/actions
+  body: json
+  auth: inherit
+}
+
+body:json {
+  {
+    "actionIds": ["listSites"]
+  }
+}

bruno/API Keys/Set API Key Orgs.bru

@@ -0,0 +1,17 @@
+meta {
+  name: Set API Key Orgs
+  type: http
+  seq: 7
+}
+
+post {
+  url: http://localhost:3000/api/v1/api-key/ex0izu2c37fjz9x/orgs
+  body: json
+  auth: inherit
+}
+
+body:json {
+  {
+    "orgIds": ["home-lab"]
+  }
+}

bruno/API Keys/folder.bru

@@ -0,0 +1,3 @@
+meta {
+  name: API Keys
+}

bruno/Auth/login.bru

@@ -5,14 +5,14 @@ meta {
 }
 
 post {
-  url: http://localhost:3000/api/v1/auth/login
+  url: http://localhost:4000/api/v1/auth/login
   body: json
   auth: none
 }
 
 body:json {
   {
-    "email": "admin@fosrl.io",
+    "email": "owen@fossorial.io",
     "password": "Password123!"
   }
 }

bruno/Auth/logout.bru

@@ -5,7 +5,7 @@ meta {
 }
 
 post {
-  url: http://localhost:3000/api/v1/auth/logout
+  url: http://localhost:4000/api/v1/auth/logout
   body: none
   auth: none
 }

bruno/Clients/createClient.bru

@@ -0,0 +1,22 @@
+meta {
+  name: createClient
+  type: http
+  seq: 1
+}
+
+put {
+  url: http://localhost:3000/api/v1/site/1/client
+  body: json
+  auth: none
+}
+
+body:json {
+  {
+      "siteId": 1,
+      "name": "test",
+      "type": "olm",
+      "subnet": "100.90.129.4/30",
+      "olmId": "029yzunhx6nh3y5",
+      "secret": "l0ymp075y3d4rccb25l6sqpgar52k09etunui970qq5gj7x6"
+  }
+}

bruno/Clients/pickClientDefaults.bru

@@ -0,0 +1,11 @@
+meta {
+  name: pickClientDefaults
+  type: http
+  seq: 2
+}
+
+get {
+  url: http://localhost:3000/api/v1/site/1/pick-client-defaults
+  body: none
+  auth: none
+}

bruno/IDP/Create OIDC Provider.bru

@@ -0,0 +1,22 @@
+meta {
+  name: Create OIDC Provider
+  type: http
+  seq: 1
+}
+
+put {
+  url: http://localhost:3000/api/v1/org/home-lab/idp/oidc
+  body: json
+  auth: inherit
+}
+
+body:json {
+  {
+    "clientId": "JJoSvHCZcxnXT2sn6CObj6a21MuKNRXs3kN5wbys",
+    "clientSecret": "2SlGL2wOGgMEWLI9yUuMAeFxre7qSNJVnXMzyepdNzH1qlxYnC4lKhhQ6a157YQEkYH3vm40KK4RCqbYiF8QIweuPGagPX3oGxEj2exwutoXFfOhtq4hHybQKoFq01Z3",
+    "authUrl": "http://localhost:9000/application/o/authorize/",
+    "tokenUrl": "http://localhost:9000/application/o/token/",
+    "scopes": ["email", "openid", "profile"],
+    "userIdentifier": "email"
+  }
+}

bruno/IDP/Generate OIDC URL.bru

@@ -0,0 +1,11 @@
+meta {
+  name: Generate OIDC URL
+  type: http
+  seq: 2
+}
+
+get {
+  url: http://localhost:3000/api/v1
+  body: none
+  auth: inherit
+}

bruno/IDP/folder.bru

@@ -0,0 +1,3 @@
+meta {
+  name: IDP
+}

bruno/Internal/Traefik Config.bru

@@ -0,0 +1,11 @@
+meta {
+  name: Traefik Config
+  type: http
+  seq: 1
+}
+
+get {
+  url: http://localhost:3001/api/v1/traefik-config
+  body: none
+  auth: inherit
+}

bruno/Internal/folder.bru

@@ -0,0 +1,3 @@
+meta {
+  name: Internal
+}

bruno/Remote Exit Node/createRemoteExitNode.bru

@@ -0,0 +1,11 @@
+meta {
+  name: createRemoteExitNode
+  type: http
+  seq: 1
+}
+
+put {
+  url: http://localhost:4000/api/v1/org/org_i21aifypnlyxur2/remote-exit-node
+  body: none
+  auth: none
+}

bruno/Test.bru

@@ -0,0 +1,11 @@
+meta {
+  name: Test
+  type: http
+  seq: 2
+}
+
+get {
+  url: http://localhost:3000/api/v1
+  body: none
+  auth: inherit
+}

bruno/bruno.json

@@ -1,6 +1,6 @@
 {
   "version": "1",
-  "name": "Pangolin",
+  "name": "Pangolin Saas",
   "type": "collection",
   "ignore": [
     "node_modules",

cli/commands/resetUserSecurityKeys.ts

@@ -0,0 +1,72 @@
+import { CommandModule } from "yargs";
+import { db, users, securityKeys } from "@server/db";
+import { eq } from "drizzle-orm";
+
+type ResetUserSecurityKeysArgs = {
+    email: string;
+};
+
+export const resetUserSecurityKeys: CommandModule<
+    {},
+    ResetUserSecurityKeysArgs
+> = {
+    command: "reset-user-security-keys",
+    describe:
+        "Reset a user's security keys (passkeys) by deleting all their webauthn credentials",
+    builder: (yargs) => {
+        return yargs.option("email", {
+            type: "string",
+            demandOption: true,
+            describe: "User email address"
+        });
+    },
+    handler: async (argv: { email: string }) => {
+        try {
+            const { email } = argv;
+
+            console.log(`Looking for user with email: ${email}`);
+
+            // Find the user by email
+            const [user] = await db
+                .select()
+                .from(users)
+                .where(eq(users.email, email))
+                .limit(1);
+
+            if (!user) {
+                console.error(`User with email '${email}' not found`);
+                process.exit(1);
+            }
+
+            console.log(`Found user: ${user.email} (ID: ${user.userId})`);
+
+            // Check if user has any security keys
+            const userSecurityKeys = await db
+                .select()
+                .from(securityKeys)
+                .where(eq(securityKeys.userId, user.userId));
+
+            if (userSecurityKeys.length === 0) {
+                console.log(`User '${email}' has no security keys to reset`);
+                process.exit(0);
+            }
+
+            console.log(
+                `Found ${userSecurityKeys.length} security key(s) for user '${email}'`
+            );
+
+            // Delete all security keys for the user
+            await db
+                .delete(securityKeys)
+                .where(eq(securityKeys.userId, user.userId));
+
+            console.log(`Successfully reset security keys for user '${email}'`);
+            console.log(`Deleted ${userSecurityKeys.length} security key(s)`);
+
+            process.exit(0);
+        } catch (error) {
+            console.error("Error:", error);
+            process.exit(1);
+        }
+    }
+};

cli/commands/setAdminCredentials.ts

@@ -0,0 +1,143 @@
+import { CommandModule } from "yargs";
+import { hashPassword, verifyPassword } from "@server/auth/password";
+import { db, resourceSessions, sessions } from "@server/db";
+import { users } from "@server/db";
+import { eq, inArray } from "drizzle-orm";
+import moment from "moment";
+import { fromError } from "zod-validation-error";
+import { passwordSchema } from "@server/auth/passwordSchema";
+import { UserType } from "@server/types/UserTypes";
+import { generateRandomString, RandomReader } from "@oslojs/crypto/random";
+
+type SetAdminCredentialsArgs = {
+    email: string;
+    password: string;
+};
+
+export const setAdminCredentials: CommandModule<{}, SetAdminCredentialsArgs> = {
+    command: "set-admin-credentials",
+    describe: "Set the server admin credentials",
+    builder: (yargs) => {
+        return yargs
+            .option("email", {
+                type: "string",
+                demandOption: true,
+                describe: "Admin email address"
+            })
+            .option("password", {
+                type: "string",
+                demandOption: true,
+                describe: "Admin password"
+            });
+    },
+    handler: async (argv: { email: string; password: string }) => {
+        try {
+            const { password } = argv;
+            let { email } = argv;
+            email = email.trim().toLowerCase();
+
+            const parsed = passwordSchema.safeParse(password);
+
+            if (!parsed.success) {
+                throw Error(
+                    `Invalid server admin password: ${fromError(parsed.error).toString()}`
+                );
+            }
+
+            const passwordHash = await hashPassword(password);
+
+            await db.transaction(async (trx) => {
+                try {
+                    const [existing] = await trx
+                        .select()
+                        .from(users)
+                        .where(eq(users.serverAdmin, true));
+
+                    if (existing) {
+                        const passwordChanged = !(await verifyPassword(
+                            password,
+                            existing.passwordHash!
+                        ));
+
+                        if (passwordChanged) {
+                            await trx
+                                .update(users)
+                                .set({ passwordHash })
+                                .where(eq(users.userId, existing.userId));
+
+                            await invalidateAllSessions(existing.userId);
+                            console.log("Server admin password updated");
+                        }
+
+                        if (existing.email !== email) {
+                            await trx
+                                .update(users)
+                                .set({ email, username: email })
+                                .where(eq(users.userId, existing.userId));
+
+                            console.log("Server admin email updated");
+                        }
+                    } else {
+                        const userId = generateId(15);
+
+                        await trx.update(users).set({ serverAdmin: false });
+
+                        await db.insert(users).values({
+                            userId: userId,
+                            email: email,
+                            type: UserType.Internal,
+                            username: email,
+                            passwordHash,
+                            dateCreated: moment().toISOString(),
+                            serverAdmin: true,
+                            emailVerified: true
+                        });
+
+                        console.log("Server admin created");
+                    }
+                } catch (e) {
+                    console.error("Failed to set admin credentials", e);
+                    trx.rollback();
+                    throw e;
+                }
+            });
+
+            console.log("Admin credentials updated successfully");
+            process.exit(0);
+        } catch (error) {
+            console.error("Error:", error);
+            process.exit(1);
+        }
+    }
+};
+
+export async function invalidateAllSessions(userId: string): Promise<void> {
+    try {
+        await db.transaction(async (trx) => {
+            const userSessions = await trx
+                .select()
+                .from(sessions)
+                .where(eq(sessions.userId, userId));
+            await trx.delete(resourceSessions).where(
+                inArray(
+                    resourceSessions.userSessionId,
+                    userSessions.map((s) => s.sessionId)
+                )
+            );
+            await trx.delete(sessions).where(eq(sessions.userId, userId));
+        });
+    } catch (e) {
+        console.log("Failed to all invalidate user sessions", e);
+    }
+}
+
+const random: RandomReader = {
+    read(bytes: Uint8Array): void {
+        crypto.getRandomValues(bytes);
+    }
+};
+
+export function generateId(length: number): string {
+    const alphabet = "abcdefghijklmnopqrstuvwxyz0123456789";
+    return generateRandomString(random, alphabet, length);
+}

cli/index.ts

@@ -0,0 +1,13 @@
+#!/usr/bin/env node
+
+import yargs from "yargs";
+import { hideBin } from "yargs/helpers";
+import { setAdminCredentials } from "@cli/commands/setAdminCredentials";
+import { resetUserSecurityKeys } from "@cli/commands/resetUserSecurityKeys";
+
+yargs(hideBin(process.argv))
+    .scriptName("pangctl")
+    .command(setAdminCredentials)
+    .command(resetUserSecurityKeys)
+    .demandCommand()
+    .help().argv;

cli/wrapper.sh

@@ -0,0 +1,3 @@
+#!/bin/sh
+cd /app/
+./dist/cli.mjs "$@"

config/config.example.yml

@@ -1,54 +1,28 @@
 # To see all available options, please visit the docs:
-# https://docs.fossorial.io/Pangolin/Configuration/config
+# https://docs.digpangolin.com/self-host/advanced/config-file
 
 app:
-    dashboard_url: "http://localhost:3002"
+  dashboard_url: http://localhost:3002
-    log_level: "info"
+  log_level: debug
-    save_logs: false
 
 domains:
-    domain1:
+  domain1:
-        base_domain: "example.com"
+    base_domain: example.com
-        cert_resolver: "letsencrypt"
 
 server:
-    external_port: 3000
+  secret: my_secret_key
-    internal_port: 3001
-    next_port: 3002
-    internal_hostname: "pangolin"
-    session_cookie_name: "p_session_token"
-    resource_access_token_param: "p_token"
-    secret: "your_secret_key_here"
-    resource_access_token_headers:
-        id: "P-Access-Token-Id"
-        token: "P-Access-Token"
-    resource_session_request_param: "p_session_request"
-
-traefik:
-    http_entrypoint: "web"
-    https_entrypoint: "websecure"
 
 gerbil:
-    start_port: 51820
+  base_endpoint: example.com
-    base_endpoint: "localhost"
-    block_size: 24
-    site_block_size: 30
-    subnet_group: 100.89.137.0/20
-    use_subdomain: true
 
-rate_limits:
+orgs:
-    global:
+  block_size: 24
-        window_minutes: 1
+  subnet_group: 100.90.137.0/20
-        max_requests: 500
-
-users:
-    server_admin:
-        email: "admin@example.com"
-        password: "Password123!"
 
 flags:
-    require_email_verification: false
+  require_email_verification: false
-    disable_signup_without_invite: true
+  disable_signup_without_invite: true
-    disable_user_create_org: true
+  disable_user_create_org: true
-    allow_raw_resources: true
+  allow_raw_resources: true
-    allow_base_domain_resources: true
+  enable_integration_api: true
+  enable_clients: true

config/traefik/dynamic_config.yml

@@ -0,0 +1,46 @@
+http:
+  middlewares:
+    redirect-to-https:
+      redirectScheme:
+        scheme: https
+
+  routers:
+    # HTTP to HTTPS redirect router
+    main-app-router-redirect:
+      rule: "Host(`{{.DashboardDomain}}`)"
+      service: next-service
+      entryPoints:
+        - web
+      middlewares:
+        - redirect-to-https
+
+    # Next.js router (handles everything except API and WebSocket paths)
+    next-router:
+      rule: "Host(`{{.DashboardDomain}}`)"
+      service: next-service
+      priority: 10
+      entryPoints:
+        - websecure
+      tls:
+        certResolver: letsencrypt
+
+    # API router (handles /api/v1 paths)
+    api-router:
+      rule: "Host(`{{.DashboardDomain}}`) && PathPrefix(`/api/v1`)"
+      service: api-service
+      priority: 100
+      entryPoints:
+        - websecure
+      tls:
+        certResolver: letsencrypt
+
+  services:
+    next-service:
+      loadBalancer:
+        servers:
+          - url: "http://pangolin:3002"  # Next.js server
+
+    api-service:
+      loadBalancer:
+        servers:
+          - url: "http://pangolin:3000"  # API/WebSocket server

config/traefik/traefik_config.yml

@@ -0,0 +1,34 @@
+api:
+  insecure: true
+  dashboard: true
+
+providers:
+  file:
+    directory: "/var/dynamic"
+    watch: true
+
+experimental:
+  plugins:
+    badger:
+      moduleName: "github.com/fosrl/badger"
+      version: "v1.2.0"
+
+log:
+  level: "DEBUG"
+  format: "common"
+  maxSize: 100
+  maxBackups: 3
+  maxAge: 3
+  compress: true
+
+entryPoints:
+  web:
+    address: ":80"
+  websecure:
+    address: ":9443"
+    transport:
+      respondingTimeouts:
+        readTimeout: "30m"
+
+serversTransport:
+  insecureSkipVerify: true

crowdin.yml

@@ -0,0 +1,3 @@
+files:
+  - source: /messages/en-US.json
+    translation: /messages/%locale%.json

docker-compose.example.yml

@@ -20,10 +20,9 @@ services:
       pangolin:
         condition: service_healthy
     command:
-      - --reachableAt=http://gerbil:3003
+      - --reachableAt=http://gerbil:3004
       - --generateAndSaveKeyTo=/var/config/key
-      - --remoteConfig=http://pangolin:3001/api/v1/gerbil/get-config
+      - --remoteConfig=http://pangolin:3001/api/v1/
-      - --reportBandwidthTo=http://pangolin:3001/api/v1/gerbil/receive-bandwidth
     volumes:
       - ./config/:/var/config
     cap_add:
@@ -31,11 +30,12 @@ services:
       - SYS_MODULE
     ports:
       - 51820:51820/udp
+      - 21820:21820/udp
       - 443:443 # Port for traefik because of the network_mode
       - 80:80 # Port for traefik because of the network_mode
 
   traefik:
-    image: traefik:v3.3.3
+    image: traefik:v3.5
     container_name: traefik
     restart: unless-stopped
     network_mode: service:gerbil # Ports appear on the gerbil service
@@ -51,4 +51,5 @@ services:
 networks:
   default:
     driver: bridge
-    name: pangolin
+    name: pangolin
+    enable_ipv6: true

docker-compose.pgr.yml

@@ -0,0 +1,21 @@
+services:
+  # PostgreSQL Service
+  db:
+    image: postgres:17 # Use the PostgreSQL 17 image
+    container_name: dev_postgres # Name your PostgreSQL container
+    environment:
+      POSTGRES_DB: postgres # Default database name
+      POSTGRES_USER: postgres # Default user
+      POSTGRES_PASSWORD: password # Default password (change for production!)
+    volumes:
+      - ./config/postgres:/var/lib/postgresql/data
+    ports:
+      - "5432:5432" # Map host port 5432 to container port 5432
+    restart: no 
+
+  redis:
+    image: redis:latest # Use the latest Redis image
+    container_name: dev_redis # Name your Redis container
+    ports:
+      - "6379:6379" # Map host port 6379 to container port 6379
+    restart: no

docker-compose.yml

@@ -0,0 +1,29 @@
+services:
+  # Development application service
+  app:
+    build:
+      context: .
+      dockerfile: Dockerfile.dev
+    container_name: dev_pangolin
+    ports:
+      - "3000:3000"
+      - "3001:3001"
+      - "3002:3002"
+      - "3003:3003"
+    environment:
+      - NODE_ENV=development
+      - ENVIRONMENT=dev
+    volumes:
+      # Mount source code for hot reload
+      - ./src:/app/src
+      - ./server:/app/server
+      - ./public:/app/public
+      - ./messages:/app/messages
+      - ./components.json:/app/components.json
+      - ./next.config.mjs:/app/next.config.mjs
+      - ./tsconfig.json:/app/tsconfig.json
+      - ./tailwind.config.js:/app/tailwind.config.js
+      - ./postcss.config.mjs:/app/postcss.config.mjs
+      - ./eslint.config.js:/app/eslint.config.js
+      - ./config:/app/config
+    restart: no

drizzle.pg.config.ts

@@ -0,0 +1,16 @@
+import { defineConfig } from "drizzle-kit";
+import path from "path";
+
+const schema = [
+    path.join("server", "db", "pg", "schema"),
+];
+
+export default defineConfig({
+    dialect: "postgresql",
+    schema: schema,
+    out: path.join("server", "migrations"),
+    verbose: true,
+    dbCredentials: {
+        url: process.env.DATABASE_URL as string
+    }
+});

drizzle.sqlite.config.ts

@@ -2,9 +2,13 @@ import { APP_PATH } from "@server/lib/consts";
 import { defineConfig } from "drizzle-kit";
 import path from "path";
 
+const schema = [
+    path.join("server", "db", "sqlite", "schema"),
+];
+
 export default defineConfig({
     dialect: "sqlite",
-    schema: path.join("server", "db", "schemas"),
+    schema: schema,
     out: path.join("server", "migrations"),
     verbose: true,
     dbCredentials: {

esbuild.mjs

@@ -52,7 +52,7 @@ esbuild
         bundle: true,
         outfile: argv.out,
         format: "esm",
-        minify: true,
+        minify: false,
         banner: {
             js: banner,
         },
@@ -63,8 +63,8 @@ esbuild
                 packagePath: getPackagePaths(),
             }),
         ],
-        sourcemap: true,
+        sourcemap: "inline",
-        target: "node20",
+        target: "node22",
     })
     .then(() => {
         console.log("Build completed successfully");

eslint.config.js

@@ -1,9 +1,19 @@
-// eslint.config.js
+import tseslint from 'typescript-eslint';
-export default [
+
-    {
+export default tseslint.config({
-        rules: {
+  files: ["**/*.{ts,tsx,js,jsx}"],
-            semi: "error",
+  languageOptions: {
-            "prefer-const": "error"
+    parser: tseslint.parser,
-        }
+    parserOptions: {
+      ecmaVersion: "latest",
+      sourceType: "module",
+      ecmaFeatures: {
+        jsx: true
+      }
     }
-];
+  },
+  rules: {
+    "semi": "error",
+    "prefer-const": "warn"
+  }
+});

install/Makefile

@@ -1,4 +1,5 @@
 all: update-versions go-build-release put-back
+dev-all: dev-update-versions dev-build dev-clean
 
 go-build-release:
 	CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -o bin/installer_linux_amd64
@@ -11,6 +12,12 @@ clean:
 update-versions:
 	@echo "Fetching latest versions..."
 	cp main.go main.go.bak && \
+	$(MAKE) dev-update-versions
+
+put-back:
+	mv main.go.bak main.go
+
+dev-update-versions:
 	PANGOLIN_VERSION=$$(curl -s https://api.github.com/repos/fosrl/pangolin/tags | jq -r '.[0].name') && \
 	GERBIL_VERSION=$$(curl -s https://api.github.com/repos/fosrl/gerbil/tags | jq -r '.[0].name') && \
 	BADGER_VERSION=$$(curl -s https://api.github.com/repos/fosrl/badger/tags | jq -r '.[0].name') && \
@@ -20,5 +27,11 @@ update-versions:
 	sed -i "s/config.BadgerVersion = \".*\"/config.BadgerVersion = \"$$BADGER_VERSION\"/" main.go && \
 	echo "Updated main.go with latest versions"
 
-put-back:
+dev-build: go-build-release
-	mv main.go.bak main.go
+
+dev-clean:
+	@echo "Restoring version values ..."
+	sed -i "s/config.PangolinVersion = \".*\"/config.PangolinVersion = \"replaceme\"/" main.go && \
+	sed -i "s/config.GerbilVersion = \".*\"/config.GerbilVersion = \"replaceme\"/" main.go && \
+	sed -i "s/config.BadgerVersion = \".*\"/config.BadgerVersion = \"replaceme\"/" main.go
+	@echo "Restored version strings in main.go"

install/config.go

@@ -37,15 +37,28 @@ type DynamicConfig struct {
 	} `yaml:"http"`
 }
 
-// ConfigValues holds the extracted configuration values
+// TraefikConfigValues holds the extracted configuration values
-type ConfigValues struct {
+type TraefikConfigValues struct {
 	DashboardDomain  string
 	LetsEncryptEmail string
 	BadgerVersion    string
 }
 
+// AppConfig represents the app section of the config.yml
+type AppConfig struct {
+	App struct {
+		DashboardURL string `yaml:"dashboard_url"`
+		LogLevel     string `yaml:"log_level"`
+	} `yaml:"app"`
+}
+
+type AppConfigValues struct {
+	DashboardURL string
+	LogLevel     string
+}
+
 // ReadTraefikConfig reads and extracts values from Traefik configuration files
-func ReadTraefikConfig(mainConfigPath, dynamicConfigPath string) (*ConfigValues, error) {
+func ReadTraefikConfig(mainConfigPath string) (*TraefikConfigValues, error) {
 	// Read main config file
 	mainConfigData, err := os.ReadFile(mainConfigPath)
 	if err != nil {
@@ -57,48 +70,33 @@ func ReadTraefikConfig(mainConfigPath, dynamicConfigPath string) (*ConfigValues,
 		return nil, fmt.Errorf("error parsing main config file: %w", err)
 	}
 
-	// Read dynamic config file
-	dynamicConfigData, err := os.ReadFile(dynamicConfigPath)
-	if err != nil {
-		return nil, fmt.Errorf("error reading dynamic config file: %w", err)
-	}
-
-	var dynamicConfig DynamicConfig
-	if err := yaml.Unmarshal(dynamicConfigData, &dynamicConfig); err != nil {
-		return nil, fmt.Errorf("error parsing dynamic config file: %w", err)
-	}
-
 	// Extract values
-	values := &ConfigValues{
+	values := &TraefikConfigValues{
 		BadgerVersion:    mainConfig.Experimental.Plugins.Badger.Version,
 		LetsEncryptEmail: mainConfig.CertificatesResolvers.LetsEncrypt.Acme.Email,
 	}
 
-	// Extract DashboardDomain from router rules
-	// Look for it in the main router rules
-	for _, router := range dynamicConfig.HTTP.Routers {
-		if router.Rule != "" {
-			// Extract domain from Host(`mydomain.com`)
-			if domain := extractDomainFromRule(router.Rule); domain != "" {
-				values.DashboardDomain = domain
-				break
-			}
-		}
-	}
-
 	return values, nil
 }
 
-// extractDomainFromRule extracts the domain from a router rule
+func ReadAppConfig(configPath string) (*AppConfigValues, error) {
-func extractDomainFromRule(rule string) string {
+	// Read config file
-	// Look for the Host(`mydomain.com`) pattern
+	configData, err := os.ReadFile(configPath)
-	if start := findPattern(rule, "Host(`"); start != -1 {
+	if err != nil {
-		end := findPattern(rule[start:], "`)")
+		return nil, fmt.Errorf("error reading config file: %w", err)
-		if end != -1 {
-			return rule[start+6 : start+end]
-		}
 	}
-	return ""
+
+	var appConfig AppConfig
+	if err := yaml.Unmarshal(configData, &appConfig); err != nil {
+		return nil, fmt.Errorf("error parsing config file: %w", err)
+	}
+
+	values := &AppConfigValues{
+		DashboardURL: appConfig.App.DashboardURL,
+		LogLevel:     appConfig.App.LogLevel,
+	}
+
+	return values, nil
 }
 
 // findPattern finds the start of a pattern in a string

install/config/config.yml

@@ -1,10 +1,13 @@
 # To see all available options, please visit the docs:
-# https://docs.fossorial.io/Pangolin/Configuration/config
+# https://docs.digpangolin.com/
+
+gerbil:
+    start_port: 51820
+    base_endpoint: "{{.DashboardDomain}}"
 
 app:
     dashboard_url: "https://{{.DashboardDomain}}"
     log_level: "info"
-    save_logs: false
 
 domains:
     domain1:
@@ -12,40 +15,13 @@ domains:
         cert_resolver: "letsencrypt"
 
 server:
-    external_port: 3000
+    secret: "{{.Secret}}"
-    internal_port: 3001
-    next_port: 3002
-    internal_hostname: "pangolin"
-    session_cookie_name: "p_session_token"
-    resource_access_token_param: "p_token"
-    resource_access_token_headers:
-        id: "P-Access-Token-Id"
-        token: "P-Access-Token"
-    resource_session_request_param: "p_session_request"
-    secret: {{.Secret}}
     cors:
         origins: ["https://{{.DashboardDomain}}"]
         methods: ["GET", "POST", "PUT", "DELETE", "PATCH"]
-        headers: ["X-CSRF-Token", "Content-Type"]
+        allowed_headers: ["X-CSRF-Token", "Content-Type"]
         credentials: false
-
+    {{if .EnableGeoblocking}}maxmind_db_path: "./config/GeoLite2-Country.mmdb"{{end}}
-traefik:
-    cert_resolver: "letsencrypt"
-    http_entrypoint: "web"
-    https_entrypoint: "websecure"
-
-gerbil:
-    start_port: 51820
-    base_endpoint: "{{.DashboardDomain}}"
-    use_subdomain: false
-    block_size: 24
-    site_block_size: 30
-    subnet_group: 100.89.137.0/20
-
-rate_limits:
-    global:
-        window_minutes: 1
-        max_requests: 500
 {{if .EnableEmail}}
 email:
     smtp_host: "{{.EmailSMTPHost}}"
@@ -54,14 +30,9 @@ email:
     smtp_pass: "{{.EmailSMTPPass}}"
     no_reply: "{{.EmailNoReply}}"
 {{end}}
-users:
-    server_admin:
-        email: "{{.AdminUserEmail}}"
-        password: "{{.AdminUserPassword}}"
-
 flags:
     require_email_verification: {{.EnableEmail}}
-    disable_signup_without_invite: {{.DisableSignupWithoutInvite}}
+    disable_signup_without_invite: true
-    disable_user_create_org: {{.DisableUserCreateOrg}}
+    disable_user_create_org: false
     allow_raw_resources: true
-    allow_base_domain_resources: true
+{{end}}

install/config/crowdsec/docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   crowdsec:
-    image: crowdsecurity/crowdsec:latest
+    image: docker.io/crowdsecurity/crowdsec:latest
     container_name: crowdsec
     environment:
       GID: "1000"

install/config/crowdsec/profiles.yaml

@@ -22,4 +22,4 @@ filters:
 decisions:
  - type: ban
    duration: 4h
-on_success: break
+on_success: break

install/config/crowdsec/traefik_config.yml

@@ -16,11 +16,15 @@ experimental:
       version: "{{.BadgerVersion}}"
     crowdsec: # CrowdSec plugin configuration added
       moduleName: "github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin"
-      version: "v1.4.2"
+      version: "v1.4.4"
 
 log:
   level: "INFO"
   format: "json" # Log format changed to json for better parsing
+  maxSize: 100
+  maxBackups: 3
+  maxAge: 3
+  compress: true
 
 accessLog: # We enable access logs as json
   filePath: "/var/log/traefik/access.log"

install/config/docker-compose.yml

@@ -1,7 +1,7 @@
 name: pangolin
 services:
   pangolin:
-    image: fosrl/pangolin:{{.PangolinVersion}}
+    image: docker.io/fosrl/pangolin:{{.PangolinVersion}}
     container_name: pangolin
     restart: unless-stopped
     volumes:
@@ -13,17 +13,16 @@ services:
       retries: 15
 {{if .InstallGerbil}}
   gerbil:
-    image: fosrl/gerbil:{{.GerbilVersion}}
+    image: docker.io/fosrl/gerbil:{{.GerbilVersion}}
     container_name: gerbil
     restart: unless-stopped
     depends_on:
       pangolin:
         condition: service_healthy
     command:
-      - --reachableAt=http://gerbil:3003
+      - --reachableAt=http://gerbil:3004
       - --generateAndSaveKeyTo=/var/config/key
-      - --remoteConfig=http://pangolin:3001/api/v1/gerbil/get-config
+      - --remoteConfig=http://pangolin:3001/api/v1/
-      - --reportBandwidthTo=http://pangolin:3001/api/v1/gerbil/receive-bandwidth
     volumes:
       - ./config/:/var/config
     cap_add:
@@ -31,11 +30,12 @@ services:
       - SYS_MODULE
     ports:
       - 51820:51820/udp
-      - 443:443 # Port for traefik because of the network_mode
+      - 21820:21820/udp
-      - 80:80 # Port for traefik because of the network_mode
+      - 443:443
+      - 80:80
 {{end}}
   traefik:
-    image: traefik:v3.3.6
+    image: docker.io/traefik:v3.5
     container_name: traefik
     restart: unless-stopped
 {{if .InstallGerbil}}
@@ -58,4 +58,5 @@ services:
 networks:
   default:
     driver: bridge
-    name: pangolin
+    name: pangolin
+{{if .EnableIPv6}}    enable_ipv6: true{{end}}

install/config/traefik/traefik_config.yml

@@ -18,6 +18,10 @@ experimental:
 log:
   level: "INFO"
   format: "common"
+  maxSize: 100
+  maxBackups: 3
+  maxAge: 3
+  compress: true
 
 certificatesResolvers:
   letsencrypt:
@@ -42,3 +46,6 @@ entryPoints:
 
 serversTransport:
   insecureSkipVerify: true
+
+ping:
+  entryPoint: "web"

install/containers.go

@@ -0,0 +1,332 @@
+package main
+
+import (
+	"bytes"
+	"fmt"
+	"os"
+	"os/exec"
+	"os/user"
+	"runtime"
+	"strconv"
+	"strings"
+	"time"
+)
+
+func waitForContainer(containerName string, containerType SupportedContainer) error {
+	maxAttempts := 30
+	retryInterval := time.Second * 2
+
+	for attempt := 0; attempt < maxAttempts; attempt++ {
+		// Check if container is running
+		cmd := exec.Command(string(containerType), "container", "inspect", "-f", "{{.State.Running}}", containerName)
+		var out bytes.Buffer
+		cmd.Stdout = &out
+
+		if err := cmd.Run(); err != nil {
+			// If the container doesn't exist or there's another error, wait and retry
+			time.Sleep(retryInterval)
+			continue
+		}
+
+		isRunning := strings.TrimSpace(out.String()) == "true"
+		if isRunning {
+			return nil
+		}
+
+		// Container exists but isn't running yet, wait and retry
+		time.Sleep(retryInterval)
+	}
+
+	return fmt.Errorf("container %s did not start within %v seconds", containerName, maxAttempts*int(retryInterval.Seconds()))
+}
+
+func installDocker() error {
+	// Detect Linux distribution
+	cmd := exec.Command("cat", "/etc/os-release")
+	output, err := cmd.Output()
+	if err != nil {
+		return fmt.Errorf("failed to detect Linux distribution: %v", err)
+	}
+	osRelease := string(output)
+
+	// Detect system architecture
+	archCmd := exec.Command("uname", "-m")
+	archOutput, err := archCmd.Output()
+	if err != nil {
+		return fmt.Errorf("failed to detect system architecture: %v", err)
+	}
+	arch := strings.TrimSpace(string(archOutput))
+
+	// Map architecture to Docker's architecture naming
+	var dockerArch string
+	switch arch {
+	case "x86_64":
+		dockerArch = "amd64"
+	case "aarch64":
+		dockerArch = "arm64"
+	default:
+		return fmt.Errorf("unsupported architecture: %s", arch)
+	}
+
+	var installCmd *exec.Cmd
+	switch {
+	case strings.Contains(osRelease, "ID=ubuntu"):
+		installCmd = exec.Command("bash", "-c", fmt.Sprintf(`
+			apt-get update &&
+			apt-get install -y apt-transport-https ca-certificates curl software-properties-common &&
+			curl -fsSL https://download.docker.com/linux/ubuntu/gpg | gpg --dearmor -o /usr/share/keyrings/docker-archive-keyring.gpg &&
+			echo "deb [arch=%s signed-by=/usr/share/keyrings/docker-archive-keyring.gpg] https://download.docker.com/linux/ubuntu $(lsb_release -cs) stable" > /etc/apt/sources.list.d/docker.list &&
+			apt-get update &&
+			apt-get install -y docker-ce docker-ce-cli containerd.io docker-compose-plugin
+		`, dockerArch))
+	case strings.Contains(osRelease, "ID=debian"):
+		installCmd = exec.Command("bash", "-c", fmt.Sprintf(`
+			apt-get update &&
+			apt-get install -y apt-transport-https ca-certificates curl software-properties-common &&
+			curl -fsSL https://download.docker.com/linux/debian/gpg | gpg --dearmor -o /usr/share/keyrings/docker-archive-keyring.gpg &&
+			echo "deb [arch=%s signed-by=/usr/share/keyrings/docker-archive-keyring.gpg] https://download.docker.com/linux/debian $(lsb_release -cs) stable" > /etc/apt/sources.list.d/docker.list &&
+			apt-get update &&
+			apt-get install -y docker-ce docker-ce-cli containerd.io docker-compose-plugin
+		`, dockerArch))
+	case strings.Contains(osRelease, "ID=fedora"):
+		// Detect Fedora version to handle DNF 5 changes
+		versionCmd := exec.Command("bash", "-c", "grep VERSION_ID /etc/os-release | cut -d'=' -f2 | tr -d '\"'")
+		versionOutput, err := versionCmd.Output()
+		var fedoraVersion int
+		if err == nil {
+			if v, parseErr := strconv.Atoi(strings.TrimSpace(string(versionOutput))); parseErr == nil {
+				fedoraVersion = v
+			}
+		}
+
+		// Use appropriate DNF syntax based on version
+		var repoCmd string
+		if fedoraVersion >= 41 {
+			// DNF 5 syntax for Fedora 41+
+			repoCmd = "dnf config-manager addrepo --from-repofile=https://download.docker.com/linux/fedora/docker-ce.repo"
+		} else {
+			// DNF 4 syntax for Fedora < 41
+			repoCmd = "dnf config-manager --add-repo https://download.docker.com/linux/fedora/docker-ce.repo"
+		}
+
+		installCmd = exec.Command("bash", "-c", fmt.Sprintf(`
+			dnf -y install dnf-plugins-core &&
+			%s &&
+			dnf install -y docker-ce docker-ce-cli containerd.io docker-compose-plugin
+		`, repoCmd))
+	case strings.Contains(osRelease, "ID=opensuse") || strings.Contains(osRelease, "ID=\"opensuse-"):
+		installCmd = exec.Command("bash", "-c", `
+			zypper install -y docker docker-compose &&
+			systemctl enable docker
+		`)
+	case strings.Contains(osRelease, "ID=rhel") || strings.Contains(osRelease, "ID=\"rhel"):
+		installCmd = exec.Command("bash", "-c", `
+			dnf remove -y runc &&
+			dnf -y install yum-utils &&
+			dnf config-manager --add-repo https://download.docker.com/linux/rhel/docker-ce.repo &&
+			dnf install -y docker-ce docker-ce-cli containerd.io docker-compose-plugin &&
+			systemctl enable docker
+		`)
+	case strings.Contains(osRelease, "ID=amzn"):
+		installCmd = exec.Command("bash", "-c", `
+			yum update -y &&
+			yum install -y docker &&
+			systemctl enable docker &&
+			usermod -a -G docker ec2-user
+		`)
+	default:
+		return fmt.Errorf("unsupported Linux distribution")
+	}
+
+	installCmd.Stdout = os.Stdout
+	installCmd.Stderr = os.Stderr
+	return installCmd.Run()
+}
+
+func startDockerService() error {
+	if runtime.GOOS == "linux" {
+		cmd := exec.Command("systemctl", "enable", "--now", "docker")
+		cmd.Stdout = os.Stdout
+		cmd.Stderr = os.Stderr
+		return cmd.Run()
+	} else if runtime.GOOS == "darwin" {
+		// On macOS, Docker is usually started via the Docker Desktop application
+		fmt.Println("Please start Docker Desktop manually on macOS.")
+		return nil
+	}
+	return fmt.Errorf("unsupported operating system for starting Docker service")
+}
+
+func isDockerInstalled() bool {
+	return isContainerInstalled("docker")
+}
+
+func isPodmanInstalled() bool {
+	return isContainerInstalled("podman") && isContainerInstalled("podman-compose")
+}
+
+func isContainerInstalled(container string) bool {
+	cmd := exec.Command(container, "--version")
+	if err := cmd.Run(); err != nil {
+		return false
+	}
+	return true
+}
+
+func isUserInDockerGroup() bool {
+	if runtime.GOOS == "darwin" {
+		// Docker group is not applicable on macOS
+		// So we assume that the user can run Docker commands
+		return true
+	}
+
+	if os.Geteuid() == 0 {
+		return true // Root user can run Docker commands anyway
+	}
+
+	// Check if the current user is in the docker group
+	if dockerGroup, err := user.LookupGroup("docker"); err == nil {
+		if currentUser, err := user.Current(); err == nil {
+			if currentUserGroupIds, err := currentUser.GroupIds(); err == nil {
+				for _, groupId := range currentUserGroupIds {
+					if groupId == dockerGroup.Gid {
+						return true
+					}
+				}
+			}
+		}
+	}
+
+	// Eventually, if any of the checks fail, we assume the user cannot run Docker commands
+	return false
+}
+
+// isDockerRunning checks if the Docker daemon is running by using the `docker info` command.
+func isDockerRunning() bool {
+	cmd := exec.Command("docker", "info")
+	if err := cmd.Run(); err != nil {
+		return false
+	}
+	return true
+}
+
+// executeDockerComposeCommandWithArgs executes the appropriate docker command with arguments supplied
+func executeDockerComposeCommandWithArgs(args ...string) error {
+	var cmd *exec.Cmd
+	var useNewStyle bool
+
+	if !isDockerInstalled() {
+		return fmt.Errorf("docker is not installed")
+	}
+
+	checkCmd := exec.Command("docker", "compose", "version")
+	if err := checkCmd.Run(); err == nil {
+		useNewStyle = true
+	} else {
+		checkCmd = exec.Command("docker-compose", "version")
+		if err := checkCmd.Run(); err == nil {
+			useNewStyle = false
+		} else {
+			return fmt.Errorf("neither 'docker compose' nor 'docker-compose' command is available")
+		}
+	}
+
+	if useNewStyle {
+		cmd = exec.Command("docker", append([]string{"compose"}, args...)...)
+	} else {
+		cmd = exec.Command("docker-compose", args...)
+	}
+
+	cmd.Stdout = os.Stdout
+	cmd.Stderr = os.Stderr
+	return cmd.Run()
+}
+
+// pullContainers pulls the containers using the appropriate command.
+func pullContainers(containerType SupportedContainer) error {
+	fmt.Println("Pulling the container images...")
+	if containerType == Podman {
+		if err := run("podman-compose", "-f", "docker-compose.yml", "pull"); err != nil {
+			return fmt.Errorf("failed to pull the containers: %v", err)
+		}
+
+		return nil
+	}
+
+	if containerType == Docker {
+		if err := executeDockerComposeCommandWithArgs("-f", "docker-compose.yml", "pull", "--policy", "always"); err != nil {
+			return fmt.Errorf("failed to pull the containers: %v", err)
+		}
+
+		return nil
+	}
+
+	return fmt.Errorf("Unsupported container type: %s", containerType)
+}
+
+// startContainers starts the containers using the appropriate command.
+func startContainers(containerType SupportedContainer) error {
+	fmt.Println("Starting containers...")
+
+	if containerType == Podman {
+		if err := run("podman-compose", "-f", "docker-compose.yml", "up", "-d", "--force-recreate"); err != nil {
+			return fmt.Errorf("failed start containers: %v", err)
+		}
+
+		return nil
+	}
+
+	if containerType == Docker {
+		if err := executeDockerComposeCommandWithArgs("-f", "docker-compose.yml", "up", "-d", "--force-recreate"); err != nil {
+			return fmt.Errorf("failed to start containers: %v", err)
+		}
+
+		return nil
+	}
+
+	return fmt.Errorf("Unsupported container type: %s", containerType)
+}
+
+// stopContainers stops the containers using the appropriate command.
+func stopContainers(containerType SupportedContainer) error {
+	fmt.Println("Stopping containers...")
+	if containerType == Podman {
+		if err := run("podman-compose", "-f", "docker-compose.yml", "down"); err != nil {
+			return fmt.Errorf("failed to stop containers: %v", err)
+		}
+
+		return nil
+	}
+
+	if containerType == Docker {
+		if err := executeDockerComposeCommandWithArgs("-f", "docker-compose.yml", "down"); err != nil {
+			return fmt.Errorf("failed to stop containers: %v", err)
+		}
+
+		return nil
+	}
+
+	return fmt.Errorf("Unsupported container type: %s", containerType)
+}
+
+// restartContainer restarts a specific container using the appropriate command.
+func restartContainer(container string, containerType SupportedContainer) error {
+	fmt.Println("Restarting containers...")
+	if containerType == Podman {
+		if err := run("podman-compose", "-f", "docker-compose.yml", "restart"); err != nil {
+			return fmt.Errorf("failed to stop the container \"%s\": %v", container, err)
+		}
+
+		return nil
+	}
+
+	if containerType == Docker {
+		if err := executeDockerComposeCommandWithArgs("-f", "docker-compose.yml", "restart", container); err != nil {
+			return fmt.Errorf("failed to stop the container \"%s\": %v", container, err)
+		}
+
+		return nil
+	}
+
+	return fmt.Errorf("Unsupported container type: %s", containerType)
+}

install/crowdsec.go

@@ -13,7 +13,7 @@ import (
 
 func installCrowdsec(config Config) error {
 
-	if err := stopContainers(); err != nil {
+	if err := stopContainers(config.InstallationContainerType); err != nil {
 		return fmt.Errorf("failed to stop containers: %v", err)
 	}
 
@@ -72,12 +72,12 @@ func installCrowdsec(config Config) error {
 		os.Exit(1)
 	}
 
-	if err := startContainers(); err != nil {
+	if err := startContainers(config.InstallationContainerType); err != nil {
 		return fmt.Errorf("failed to start containers: %v", err)
 	}
 
 	// get API key
-	apiKey, err := GetCrowdSecAPIKey()
+	apiKey, err := GetCrowdSecAPIKey(config.InstallationContainerType)
 	if err != nil {
 		return fmt.Errorf("failed to get API key: %v", err)
 	}
@@ -87,7 +87,7 @@ func installCrowdsec(config Config) error {
 		return fmt.Errorf("failed to replace bouncer key: %v", err)
 	}
 
-	if err := restartContainer("traefik"); err != nil {
+	if err := restartContainer("traefik", config.InstallationContainerType); err != nil {
 		return fmt.Errorf("failed to restart containers: %v", err)
 	}
 
@@ -110,9 +110,9 @@ func checkIsCrowdsecInstalledInCompose() bool {
 	return bytes.Contains(content, []byte("crowdsec:"))
 }
 
-func GetCrowdSecAPIKey() (string, error) {
+func GetCrowdSecAPIKey(containerType SupportedContainer) (string, error) {
 	// First, ensure the container is running
-	if err := waitForContainer("crowdsec"); err != nil {
+	if err := waitForContainer("crowdsec", containerType); err != nil {
 		return "", fmt.Errorf("waiting for container: %w", err)
 	}
 

install/get-installer.sh

@@ -0,0 +1,180 @@
+#!/bin/bash
+
+# Get installer - Cross-platform installation script
+# Usage: curl -fsSL https://raw.githubusercontent.com/fosrl/installer/refs/heads/main/get-installer.sh | bash
+
+set -e
+
+# Colors for output
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+NC='\033[0m' # No Color
+
+# GitHub repository info
+REPO="fosrl/pangolin"
+GITHUB_API_URL="https://api.github.com/repos/${REPO}/releases/latest"
+
+# Function to print colored output
+print_status() {
+    echo -e "${GREEN}[INFO]${NC} $1"
+}
+
+print_warning() {
+    echo -e "${YELLOW}[WARN]${NC} $1"
+}
+
+print_error() {
+    echo -e "${RED}[ERROR]${NC} $1"
+}
+
+# Function to get latest version from GitHub API
+get_latest_version() {
+    local latest_info
+    
+    if command -v curl >/dev/null 2>&1; then
+        latest_info=$(curl -fsSL "$GITHUB_API_URL" 2>/dev/null)
+    elif command -v wget >/dev/null 2>&1; then
+        latest_info=$(wget -qO- "$GITHUB_API_URL" 2>/dev/null)
+    else
+        print_error "Neither curl nor wget is available. Please install one of them." >&2
+        exit 1
+    fi
+    
+    if [ -z "$latest_info" ]; then
+        print_error "Failed to fetch latest version information" >&2
+        exit 1
+    fi
+    
+    # Extract version from JSON response (works without jq)
+    local version=$(echo "$latest_info" | grep '"tag_name"' | head -1 | sed 's/.*"tag_name": *"\([^"]*\)".*/\1/')
+    
+    if [ -z "$version" ]; then
+        print_error "Could not parse version from GitHub API response" >&2
+        exit 1
+    fi
+    
+    # Remove 'v' prefix if present
+    version=$(echo "$version" | sed 's/^v//')
+    
+    echo "$version"
+}
+
+# Detect OS and architecture
+detect_platform() {
+    local os arch
+    
+    # Detect OS - only support Linux
+    case "$(uname -s)" in
+        Linux*)     os="linux" ;;
+        *)
+            print_error "Unsupported operating system: $(uname -s). Only Linux is supported."
+            exit 1
+            ;;
+    esac
+    
+    # Detect architecture - only support amd64 and arm64
+    case "$(uname -m)" in
+        x86_64|amd64)   arch="amd64" ;;
+        arm64|aarch64)  arch="arm64" ;;
+        *)
+            print_error "Unsupported architecture: $(uname -m). Only amd64 and arm64 are supported on Linux."
+            exit 1
+            ;;
+    esac
+    
+    echo "${os}_${arch}"
+}
+
+# Get installation directory
+get_install_dir() {
+    # Install to the current directory 
+    local install_dir="$(pwd)"
+    if [ ! -d "$install_dir" ]; then
+        print_error "Installation directory does not exist: $install_dir"
+        exit 1
+    fi
+    echo "$install_dir"
+}
+
+# Download and install installer
+install_installer() {
+    local platform="$1"
+    local install_dir="$2"
+    local binary_name="installer_${platform}"
+    
+    local download_url="${BASE_URL}/${binary_name}"
+    local temp_file="/tmp/installer"
+    local final_path="${install_dir}/installer"
+    
+    print_status "Downloading installer from ${download_url}"
+    
+    # Download the binary
+    if command -v curl >/dev/null 2>&1; then
+        curl -fsSL "$download_url" -o "$temp_file"
+    elif command -v wget >/dev/null 2>&1; then
+        wget -q "$download_url" -O "$temp_file"
+    else
+        print_error "Neither curl nor wget is available. Please install one of them."
+        exit 1
+    fi
+    
+    # Create install directory if it doesn't exist
+    mkdir -p "$install_dir"
+    
+    # Move binary to install directory
+    mv "$temp_file" "$final_path"
+    
+    # Make executable
+    chmod +x "$final_path"
+    
+    print_status "Installer downloaded to ${final_path}"
+}
+
+# Verify installation
+verify_installation() {
+    local install_dir="$1"
+    local installer_path="${install_dir}/installer"
+    
+    if [ -f "$installer_path" ] && [ -x "$installer_path" ]; then
+        print_status "Installation successful!"
+        return 0
+    else
+        print_error "Installation failed. Binary not found or not executable."
+        return 1
+    fi
+}
+
+# Main installation process
+main() {
+    print_status "Installing latest version of installer..."
+    
+    # Get latest version
+    print_status "Fetching latest version from GitHub..."
+    VERSION=$(get_latest_version)
+    print_status "Latest version: v${VERSION}"
+    
+    # Set base URL with the fetched version
+    BASE_URL="https://github.com/${REPO}/releases/download/${VERSION}"
+    
+    # Detect platform
+    PLATFORM=$(detect_platform)
+    print_status "Detected platform: ${PLATFORM}"
+    
+    # Get install directory
+    INSTALL_DIR=$(get_install_dir)
+    print_status "Install directory: ${INSTALL_DIR}"
+    
+    # Install installer
+    install_installer "$PLATFORM" "$INSTALL_DIR"
+    
+    # Verify installation
+    if verify_installation "$INSTALL_DIR"; then
+        print_status "Installer is ready to use!"
+    else
+        exit 1
+    fi
+}
+
+# Run main function
+main "$@"

install/go.mod

@@ -1,10 +1,10 @@
 module installer
 
-go 1.23.0
+go 1.24.0
 
 require (
-	golang.org/x/term v0.28.0
+	golang.org/x/term v0.36.0
 	gopkg.in/yaml.v3 v3.0.1
 )
 
-require golang.org/x/sys v0.29.0 // indirect
+require golang.org/x/sys v0.37.0 // indirect

install/go.sum

@@ -1,7 +1,7 @@
-golang.org/x/sys v0.29.0 h1:TPYlXGxvx1MGTn2GiZDhnjPA9wZzZeGKHHmKhHYvgaU=
+golang.org/x/sys v0.37.0 h1:fdNQudmxPjkdUTPnLn5mdQv7Zwvbvpaxqs831goi9kQ=
-golang.org/x/sys v0.29.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/sys v0.37.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
-golang.org/x/term v0.28.0 h1:/Ts8HFuMR2E6IP/jlo7QVLZHggjKQbhu/7H0LJFr3Gg=
+golang.org/x/term v0.36.0 h1:zMPR+aF8gfksFprF/Nc/rd1wRS1EI6nDBGyWAvDzx2Q=
-golang.org/x/term v0.28.0/go.mod h1:Sw/lC2IAUZ92udQNf3WodGtn4k/XoLyZoh8v/8uiwek=
+golang.org/x/term v0.36.0/go.mod h1:Qu394IJq6V6dCBRgwqshf3mPF85AqzYEzofzRdZkWss=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=

install/input.go

@@ -0,0 +1,74 @@
+package main
+
+import (
+	"bufio"
+	"fmt"
+	"strings"
+	"syscall"
+
+	"golang.org/x/term"
+)
+
+func readString(reader *bufio.Reader, prompt string, defaultValue string) string {
+	if defaultValue != "" {
+		fmt.Printf("%s (default: %s): ", prompt, defaultValue)
+	} else {
+		fmt.Print(prompt + ": ")
+	}
+	input, _ := reader.ReadString('\n')
+	input = strings.TrimSpace(input)
+	if input == "" {
+		return defaultValue
+	}
+	return input
+}
+
+func readStringNoDefault(reader *bufio.Reader, prompt string) string {
+	fmt.Print(prompt + ": ")
+	input, _ := reader.ReadString('\n')
+	return strings.TrimSpace(input)
+}
+
+func readPassword(prompt string, reader *bufio.Reader) string {
+	if term.IsTerminal(int(syscall.Stdin)) {
+		fmt.Print(prompt + ": ")
+		// Read password without echo if we're in a terminal
+		password, err := term.ReadPassword(int(syscall.Stdin))
+		fmt.Println() // Add a newline since ReadPassword doesn't add one
+		if err != nil {
+			return ""
+		}
+		input := strings.TrimSpace(string(password))
+		if input == "" {
+			return readPassword(prompt, reader)
+		}
+		return input
+	} else {
+		// Fallback to reading from stdin if not in a terminal
+		return readString(reader, prompt, "")
+	}
+}
+
+func readBool(reader *bufio.Reader, prompt string, defaultValue bool) bool {
+	defaultStr := "no"
+	if defaultValue {
+		defaultStr = "yes"
+	}
+	input := readString(reader, prompt+" (yes/no)", defaultStr)
+	return strings.ToLower(input) == "yes"
+}
+
+func readBoolNoDefault(reader *bufio.Reader, prompt string) bool {
+	input := readStringNoDefault(reader, prompt+" (yes/no)")
+	return strings.ToLower(input) == "yes"
+}
+
+func readInt(reader *bufio.Reader, prompt string, defaultValue int) int {
+	input := readString(reader, prompt, fmt.Sprintf("%d", defaultValue))
+	if input == "" {
+		return defaultValue
+	}
+	value := defaultValue
+	fmt.Sscanf(input, "%d", &value)
+	return value
+}

install/input.txt

@@ -1,5 +1,7 @@
+docker
 example.com
 pangolin.example.com
+yes
 admin@example.com
 yes
 admin@example.com

install/main.go

@@ -2,23 +2,21 @@ package main
 
 import (
 	"bufio"
-	"bytes"
 	"embed"
 	"fmt"
 	"io"
 	"io/fs"
+	"math/rand"
+	"net"
+	"net/http"
+	"net/url"
 	"os"
 	"os/exec"
 	"path/filepath"
 	"runtime"
 	"strings"
-	"syscall"
 	"text/template"
 	"time"
-	"unicode"
-	"math/rand"
-
-	"golang.org/x/term"
 )
 
 // DO NOT EDIT THIS FUNCTION; IT MATCHED BY REGEX IN CICD
@@ -32,46 +30,70 @@ func loadVersions(config *Config) {
 var configFiles embed.FS
 
 type Config struct {
-	PangolinVersion            string
+	InstallationContainerType SupportedContainer
-	GerbilVersion              string
+	PangolinVersion           string
-	BadgerVersion              string
+	GerbilVersion             string
-	BaseDomain                 string
+	BadgerVersion             string
-	DashboardDomain            string
+	BaseDomain                string
-	LetsEncryptEmail           string
+	DashboardDomain           string
-	AdminUserEmail             string
+	EnableIPv6                bool
-	AdminUserPassword          string
+	LetsEncryptEmail          string
-	DisableSignupWithoutInvite bool
+	EnableEmail               bool
-	DisableUserCreateOrg       bool
+	EmailSMTPHost             string
-	EnableEmail                bool
+	EmailSMTPPort             int
-	EmailSMTPHost              string
+	EmailSMTPUser             string
-	EmailSMTPPort              int
+	EmailSMTPPass             string
-	EmailSMTPUser              string
+	EmailNoReply              string
-	EmailSMTPPass              string
+	InstallGerbil             bool
-	EmailNoReply               string
+	TraefikBouncerKey         string
-	InstallGerbil              bool
+	DoCrowdsecInstall         bool
-	TraefikBouncerKey          string
+	EnableGeoblocking         bool
-	DoCrowdsecInstall          bool
+	Secret                    string
-	Secret                string
 }
 
-func main() {
+type SupportedContainer string
-	reader := bufio.NewReader(os.Stdin)
 
-	// check if the user is root
+const (
-	if os.Geteuid() != 0 {
+	Docker SupportedContainer = "docker"
-		fmt.Println("This script must be run as root")
+	Podman SupportedContainer = "podman"
-		os.Exit(1)
+	Undefined SupportedContainer = "undefined"
+)
+
+func main() {
+
+	// print a banner about prerequisites - opening port 80, 443, 51820, and 21820 on the VPS and firewall and pointing your domain to the VPS IP with a records. Docs are at http://localhost:3000/Getting%20Started/dns-networking
+
+	fmt.Println("Welcome to the Pangolin installer!")
+	fmt.Println("This installer will help you set up Pangolin on your server.")
+	fmt.Println("\nPlease make sure you have the following prerequisites:")
+	fmt.Println("- Open TCP ports 80 and 443 and UDP ports 51820 and 21820 on your VPS and firewall.")
+	fmt.Println("\nLets get started!")
+
+	if os.Geteuid() == 0 { // WE NEED TO BE SUDO TO CHECK THIS
+		for _, p := range []int{80, 443} {
+			if err := checkPortsAvailable(p); err != nil {
+				fmt.Fprintln(os.Stderr, err)
+
+				fmt.Printf("Please close any services on ports 80/443 in order to run the installation smoothly. If you already have the Pangolin stack running, shut them down before proceeding.\n")
+				os.Exit(1)
+			}
+		}
 	}
 
+	reader := bufio.NewReader(os.Stdin)
+
 	var config Config
-	config.DoCrowdsecInstall = false
+	var alreadyInstalled = false
-	config.Secret = generateRandomSecretKey()
 
 	// check if there is already a config file
 	if _, err := os.Stat("config/config.yml"); err != nil {
 		config = collectUserInput(reader)
 
 		loadVersions(&config)
+		config.DoCrowdsecInstall = false
+		config.Secret = generateRandomSecretKey()
+
+		fmt.Println("\n=== Generating Configuration Files ===")
 
 		if err := createConfigFiles(config); err != nil {
 			fmt.Printf("Error creating config files: %v\n", err)
@@ -80,29 +102,89 @@ func main() {
 
 		moveFile("config/docker-compose.yml", "docker-compose.yml")
 
-		if !isDockerInstalled() && runtime.GOOS == "linux" {
+		fmt.Println("\nConfiguration files created successfully!")
-			if readBool(reader, "Docker is not installed. Would you like to install it?", true) {
+
-				installDocker()
+		// Download MaxMind database if requested
+		if config.EnableGeoblocking {
+			fmt.Println("\n=== Downloading MaxMind Database ===")
+			if err := downloadMaxMindDatabase(); err != nil {
+				fmt.Printf("Error downloading MaxMind database: %v\n", err)
+				fmt.Println("You can download it manually later if needed.")
 			}
 		}
 
 		fmt.Println("\n=== Starting installation ===")
 
-		if isDockerInstalled() {
+		if readBool(reader, "Would you like to install and start the containers?", true) {
-			if readBool(reader, "Would you like to install and start the containers?", true) {
-				if err := pullContainers(); err != nil {
-					fmt.Println("Error: ", err)
-					return
-				}
 
-				if err := startContainers(); err != nil {
+			config.InstallationContainerType = podmanOrDocker(reader)
-					fmt.Println("Error: ", err)
+
-					return
+			if !isDockerInstalled() && runtime.GOOS == "linux" && config.InstallationContainerType == Docker {
+				if readBool(reader, "Docker is not installed. Would you like to install it?", true) {
+					installDocker()
+					// try to start docker service but ignore errors
+					if err := startDockerService(); err != nil {
+						fmt.Println("Error starting Docker service:", err)
+					} else {
+						fmt.Println("Docker service started successfully!")
+					}
+					// wait 10 seconds for docker to start checking if docker is running every 2 seconds
+					fmt.Println("Waiting for Docker to start...")
+					for i := 0; i < 5; i++ {
+						if isDockerRunning() {
+							fmt.Println("Docker is running!")
+							break
+						}
+						fmt.Println("Docker is not running yet, waiting...")
+						time.Sleep(2 * time.Second)
+					}
+					if !isDockerRunning() {
+						fmt.Println("Docker is still not running after 10 seconds. Please check the installation.")
+						os.Exit(1)
+					}
+					fmt.Println("Docker installed successfully!")
 				}
 			}
+
+			if err := pullContainers(config.InstallationContainerType); err != nil {
+				fmt.Println("Error: ", err)
+				return
+			}
+
+			if err := startContainers(config.InstallationContainerType); err != nil {
+				fmt.Println("Error: ", err)
+				return
+			}
 		}
+
 	} else {
-		fmt.Println("Looks like you already installed, so I am going to do the setup...")
+		alreadyInstalled = true
+		fmt.Println("Looks like you already installed Pangolin!")
+		
+		// Check if MaxMind database exists and offer to update it
+		fmt.Println("\n=== MaxMind Database Update ===")
+		if _, err := os.Stat("config/GeoLite2-Country.mmdb"); err == nil {
+			fmt.Println("MaxMind GeoLite2 Country database found.")
+			if readBool(reader, "Would you like to update the MaxMind database to the latest version?", false) {
+				if err := downloadMaxMindDatabase(); err != nil {
+					fmt.Printf("Error updating MaxMind database: %v\n", err)
+					fmt.Println("You can try updating it manually later if needed.")
+				}
+			}
+		} else {
+			fmt.Println("MaxMind GeoLite2 Country database not found.")
+			if readBool(reader, "Would you like to download the MaxMind GeoLite2 database for geoblocking functionality?", false) {
+				if err := downloadMaxMindDatabase(); err != nil {
+					fmt.Printf("Error downloading MaxMind database: %v\n", err)
+					fmt.Println("You can try downloading it manually later if needed.")
+				}
+				// Now you need to update your config file accordingly to enable geoblocking
+				fmt.Println("Please remember to update your config/config.yml file to enable geoblocking! \n")
+				// add   maxmind_db_path: "./config/GeoLite2-Country.mmdb" under server
+				fmt.Println("Add the following line under the 'server' section:")
+				fmt.Println("  maxmind_db_path: \"./config/GeoLite2-Country.mmdb\"")
+			}
+		}
 	}
 
 	if !checkIsCrowdsecInstalledInCompose() {
@@ -110,14 +192,28 @@ func main() {
 		// check if crowdsec is installed
 		if readBool(reader, "Would you like to install CrowdSec?", false) {
 			fmt.Println("This installer constitutes a minimal viable CrowdSec deployment. CrowdSec will add extra complexity to your Pangolin installation and may not work to the best of its abilities out of the box. Users are expected to implement configuration adjustments on their own to achieve the best security posture. Consult the CrowdSec documentation for detailed configuration instructions.")
+
+			// BUG: crowdsec installation will be skipped if the user chooses to install on the first installation.
 			if readBool(reader, "Are you willing to manage CrowdSec?", false) {
 				if config.DashboardDomain == "" {
-					traefikConfig, err := ReadTraefikConfig("config/traefik/traefik_config.yml", "config/traefik/dynamic_config.yml")
+					traefikConfig, err := ReadTraefikConfig("config/traefik/traefik_config.yml")
 					if err != nil {
 						fmt.Printf("Error reading config: %v\n", err)
 						return
 					}
-					config.DashboardDomain = traefikConfig.DashboardDomain
+					appConfig, err := ReadAppConfig("config/config.yml")
+					if err != nil {
+						fmt.Printf("Error reading config: %v\n", err)
+						return
+					}
+
+					parsedURL, err := url.Parse(appConfig.DashboardURL)
+					if err != nil {
+                        fmt.Printf("Error parsing URL: %v\n", err)
+                        return
+					}
+
+					config.DashboardDomain = parsedURL.Hostname()
 					config.LetsEncryptEmail = traefikConfig.LetsEncryptEmail
 					config.BadgerVersion = traefikConfig.BadgerVersion
 
@@ -132,66 +228,110 @@ func main() {
 					}
 				}
 
+				config.InstallationContainerType = podmanOrDocker(reader)
+
 				config.DoCrowdsecInstall = true
-				installCrowdsec(config)
+				err := installCrowdsec(config)
+				if err != nil {
+					fmt.Printf("Error installing CrowdSec: %v\n", err)
+					return
+				}
+
+				fmt.Println("CrowdSec installed successfully!")
+				return
 			}
 		}
 	}
 
-	fmt.Println("Installation complete!")
+	if !alreadyInstalled {
-}
+		// Setup Token Section
+		fmt.Println("\n=== Setup Token ===")
 
-func readString(reader *bufio.Reader, prompt string, defaultValue string) string {
+		// Check if containers were started during this installation
-	if defaultValue != "" {
+		containersStarted := false
-		fmt.Printf("%s (default: %s): ", prompt, defaultValue)
+		if (isDockerInstalled() && config.InstallationContainerType == Docker) ||
-	} else {
+			(isPodmanInstalled() && config.InstallationContainerType == Podman) {
-		fmt.Print(prompt + ": ")
+			// Try to fetch and display the token if containers are running
-	}
+			containersStarted = true
-	input, _ := reader.ReadString('\n')
+			printSetupToken(config.InstallationContainerType, config.DashboardDomain)
-	input = strings.TrimSpace(input)
-	if input == "" {
-		return defaultValue
-	}
-	return input
-}
-
-func readPassword(prompt string, reader *bufio.Reader) string {
-	if term.IsTerminal(int(syscall.Stdin)) {
-		fmt.Print(prompt + ": ")
-		// Read password without echo if we're in a terminal
-		password, err := term.ReadPassword(int(syscall.Stdin))
-		fmt.Println() // Add a newline since ReadPassword doesn't add one
-		if err != nil {
-			return ""
 		}
-		input := strings.TrimSpace(string(password))
+
-		if input == "" {
+		// If containers weren't started or token wasn't found, show instructions
-			return readPassword(prompt, reader)
+		if !containersStarted {
+			showSetupTokenInstructions(config.InstallationContainerType, config.DashboardDomain)
 		}
-		return input
+	}
+
+	fmt.Println("\nInstallation complete!")
+
+	fmt.Printf("\nTo complete the initial setup, please visit:\nhttps://%s/auth/initial-setup\n", config.DashboardDomain)
+}
+
+func podmanOrDocker(reader *bufio.Reader) SupportedContainer {
+	inputContainer := readString(reader, "Would you like to run Pangolin as Docker or Podman containers?", "docker")
+
+	chosenContainer := Docker
+	if strings.EqualFold(inputContainer, "docker") {
+		chosenContainer = Docker
+	} else if strings.EqualFold(inputContainer, "podman") {
+		chosenContainer = Podman
 	} else {
-		// Fallback to reading from stdin if not in a terminal
+		fmt.Printf("Unrecognized container type: %s. Valid options are 'docker' or 'podman'.\n", inputContainer)
-		return readString(reader, prompt, "")
+		os.Exit(1)
 	}
-}
 
-func readBool(reader *bufio.Reader, prompt string, defaultValue bool) bool {
+	if chosenContainer == Podman {
-	defaultStr := "no"
+		if !isPodmanInstalled() {
-	if defaultValue {
+			fmt.Println("Podman or podman-compose is not installed. Please install both manually. Automated installation will be available in a later release.")
-		defaultStr = "yes"
+			os.Exit(1)
-	}
+		}
-	input := readString(reader, prompt+" (yes/no)", defaultStr)
-	return strings.ToLower(input) == "yes"
-}
 
-func readInt(reader *bufio.Reader, prompt string, defaultValue int) int {
+		if err := exec.Command("bash", "-c", "cat /etc/sysctl.conf | grep 'net.ipv4.ip_unprivileged_port_start='").Run(); err != nil {
-	input := readString(reader, prompt, fmt.Sprintf("%d", defaultValue))
+			fmt.Println("Would you like to configure ports >= 80 as unprivileged ports? This enables podman containers to listen on low-range ports.")
-	if input == "" {
+			fmt.Println("Pangolin will experience startup issues if this is not configured, because it needs to listen on port 80/443 by default.")
-		return defaultValue
+			approved := readBool(reader, "The installer is about to execute \"echo 'net.ipv4.ip_unprivileged_port_start=80' >> /etc/sysctl.conf && sysctl -p\". Approve?", true)
+			if approved {
+				if os.Geteuid() != 0 {
+					fmt.Println("You need to run the installer as root for such a configuration.")
+					os.Exit(1)
+				}
+
+				// Podman containers are not able to listen on privileged ports. The official recommendation is to
+				// container low-range ports as unprivileged ports.
+				// Linux only.
+
+				if err := run("bash", "-c", "echo 'net.ipv4.ip_unprivileged_port_start=80' >> /etc/sysctl.conf && sysctl -p"); err != nil {
+					fmt.Sprintf("failed to configure unprivileged ports: %v.\n", err)
+					os.Exit(1)
+				}
+			} else {
+				fmt.Println("You need to configure port forwarding or adjust the listening ports before running pangolin.")
+			}
+		} else {
+			fmt.Println("Unprivileged ports have been configured.")
+		}
+
+	} else if chosenContainer == Docker {
+		// check if docker is not installed and the user is root
+		if !isDockerInstalled() {
+			if os.Geteuid() != 0 {
+				fmt.Println("Docker is not installed. Please install Docker manually or run this installer as root.")
+				os.Exit(1)
+			}
+		}
+
+		// check if the user is in the docker group (linux only)
+		if !isUserInDockerGroup() {
+			fmt.Println("You are not in the docker group.")
+			fmt.Println("The installer will not be able to run docker commands without running it as root.")
+			os.Exit(1)
+		}
+	} else {
+		// This shouldn't happen unless there's a third container runtime.
+		os.Exit(1)
 	}
-	value := defaultValue
+
-	fmt.Sscanf(input, "%d", &value)
+	return chosenContainer
-	return value
 }
 
 func collectUserInput(reader *bufio.Reader) Config {
@@ -199,49 +339,27 @@ func collectUserInput(reader *bufio.Reader) Config {
 
 	// Basic configuration
 	fmt.Println("\n=== Basic Configuration ===")
+
 	config.BaseDomain = readString(reader, "Enter your base domain (no subdomain e.g. example.com)", "")
-	config.DashboardDomain = readString(reader, "Enter the domain for the Pangolin dashboard", "pangolin."+config.BaseDomain)
+
+	// Set default dashboard domain after base domain is collected
+	defaultDashboardDomain := ""
+	if config.BaseDomain != "" {
+		defaultDashboardDomain = "pangolin." + config.BaseDomain
+	}
+	config.DashboardDomain = readString(reader, "Enter the domain for the Pangolin dashboard", defaultDashboardDomain)
 	config.LetsEncryptEmail = readString(reader, "Enter email for Let's Encrypt certificates", "")
 	config.InstallGerbil = readBool(reader, "Do you want to use Gerbil to allow tunneled connections", true)
 
-	// Admin user configuration
-	fmt.Println("\n=== Admin User Configuration ===")
-	config.AdminUserEmail = readString(reader, "Enter admin user email", "admin@"+config.BaseDomain)
-	for {
-		pass1 := readPassword("Create admin user password", reader)
-		pass2 := readPassword("Confirm admin user password", reader)
-
-		if pass1 != pass2 {
-			fmt.Println("Passwords do not match")
-		} else {
-			config.AdminUserPassword = pass1
-			if valid, message := validatePassword(config.AdminUserPassword); valid {
-				break
-			} else {
-				fmt.Println("Invalid password:", message)
-				fmt.Println("Password requirements:")
-				fmt.Println("- At least one uppercase English letter")
-				fmt.Println("- At least one lowercase English letter")
-				fmt.Println("- At least one digit")
-				fmt.Println("- At least one special character")
-			}
-		}
-	}
-
-	// Security settings
-	fmt.Println("\n=== Security Settings ===")
-	config.DisableSignupWithoutInvite = readBool(reader, "Disable signup without invite", true)
-	config.DisableUserCreateOrg = readBool(reader, "Disable users from creating organizations", false)
-
 	// Email configuration
 	fmt.Println("\n=== Email Configuration ===")
-	config.EnableEmail = readBool(reader, "Enable email functionality", false)
+	config.EnableEmail = readBool(reader, "Enable email functionality (SMTP)", false)
 
 	if config.EnableEmail {
 		config.EmailSMTPHost = readString(reader, "Enter SMTP host", "")
 		config.EmailSMTPPort = readInt(reader, "Enter SMTP port (default 587)", 587)
 		config.EmailSMTPUser = readString(reader, "Enter SMTP username", "")
-		config.EmailSMTPPass = readString(reader, "Enter SMTP password", "")
+		config.EmailSMTPPass = readString(reader, "Enter SMTP password", "") // Should this be readPassword?
 		config.EmailNoReply = readString(reader, "Enter no-reply email address", "")
 	}
 
@@ -250,68 +368,26 @@ func collectUserInput(reader *bufio.Reader) Config {
 		fmt.Println("Error: Domain name is required")
 		os.Exit(1)
 	}
-	if config.DashboardDomain == "" {
-		fmt.Println("Error: Dashboard Domain name is required")
-		os.Exit(1)
-	}
 	if config.LetsEncryptEmail == "" {
 		fmt.Println("Error: Let's Encrypt email is required")
 		os.Exit(1)
 	}
-	if config.AdminUserEmail == "" || config.AdminUserPassword == "" {
+
-		fmt.Println("Error: Admin user email and password are required")
+	// Advanced configuration
+
+	fmt.Println("\n=== Advanced Configuration ===")
+
+	config.EnableIPv6 = readBool(reader, "Is your server IPv6 capable?", true)
+	config.EnableGeoblocking = readBool(reader, "Do you want to download the MaxMind GeoLite2 database for geoblocking functionality?", false)
+
+	if config.DashboardDomain == "" {
+		fmt.Println("Error: Dashboard Domain name is required")
 		os.Exit(1)
 	}
 
 	return config
 }
 
-func validatePassword(password string) (bool, string) {
-	if len(password) == 0 {
-		return false, "Password cannot be empty"
-	}
-
-	var (
-		hasUpper   bool
-		hasLower   bool
-		hasDigit   bool
-		hasSpecial bool
-	)
-
-	for _, char := range password {
-		switch {
-		case unicode.IsUpper(char):
-			hasUpper = true
-		case unicode.IsLower(char):
-			hasLower = true
-		case unicode.IsDigit(char):
-			hasDigit = true
-		case unicode.IsPunct(char) || unicode.IsSymbol(char):
-			hasSpecial = true
-		}
-	}
-
-	var missing []string
-	if !hasUpper {
-		missing = append(missing, "an uppercase letter")
-	}
-	if !hasLower {
-		missing = append(missing, "a lowercase letter")
-	}
-	if !hasDigit {
-		missing = append(missing, "a digit")
-	}
-	if !hasSpecial {
-		missing = append(missing, "a special character")
-	}
-
-	if len(missing) > 0 {
-		return false, fmt.Sprintf("Password must contain %s", strings.Join(missing, ", "))
-	}
-
-	return true, ""
-}
-
 func createConfigFiles(config Config) error {
 	os.MkdirAll("config", 0755)
 	os.MkdirAll("config/letsencrypt", 0755)
@@ -381,7 +457,6 @@ func createConfigFiles(config Config) error {
 
 		return nil
 	})
-
 	if err != nil {
 		return fmt.Errorf("error walking config files: %v", err)
 	}
@@ -389,171 +464,6 @@ func createConfigFiles(config Config) error {
 	return nil
 }
 
-func installDocker() error {
-	// Detect Linux distribution
-	cmd := exec.Command("cat", "/etc/os-release")
-	output, err := cmd.Output()
-	if err != nil {
-		return fmt.Errorf("failed to detect Linux distribution: %v", err)
-	}
-	osRelease := string(output)
-
-	// Detect system architecture
-	archCmd := exec.Command("uname", "-m")
-	archOutput, err := archCmd.Output()
-	if err != nil {
-		return fmt.Errorf("failed to detect system architecture: %v", err)
-	}
-	arch := strings.TrimSpace(string(archOutput))
-
-	// Map architecture to Docker's architecture naming
-	var dockerArch string
-	switch arch {
-	case "x86_64":
-		dockerArch = "amd64"
-	case "aarch64":
-		dockerArch = "arm64"
-	default:
-		return fmt.Errorf("unsupported architecture: %s", arch)
-	}
-
-	var installCmd *exec.Cmd
-	switch {
-	case strings.Contains(osRelease, "ID=ubuntu"):
-		installCmd = exec.Command("bash", "-c", fmt.Sprintf(`
-			apt-get update &&
-			apt-get install -y apt-transport-https ca-certificates curl software-properties-common &&
-			curl -fsSL https://download.docker.com/linux/ubuntu/gpg | gpg --dearmor -o /usr/share/keyrings/docker-archive-keyring.gpg &&
-			echo "deb [arch=%s signed-by=/usr/share/keyrings/docker-archive-keyring.gpg] https://download.docker.com/linux/ubuntu $(lsb_release -cs) stable" > /etc/apt/sources.list.d/docker.list &&
-			apt-get update &&
-			apt-get install -y docker-ce docker-ce-cli containerd.io docker-compose-plugin
-		`, dockerArch))
-	case strings.Contains(osRelease, "ID=debian"):
-		installCmd = exec.Command("bash", "-c", fmt.Sprintf(`
-			apt-get update &&
-			apt-get install -y apt-transport-https ca-certificates curl software-properties-common &&
-			curl -fsSL https://download.docker.com/linux/debian/gpg | gpg --dearmor -o /usr/share/keyrings/docker-archive-keyring.gpg &&
-			echo "deb [arch=%s signed-by=/usr/share/keyrings/docker-archive-keyring.gpg] https://download.docker.com/linux/debian $(lsb_release -cs) stable" > /etc/apt/sources.list.d/docker.list &&
-			apt-get update &&
-			apt-get install -y docker-ce docker-ce-cli containerd.io docker-compose-plugin
-		`, dockerArch))
-	case strings.Contains(osRelease, "ID=fedora"):
-		installCmd = exec.Command("bash", "-c", `
-			dnf -y install dnf-plugins-core &&
-			dnf config-manager --add-repo https://download.docker.com/linux/fedora/docker-ce.repo &&
-			dnf install -y docker-ce docker-ce-cli containerd.io docker-compose-plugin
-		`)
-	case strings.Contains(osRelease, "ID=opensuse") || strings.Contains(osRelease, "ID=\"opensuse-"):
-		installCmd = exec.Command("bash", "-c", `
-			zypper install -y docker docker-compose &&
-			systemctl enable docker
-		`)
-	case strings.Contains(osRelease, "ID=rhel") || strings.Contains(osRelease, "ID=\"rhel"):
-		installCmd = exec.Command("bash", "-c", `
-			dnf remove -y runc &&
-			dnf -y install yum-utils &&
-			dnf config-manager --add-repo https://download.docker.com/linux/rhel/docker-ce.repo &&
-			dnf install -y docker-ce docker-ce-cli containerd.io docker-compose-plugin &&
-			systemctl enable docker
-		`)
-	case strings.Contains(osRelease, "ID=amzn"):
-		installCmd = exec.Command("bash", "-c", `
-			yum update -y &&
-			yum install -y docker &&
-			systemctl enable docker &&
-			usermod -a -G docker ec2-user
-		`)
-	default:
-		return fmt.Errorf("unsupported Linux distribution")
-	}
-	installCmd.Stdout = os.Stdout
-	installCmd.Stderr = os.Stderr
-	return installCmd.Run()
-}
-
-func isDockerInstalled() bool {
-	cmd := exec.Command("docker", "--version")
-	if err := cmd.Run(); err != nil {
-		return false
-	}
-	return true
-}
-
-// executeDockerComposeCommandWithArgs executes the appropriate docker command with arguments supplied
-func executeDockerComposeCommandWithArgs(args ...string) error {
-	var cmd *exec.Cmd
-	var useNewStyle bool
-
-	if !isDockerInstalled() {
-		return fmt.Errorf("docker is not installed")
-	}
-
-	checkCmd := exec.Command("docker", "compose", "version")
-	if err := checkCmd.Run(); err == nil {
-		useNewStyle = true
-	} else {
-		checkCmd = exec.Command("docker-compose", "version")
-		if err := checkCmd.Run(); err == nil {
-			useNewStyle = false
-		} else {
-			return fmt.Errorf("neither 'docker compose' nor 'docker-compose' command is available")
-		}
-	}
-	
-	if useNewStyle {
-		cmd = exec.Command("docker", append([]string{"compose"}, args...)...)
-	} else {
-		cmd = exec.Command("docker-compose", args...)
-	}
-
-    cmd.Stdout = os.Stdout
-    cmd.Stderr = os.Stderr
-    return cmd.Run()
-}
-
-// pullContainers pulls the containers using the appropriate command.
-func pullContainers() error {
-	fmt.Println("Pulling the container images...")
-
-	if err := executeDockerComposeCommandWithArgs("-f", "docker-compose.yml", "pull", "--policy", "always"); err != nil {
-		return fmt.Errorf("failed to pull the containers: %v", err)
-	}
-
-	return nil
-}
-
-// startContainers starts the containers using the appropriate command.
-func startContainers() error {
-	fmt.Println("Starting containers...")
-	if err := executeDockerComposeCommandWithArgs("-f", "docker-compose.yml", "up", "-d", "--force-recreate"); err != nil {
-		return fmt.Errorf("failed to start containers: %v", err)
-	}
-
-	return nil
-}
-
-// stopContainers stops the containers using the appropriate command.
-func stopContainers() error {
-	fmt.Println("Stopping containers...")
-	
-	if err := executeDockerComposeCommandWithArgs("-f", "docker-compose.yml", "down"); err != nil {
-		return fmt.Errorf("failed to stop containers: %v", err)
-	}
-
-	return nil
-}
-
-// restartContainer restarts a specific container using the appropriate command.
-func restartContainer(container string) error {
-	fmt.Println("Restarting containers...")
-	
-	if err := executeDockerComposeCommandWithArgs("-f", "docker-compose.yml", "restart", container); err != nil {
-		return fmt.Errorf("failed to stop the container \"%s\": %v", container, err)
-	}
-
-	return nil
-}
-
 func copyFile(src, dst string) error {
 	source, err := os.Open(src)
 	if err != nil {
@@ -579,32 +489,91 @@ func moveFile(src, dst string) error {
 	return os.Remove(src)
 }
 
-func waitForContainer(containerName string) error {
+func printSetupToken(containerType SupportedContainer, dashboardDomain string) {
-	maxAttempts := 30
+	fmt.Println("Waiting for Pangolin to generate setup token...")
-	retryInterval := time.Second * 2
 
-	for attempt := 0; attempt < maxAttempts; attempt++ {
+	// Wait for Pangolin to be healthy
-		// Check if container is running
+	if err := waitForContainer("pangolin", containerType); err != nil {
-		cmd := exec.Command("docker", "container", "inspect", "-f", "{{.State.Running}}", containerName)
+		fmt.Println("Warning: Pangolin container did not become healthy in time.")
-		var out bytes.Buffer
+		return
-		cmd.Stdout = &out
-
-		if err := cmd.Run(); err != nil {
-			// If the container doesn't exist or there's another error, wait and retry
-			time.Sleep(retryInterval)
-			continue
-		}
-
-		isRunning := strings.TrimSpace(out.String()) == "true"
-		if isRunning {
-			return nil
-		}
-
-		// Container exists but isn't running yet, wait and retry
-		time.Sleep(retryInterval)
 	}
 
-	return fmt.Errorf("container %s did not start within %v seconds", containerName, maxAttempts*int(retryInterval.Seconds()))
+	// Give a moment for the setup token to be generated
+	time.Sleep(2 * time.Second)
+
+	// Fetch logs
+	var cmd *exec.Cmd
+	if containerType == Docker {
+		cmd = exec.Command("docker", "logs", "pangolin")
+	} else {
+		cmd = exec.Command("podman", "logs", "pangolin")
+	}
+	output, err := cmd.Output()
+	if err != nil {
+		fmt.Println("Warning: Could not fetch Pangolin logs to find setup token.")
+		return
+	}
+
+	// Parse for setup token
+	lines := strings.Split(string(output), "\n")
+	for i, line := range lines {
+		if strings.Contains(line, "=== SETUP TOKEN GENERATED ===") || strings.Contains(line, "=== SETUP TOKEN EXISTS ===") {
+			// Look for "Token: ..." in the next few lines
+			for j := i + 1; j < i+5 && j < len(lines); j++ {
+				trimmedLine := strings.TrimSpace(lines[j])
+				if strings.Contains(trimmedLine, "Token:") {
+					// Extract token after "Token:"
+					tokenStart := strings.Index(trimmedLine, "Token:")
+					if tokenStart != -1 {
+						token := strings.TrimSpace(trimmedLine[tokenStart+6:])
+						fmt.Printf("Setup token: %s\n", token)
+						fmt.Println("")
+						fmt.Println("This token is required to register the first admin account in the web UI at:")
+						fmt.Printf("https://%s/auth/initial-setup\n", dashboardDomain)
+						fmt.Println("")
+						fmt.Println("Save this token securely. It will be invalid after the first admin is created.")
+						return
+					}
+				}
+			}
+		}
+	}
+	fmt.Println("Warning: Could not find a setup token in Pangolin logs.")
+}
+
+func showSetupTokenInstructions(containerType SupportedContainer, dashboardDomain string) {
+	fmt.Println("\n=== Setup Token Instructions ===")
+	fmt.Println("To get your setup token, you need to:")
+	fmt.Println("")
+	fmt.Println("1. Start the containers")
+	if containerType == Docker {
+		fmt.Println("   docker compose up -d")
+	} else if containerType == Podman {
+		fmt.Println("   podman-compose up -d")
+	} else {
+	}
+	fmt.Println("")
+	fmt.Println("2. Wait for the Pangolin container to start and generate the token")
+	fmt.Println("")
+	fmt.Println("3. Check the container logs for the setup token")
+	if containerType == Docker {
+		fmt.Println("   docker logs pangolin | grep -A 2 -B 2 'SETUP TOKEN'")
+	} else if containerType == Podman {
+		fmt.Println("   podman logs pangolin | grep -A 2 -B 2 'SETUP TOKEN'")
+	} else {
+	}
+	fmt.Println("")
+	fmt.Println("4. Look for output like")
+	fmt.Println("   === SETUP TOKEN GENERATED ===")
+	fmt.Println("   Token: [your-token-here]")
+	fmt.Println("   Use this token on the initial setup page")
+	fmt.Println("")
+	fmt.Println("5. Use the token to complete initial setup at")
+	fmt.Printf("   https://%s/auth/initial-setup\n", dashboardDomain)
+	fmt.Println("")
+	fmt.Println("The setup token is required to register the first admin account.")
+	fmt.Println("Save it securely - it will be invalid after the first admin is created.")
+	fmt.Println("================================")
 }
 
 func generateRandomSecretKey() string {
@@ -619,4 +588,84 @@ func generateRandomSecretKey() string {
 		b[i] = charset[seededRand.Intn(len(charset))]
 	}
 	return string(b)
-}
+}
+
+func getPublicIP() string {
+	client := &http.Client{
+		Timeout: 10 * time.Second,
+	}
+
+	resp, err := client.Get("https://ifconfig.io/ip")
+	if err != nil {
+		return ""
+	}
+	defer resp.Body.Close()
+
+	body, err := io.ReadAll(resp.Body)
+	if err != nil {
+		return ""
+	}
+
+	ip := strings.TrimSpace(string(body))
+
+	// Validate that it's a valid IP address
+	if net.ParseIP(ip) != nil {
+		return ip
+	}
+
+	return ""
+}
+
+// Run external commands with stdio/stderr attached.
+func run(name string, args ...string) error {
+	cmd := exec.Command(name, args...)
+	cmd.Stdout = os.Stdout
+	cmd.Stderr = os.Stderr
+	return cmd.Run()
+}
+
+func checkPortsAvailable(port int) error {
+	addr := fmt.Sprintf(":%d", port)
+	ln, err := net.Listen("tcp", addr)
+	if err != nil {
+		return fmt.Errorf(
+			"ERROR: port %d is occupied or cannot be bound: %w\n\n",
+			port, err,
+		)
+	}
+	if closeErr := ln.Close(); closeErr != nil {
+		fmt.Fprintf(os.Stderr,
+			"WARNING: failed to close test listener on port %d: %v\n",
+			port, closeErr,
+		)
+	}
+	return nil
+}
+
+func downloadMaxMindDatabase() error {
+	fmt.Println("Downloading MaxMind GeoLite2 Country database...")
+	
+	// Download the GeoLite2 Country database
+	if err := run("curl", "-L", "-o", "GeoLite2-Country.tar.gz", 
+		"https://github.com/GitSquared/node-geolite2-redist/raw/refs/heads/master/redist/GeoLite2-Country.tar.gz"); err != nil {
+		return fmt.Errorf("failed to download GeoLite2 database: %v", err)
+	}
+	
+	// Extract the database
+	if err := run("tar", "-xzf", "GeoLite2-Country.tar.gz"); err != nil {
+		return fmt.Errorf("failed to extract GeoLite2 database: %v", err)
+	}
+	
+	// Find the .mmdb file and move it to the config directory
+	if err := run("bash", "-c", "mv GeoLite2-Country_*/GeoLite2-Country.mmdb config/"); err != nil {
+		return fmt.Errorf("failed to move GeoLite2 database to config directory: %v", err)
+	}
+	
+	// Clean up the downloaded files
+	if err := run("rm", "-rf", "GeoLite2-Country.tar.gz", "GeoLite2-Country_*"); err != nil {
+		fmt.Printf("Warning: failed to clean up temporary files: %v\n", err)
+	}
+	
+	fmt.Println("MaxMind GeoLite2 Country database downloaded successfully!")
+	return nil
+}

internationalization/de.md

@@ -1,287 +0,0 @@
-## Authentication Site
-
-| EN                                                       | DE                                                                                 | Notes      |
-| -------------------------------------------------------- | ---------------------------------------------------------------------------------- | ---------- |
-| Powered by [Pangolin](https://github.com/fosrl/pangolin) | Bereitgestellt von [Pangolin](https://github.com/fosrl/pangolin)                   |            |
-| Authentication Required                                  | Authentifizierung erforderlich                                                     |            |
-| Choose your preferred method to access {resource}        | Wählen Sie Ihre bevorzugte Methode, um auf {resource} zuzugreifen                  |            |
-| PIN                                                      | PIN                                                                                |            |
-| User                                                     | Benutzer                                                                           |            |
-| 6-digit PIN Code                                         | 6-stelliger PIN-Code                                                               | pin login  |
-| Login in with PIN                                        | Mit PIN anmelden                                                                   | pin login  |
-| Email                                                    | E-Mail                                                                             | user login |
-| Enter your email                                         | Geben Sie Ihre E-Mail-Adresse ein                                                  | user login |
-| Password                                                 | Passwort                                                                           | user login |
-| Enter your password                                      | Geben Sie Ihr Passwort ein                                                         | user login |
-| Forgot your password?                                    | Passwort vergessen?                                                                | user login |
-| Log in                                                   | Anmelden                                                                           | user login |
-
----
-
-## Login site
-
-| EN                    | DE                                 | Notes       |
-| --------------------- | ---------------------------------- | ----------- |
-| Welcome to Pangolin   | Willkommen bei Pangolin            |             |
-| Log in to get started | Melden Sie sich an, um zu beginnen |             |
-| Email                 | E-Mail                             |             |
-| Enter your email      | Geben Sie Ihre E-Mail-Adresse ein  | placeholder |
-| Password              | Passwort                           |             |
-| Enter your password   | Geben Sie Ihr Passwort ein         | placeholder |
-| Forgot your password? | Passwort vergessen?                |             |
-| Log in                | Anmelden                           |             |
-
-# Ogranization site after successful login
-
-| EN                                        | DE                                           | Notes |
-| ----------------------------------------- | -------------------------------------------- | ----- |
-| Welcome to Pangolin                       | Willkommen bei Pangolin                      |       |
-| You're a member of {number} organization. | Sie sind Mitglied von {number} Organisation. |       |
-
-## Shared Header, Navbar and Footer
-##### Header
-
-| EN                  | DE                  | Notes |
-| ------------------- | ------------------- | ----- |
-| Documentation       | Dokumentation       |       |
-| Support             | Support             |       |
-| Organization {name} | Organisation {name} |       |
-##### Organization selector
-
-| EN               | DE                | Notes |
-| ---------------- | ----------------- | ----- |
-| Search…          | Suchen…           |       |
-| Create           | Erstellen         |       |
-| New Organization | Neue Organisation |       |
-| Organizations    | Organisationen    |       |
-
-##### Navbar
-
-| EN              | DE                | Notes |
-| --------------- | ----------------- | ----- |
-| Sites           | Websites          |       |
-| Resources       | Ressourcen        |       |
-| User & Roles    | Benutzer & Rollen |       |
-| Shareable Links | Teilbare Links    |       |
-| General         | Allgemein         |       |
-##### Footer
-| EN                        | DE                          |                     |
-| ------------------------- | --------------------------- | ------------------- |
-| Page {number} of {number} | Seite {number} von {number} |                     |
-| Rows per page             | Zeilen pro Seite            |                     |
-| Pangolin                  | Pangolin                    | unten auf der Seite |
-| Built by Fossorial        | Erstellt von Fossorial      | unten auf der Seite |
-| Open Source               | Open Source                 | unten auf der Seite |
-| Documentation             | Dokumentation               | unten auf der Seite |
-| {version}                 | {version}                   | unten auf der Seite |
-
-## Main “Sites”
-##### “Hero” section
-
-| EN                                                           | DE                                                           | Notes |
-| ------------------------------------------------------------ | ------------------------------------------------------------ | ----- |
-| Newt (Recommended)                                           | Newt (empfohlen)                                             |       |
-| For the best user experience, use Newt. It uses WireGuard under the hood and allows you to address your private resources by their LAN address on your private network from within the Pangolin dashboard. | Für das beste Benutzererlebnis verwenden Sie Newt. Es nutzt WireGuard im Hintergrund und ermöglicht es Ihnen, auf Ihre privaten Ressourcen über ihre LAN-Adresse in Ihrem privaten Netzwerk direkt aus dem Pangolin-Dashboard zuzugreifen. |       |
-| Runs in Docker                                               | Läuft in Docker                                              |       |
-| Runs in shell on macOS, Linux, and Windows                   | Läuft in der Shell auf macOS, Linux und Windows              |       |
-| Install Newt                                                 | Newt installieren                                            |       |
-| Basic WireGuard<br>                                          | Verwenden Sie einen beliebigen WireGuard-Client, um eine Verbindung herzustellen. Sie müssen auf Ihre internen Ressourcen über die Peer-IP-Adresse zugreifen. |       |
-| Compatible with all WireGuard clients<br>                    | Kompatibel mit allen WireGuard-Clients<br>                   |       |
-| Manual configuration required                                | Manuelle Konfiguration erforderlich<br>                      |       |
-##### Content
-
-| EN                                                        | DE                                                           | Notes                            |
-| --------------------------------------------------------- | ------------------------------------------------------------ | -------------------------------- |
-| Manage Sites                                              | Seiten verwalten                                             |                                  |
-| Allow connectivity to your network through secure tunnels | Ermöglichen Sie die Verbindung zu Ihrem Netzwerk über ein sicheren Tunnel |                                  |
-| Search sites                                              | Seiten suchen                                                | placeholder                      |
-| Add Site                                                  | Seite hinzufügen                                             |                                  |
-| Name                                                      | Name                                                         | table header                     |
-| Online                                                    | Status                                                       | table header                     |
-| Site                                                      | Seite                                                        | table header                     |
-| Data In                                                   | Eingehende Daten                                             | table header                     |
-| Data Out                                                  | Ausgehende Daten                                             | table header                     |
-| Connection Type                                           | Verbindungstyp                                               | table header                     |
-| Online                                                    | Online                                                       | site state                       |
-| Offline                                                   | Offline                                                      | site state                       |
-| Edit →                                                    | Bearbeiten →                                                 |                                  |
-| View settings                                             | Einstellungen anzeigen                                       | Popup after clicking “…” on site |
-| Delete                                                    | Löschen                                                      | Popup after clicking “…” on site |
-##### Add Site Popup
-
-| EN                                                     | DE                                                          | Notes       |
-| ------------------------------------------------------ | ----------------------------------------------------------- | ----------- |
-| Create Site                                            | Seite erstellen                                             |             |
-| Create a new site to start connection for this site    | Erstellen Sie eine neue Seite, um die Verbindung zu starten |             |
-| Name                                                   | Name                                                        |             |
-| Site name                                              | Seiten-Name                                                 | placeholder |
-| This is the name that will be displayed for this site. | So wird Ihre Seite angezeigt                                | desc        |
-| Method                                                 | Methode                                                     |             |
-| Local                                                  | Lokal                                                       |             |
-| Newt                                                   | Newt                                                        |             |
-| WireGuard                                              | WireGuard                                                   |             |
-| This is how you will expose connections.               | So werden Verbindungen freigegeben.                         |             |
-| You will only be able to see the configuration once.   | Diese Konfiguration können Sie nur einmal sehen.            |             |
-| Learn how to install Newt on your system               | Erfahren Sie, wie Sie Newt auf Ihrem System installieren    |             |
-| I have copied the config                               | Ich habe die Konfiguration kopiert                          |             |
-| Create Site                                            | Website erstellen                                           |             |
-| Close                                                  | Schließen                                                   |             |
-
-## Main “Resources”
-
-##### “Hero” section
-
-| EN                                                           | DE                                                           | Notes |
-| ------------------------------------------------------------ | ------------------------------------------------------------ | ----- |
-| Resources                                                    | Ressourcen                                                   |       |
-| Ressourcen sind Proxy-Server für Anwendungen, die in Ihrem privaten Netzwerk laufen. Erstellen Sie eine Ressource für jede HTTP- oder HTTPS-Anwendung in Ihrem privaten Netzwerk. Jede Ressource muss mit einer Website verbunden sein, um eine private und sichere Verbindung über den verschlüsselten WireGuard-Tunnel zu ermöglichen. | Ressourcen sind Proxy-Server für Anwendungen, die in Ihrem privaten Netzwerk laufen. Erstellen Sie eine Ressource für jede HTTP- oder HTTPS-Anwendung in Ihrem privaten Netzwerk. Jede Ressource muss mit einer Website verbunden sein, um eine private und sichere Verbindung über den verschlüsselten WireGuard-Tunnel zu ermöglichen. |       |
-| Secure connectivity with WireGuard encryption                | Sichere Verbindung mit WireGuard-Verschlüsselung             |       |
-| Configure multiple authentication methods                    | Konfigurieren Sie mehrere Authentifizierungsmethoden         |       |
-| User and role-based access control                           | Benutzer- und rollenbasierte Zugriffskontrolle               |       |
-##### Content
-
-| EN                                                 | DE                                                         | Notes                |
-| -------------------------------------------------- | ---------------------------------------------------------- | -------------------- |
-| Manage Resources                                   | Ressourcen verwalten                                       |                      |
-| Create secure proxies to your private applications | Erstellen Sie sichere Proxys für Ihre privaten Anwendungen |                      |
-| Search resources                                   | Ressourcen durchsuchen                                     | placeholder          |
-| Name                                               | Name                                                       |                      |
-| Site                                               | Website                                                    |                      |
-| Full URL                                           | Vollständige URL                                           |                      |
-| Authentication                                     | Authentifizierung                                          |                      |
-| Not Protected                                      | Nicht geschützt                                            | authentication state |
-| Protected                                          | Geschützt                                                  | authentication state |
-| Edit →                                             | Bearbeiten →                                               |                      |
-| Add Resource                                       | Ressource hinzufügen                                       |                      |
-##### Add Resource Popup
-
-| EN                                                           | DE                                                           | Notes               |
-| ------------------------------------------------------------ | ------------------------------------------------------------ | ------------------- |
-| Create Resource                                              | Ressource erstellen                                          |                     |
-| Create a new resource to proxy request to your app           | Erstellen Sie eine neue Ressource, um Anfragen an Ihre App zu proxen |                     |
-| Name                                                         | Name                                                         |                     |
-| My Resource                                                  | Neue Ressource                                               | name placeholder    |
-| This is the name that will be displayed for this resource.   | Dies ist der Name, der für diese Ressource angezeigt wird    |                     |
-| Subdomain                                                    | Subdomain                                                    |                     |
-| Enter subdomain                                              | Subdomain eingeben                                           |                     |
-| This is the fully qualified domain name that will be used to access the resource. | Dies ist der vollständige Domainname, der für den Zugriff auf die Ressource verwendet wird. |                     |
-| Site                                                         | Website                                                      |                     |
-| Search site…                                                 | Website suchen…                                              | Site selector popup |
-| This is the site that will be used in the dashboard.         | Dies ist die Website, die im Dashboard verwendet wird.       |                     |
-| Create Resource                                              | Ressource erstellen                                          |                     |
-| Close                                                        | Schließen                                                    |                     |
-
-
-## Main “User & Roles”
-##### Content
-
-| EN                                                           | DE                                                           | Notes                         |
-| ------------------------------------------------------------ | ------------------------------------------------------------ | ----------------------------- |
-| Manage User & Roles                                          | Benutzer & Rollen verwalten                                  |                               |
-| Invite users and add them to roles to manage access to your organization | Laden Sie Benutzer ein und weisen Sie ihnen Rollen zu, um den Zugriff auf Ihre Organisation zu verwalten |                               |
-| Users                                                        | Benutzer                                                     | sidebar item                  |
-| Roles                                                        | Rollen                                                       | sidebar item                  |
-| **User tab**                                                 |                                                              |                               |
-| Search users                                                 | Benutzer suchen                                              | placeholder                   |
-| Invite User                                                  | Benutzer einladen                                            | addbutton                     |
-| Email                                                        | E-Mail                                                       | table header                  |
-| Status                                                       | Status                                                       | table header                  |
-| Role                                                         | Rolle                                                        | table header                  |
-| Confirmed                                                    | Bestätigt                                                    | account status                |
-| Not confirmed (?)                                            | Nicht bestätigt (?)                                          | unknown for me account status |
-| Owner                                                        | Besitzer                                                     | role                          |
-| Admin                                                        | Administrator                                                | role                          |
-| Member                                                       | Mitglied                                                     | role                          |
-| **Roles Tab**                                                |                                                              |                               |
-| Search roles                                                 | Rollen suchen                                                | placeholder                   |
-| Add Role                                                     | Rolle hinzufügen                                             | addbutton                     |
-| Name                                                         | Name                                                         | table header                  |
-| Description                                                  | Beschreibung                                                 | table header                  |
-| Admin                                                        | Administrator                                                | role                          |
-| Member                                                       | Mitglied                                                     | role                          |
-| Admin role with the most permissions                         | Administratorrolle mit den meisten Berechtigungen            | admin role desc               |
-| Members can only view resources                              | Mitglieder können nur Ressourcen anzeigen                    | member role desc              |
-
-##### Invite User popup
-
-| EN                | DE                                                      | Notes       |
-| ----------------- | ------------------------------------------------------- | ----------- |
-| Invite User       | Geben Sie neuen Benutzern Zugriff auf Ihre Organisation |             |
-| Email             | E-Mail                                                  |             |
-| Enter an email    | E-Mail eingeben                                         | placeholder |
-| Role              | Rolle                                                   |             |
-| Select role       | Rolle auswählen                                         | placeholder |
-| Gültig für        | Gültig bis                                              |             |
-| 1 day             | Tag                                                     |             |
-| 2 days            | 2 Tage                                                  |             |
-| 3 days            | 3 Tage                                                  |             |
-| 4 days            | 4 Tage                                                  |             |
-| 5 days            | 5 Tage                                                  |             |
-| 6 days            | 6 Tage                                                  |             |
-| 7 days            | 7 Tage                                                  |             |
-| Create Invitation | Einladung erstellen                                     |             |
-| Close             | Schließen                                               |             |
-
-
-## Main “Shareable Links”
-##### “Hero” section
-
-| EN                                                           | DE                                                           | Notes |
-| ------------------------------------------------------------ | ------------------------------------------------------------ | ----- |
-| Shareable Links                                              | Teilbare Links                                               |       |
-| Create shareable links to your resources. Links provide temporary or unlimited access to your resource. You can configure the expiration duration of the link when you create one. | Erstellen Sie teilbare Links zu Ihren Ressourcen. Links bieten temporären oder unbegrenzten Zugriff auf Ihre Ressource. Sie können die Gültigkeitsdauer des Links beim Erstellen konfigurieren. |       |
-| Easy to create and share                                     | Einfach zu erstellen und zu teilen                           |       |
-| Configurable expiration duration                             | Konfigurierbare Gültigkeitsdauer                             |       |
-| Secure and revocable                                         | Sicher und widerrufbar                                       |       |
-##### Content
-
-| EN                                                           | DE                                                           | Notes             |
-| ------------------------------------------------------------ | ------------------------------------------------------------ | ----------------- |
-| Manage Shareable Links                                       | Teilbare Links verwalten                                     |                   |
-| Create shareable links to grant temporary or permanent access to your resources | Erstellen Sie teilbare Links, um temporären oder permanenten Zugriff auf Ihre Ressourcen zu gewähren |                   |
-| Search links                                                 | Links suchen                                                 | placeholder       |
-| Create Share Link                                            | Neuen Link erstellen                                         | addbutton         |
-| Resource                                                     | Ressource                                                    | table header      |
-| Title                                                        | Titel                                                        | table header      |
-| Created                                                      | Erstellt                                                     | table header      |
-| Expires                                                      | Gültig bis                                                   | table header      |
-| No links. Create one to get started.                         | Keine Links. Erstellen Sie einen, um zu beginnen.            | table placeholder |
-
-##### Create Shareable Link popup
-
-| EN                                                           | DE                                                           | Notes                   |
-| ------------------------------------------------------------ | ------------------------------------------------------------ | ----------------------- |
-| Create Shareable Link                                        | Teilbaren Link erstellen                                     |                         |
-| Anyone with this link can access the resource                | Jeder mit diesem Link kann auf die Ressource zugreifen       |                         |
-| Resource                                                     | Ressource                                                    |                         |
-| Select resource                                              | Ressource auswählen                                          |                         |
-| Search resources…                                            | Ressourcen suchen…                                           | resource selector popup |
-| Title (optional)                                             | Titel (optional)                                             |                         |
-| Enter title                                                  | Titel eingeben                                               | placeholder             |
-| Expire in                                                    | Gültig bis                                                   |                         |
-| Minutes                                                      | Minuten                                                      |                         |
-| Hours                                                        | Stunden                                                      |                         |
-| Days                                                         | Tage                                                         |                         |
-| Months                                                       | Monate                                                       |                         |
-| Years                                                        | Jahre                                                        |                         |
-| Never expire                                                 | Nie ablaufen                                                 |                         |
-| Expiration time is how long the link will be usable and provide access to the resource. After this time, the link will no longer work, and users who used this link will lose access to the resource. | Die Gültigkeitsdauer bestimmt, wie lange der Link nutzbar ist und Zugriff auf die Ressource bietet. Nach Ablauf dieser Zeit funktioniert der Link nicht mehr, und Benutzer, die diesen Link verwendet haben, verlieren den Zugriff auf die Ressource. |                         |
-| Create Link                                                  | Link erstellen                                               |                         |
-| Close                                                        | Schließen                                                    |                         |
-
-
-## Main “General”
-
-| EN                                                           | DE                                                           | Notes        |
-| ------------------------------------------------------------ | ------------------------------------------------------------ | ------------ |
-| General                                                      | Allgemein                                                    |              |
-| Configure your organization’s general settings               | Konfigurieren Sie die allgemeinen Einstellungen Ihrer Organisation |              |
-| General                                                      | Allgemein                                                    | sidebar item |
-| Organization Settings                                        | Organisationseinstellungen                                   |              |
-| Manage your organization details and configuration           | Verwalten Sie die Details und Konfiguration Ihrer Organisation |              |
-| Name                                                         | Name                                                         |              |
-| This is the display name of the org                          | Dies ist der Anzeigename Ihrer Organisation                  |              |
-| Save Settings                                                | Einstellungen speichern                                      |              |
-| Danger Zone                                                  | Gefahrenzone                                                 |              |
-| Once you delete this org, there is no going back. Please be certain. | Wenn Sie diese Organisation löschen, gibt es kein Zurück. Bitte seien Sie sicher. |              |
-| Delete Organization Data                                     | Organisationsdaten löschen                                   |              |

internationalization/es.md

@@ -1,291 +0,0 @@
-## Authentication Site
-
-
-| EN                                                       | ES                                                           | Notes      |
-| -------------------------------------------------------- | ------------------------------------------------------------ | ---------- |
-| Powered by [Pangolin](https://github.com/fosrl/pangolin) | Desarrollado por [Pangolin](https://github.com/fosrl/pangolin)  |            |
-| Authentication Required                                  | Se requiere autenticación                                    |            |
-| Choose your preferred method to access {resource}        | Elije tu método requerido para acceder a {resource}          |            |
-| PIN                                                      | PIN                                                          |            |
-| User                                                     | Usuario                                                      |            |
-| 6-digit PIN Code                                         | Código PIN de 6 dígitos                                      | pin login  |
-| Login in with PIN                                        | Registrate con PIN                                           | pin login  |
-| Email                                                    | Email                                                        | user login |
-| Enter your email                                         | Introduce tu email                                           | user login |
-| Password                                                 | Contraseña                                                   | user login |
-| Enter your password                                      | Introduce tu contraseña                                      | user login |
-| Forgot your password?                                    | ¿Olvidaste tu contraseña?                                    | user login |
-| Log in                                                   | Iniciar sesión                                               | user login |
-
-
-## Login site
-
-| EN                    | ES                                 | Notes       |
-| --------------------- | ---------------------------------- | ----------- |
-| Welcome to Pangolin   | Binvenido a Pangolin               |             |
-| Log in to get started | Registrate para comenzar           |             |
-| Email                 | Email                              |             |
-| Enter your email      | Introduce tu email                 | placeholder |
-| Password              | Contraseña                         |             |
-| Enter your password   | Introduce tu contraseña            | placeholder |
-| Forgot your password? | ¿Olvidaste tu contraseña?          |             |
-| Log in                | Iniciar sesión                     |             |
-
-# Ogranization site after successful login
-
-| EN                                        | ES                                           | Notes |
-| ----------------------------------------- | -------------------------------------------- | ----- |
-| Welcome to Pangolin                       | Binvenido a Pangolin                         |       |
-| You're a member of {number} organization. | Eres miembro de la organización {number}.    |       |
-
-## Shared Header, Navbar and Footer
-##### Header
-
-| EN                  | ES                  | Notes |
-| ------------------- | ------------------- | ----- |
-| Documentation       | Documentación       |       |
-| Support             | Soporte             |       |
-| Organization {name} | Organización {name} |       |
-##### Organization selector
-
-| EN               | ES                | Notes |
-| ---------------- | ----------------- | ----- |
-| Search…          | Buscar…           |       |
-| Create           | Crear             |       |
-| New Organization | Nueva Organización|       |
-| Organizations    | Organizaciones    |       |
-
-##### Navbar
-
-| EN              | ES                     | Notes |
-| --------------- | -----------------------| ----- |
-| Sites           | Sitios                 |       |
-| Resources       | Recursos               |       |
-| User & Roles    | Usuarios y roles       |       |
-| Shareable Links | Enlaces para compartir |       |
-| General         | General                |       |
-
-##### Footer
-| EN                        | ES                          |                             |
-| ------------------------- | --------------------------- | -------|
-| Page {number} of {number} | Página {number} de {number} | footer |        
-| Rows per page             | Filas por página            | footer |
-| Pangolin                  | Pangolin                    | footer |
-| Built by Fossorial        | Construido por Fossorial    | footer |
-| Open Source               | Código abierto              | footer |
-| Documentation             | Documentación               | footer |
-| {version}                 | {version}                   | footer |
-
-## Main “Sites”
-##### “Hero” section
-
-| EN                                                           | ES                                                           | Notes |
-| ------------------------------------------------------------ | ------------------------------------------------------------ | ----- |
-| Newt (Recommended)                                           | Newt (Recomendado)                                           |       |
-| For the best user experience, use Newt. It uses WireGuard under the hood and allows you to address your private resources by their LAN address on your private network from within the Pangolin dashboard. | Para obtener la mejor experiencia de usuario, utiliza Newt. Utiliza WireGuard internamente y te permite abordar tus recursos privados mediante tu dirección LAN en tu red privada desde el panel de Pangolin. |       |
-| Runs in Docker                                               | Se ejecuta en Docker                                         |       |
-| Runs in shell on macOS, Linux, and Windows                   | Se ejecuta en shell en macOS, Linux y Windows                |       |
-| Install Newt                                                 | Instalar Newt                                                |       |
-| Basic WireGuard<br>                                          | WireGuard básico<br>                                         |       | 
-| Compatible with all WireGuard clients<br>                    | Compatible con todos los clientes WireGuard<br>              |       |
-| Manual configuration required                                | Se requiere configuración manual                             |       |
-
-##### Content
-
-| EN                                                        | ES                                                           | Notes                            |
-| --------------------------------------------------------- | ------------------------------------------------------------ | -------------------------------- |
-| Manage Sites                                              | Administrar sitios                                           |                                  |
-| Allow connectivity to your network through secure tunnels | Permitir la conectividad a tu red a través de túneles seguros|                                  |
-| Search sites                                              | Buscar sitios                                                | placeholder                      |
-| Add Site                                                  | Agregar sitio                                                |                                  |
-| Name                                                      | Nombre                                                       | table header                     |
-| Online                                                    | Conectado                                                    | table header                     |
-| Site                                                      | Sitio                                                        | table header                     |
-| Data In                                                   | Datos en                                                     | table header                     |
-| Data Out                                                  | Datos de salida                                              | table header                     |
-| Connection Type                                           | Tipo de conexión                                             | table header                     |
-| Online                                                    | Conectado                                                    | site state                       |
-| Offline                                                   | Desconectado                                                 | site state                       |
-| Edit →                                                    | Editar →                                                     |                                  |
-| View settings                                             | Ver configuración                                            | Popup after clicking “…” on site |
-| Delete                                                    | Borrar                                                       | Popup after clicking “…” on site |
-
-##### Add Site Popup
-
-| EN                                                     | ES                                                          | Notes       |
-| ------------------------------------------------------ | ----------------------------------------------------------- | ----------- |
-| Create Site                                            | Crear sitio                                                 |             |
-| Create a new site to start connection for this site    | Crear un nuevo sitio para iniciar la conexión para este sitio |             |
-| Name                                                   | Nombre                                                      |             |
-| Site name                                              | Nombre del sitio                                            | placeholder |
-| This is the name that will be displayed for this site. | Este es el nombre que se mostrará para este sitio.          | desc        |
-| Method                                                 | Método                                                      |             |
-| Local                                                  | Local                                                       |             |
-| Newt                                                   | Newt                                                        |             |
-| WireGuard                                              | WireGuard                                                   |             |
-| This is how you will expose connections.               | Así es como expondrás las conexiones.                       |             |
-| You will only be able to see the configuration once.   | Solo podrás ver la configuración una vez.                   |             |
-| Learn how to install Newt on your system               | Aprende a instalar Newt en tu sistema                       |             |
-| I have copied the config                               | He copiado la configuración                                 |             |
-| Create Site                                            | Crear sitio                                                 |             |
-| Close                                                  | Cerrar                                                      |             |
-
-## Main “Resources”
-
-##### “Hero” section
-
-| EN                                                           | ES                                                           | Notes |
-| ------------------------------------------------------------ | ------------------------------------------------------------ | ----- |
-| Resources                                                    | Recursos                                                     |       |
-| Ressourcen sind Proxy-Server für Anwendungen, die in Ihrem privaten Netzwerk laufen. Erstellen Sie eine Ressource für jede HTTP- oder HTTPS-Anwendung in Ihrem privaten Netzwerk. Jede Ressource muss mit einer Website verbunden sein, um eine private und sichere Verbindung über den verschlüsselten WireGuard-Tunnel zu ermöglichen. |Los recursos son servidores proxy para aplicaciones que se ejecutan en su red privada. Cree un recurso para cada aplicación HTTP o HTTPS en su red privada. Cada recurso debe estar conectado a un sitio web para proporcionar una conexión privada y segura a través del túnel cifrado WireGuard. |       |
-| Secure connectivity with WireGuard encryption                | Conectividad segura con encriptación WireGuard               |       |
-| Configure multiple authentication methods                    | Configura múltiples métodos de autenticación                 |       |
-| User and role-based access control                           | Control de acceso basado en usuarios y roles                 |       |
-
-##### Content
-
-| EN                                                 | ES                                                         | Notes                |
-| -------------------------------------------------- | ---------------------------------------------------------- | -------------------- |
-| Manage Resources                                   | Administrar recursos                                       |                      |
-| Create secure proxies to your private applications | Crea servidores proxy seguros para tus aplicaciones privadas |                      |
-| Search resources                                   | Buscar recursos                                            | placeholder          |
-| Name                                               | Nombre                                                     |                      |
-| Site                                               | Sitio                                                      |                      |
-| Full URL                                           | URL completa                                               |                      |
-| Authentication                                     | Autenticación                                              |                      |
-| Not Protected                                      | No protegido                                               | authentication state |
-| Protected                                          | Protegido                                                  | authentication state |
-| Edit →                                             | Editar →                                                   |                      |
-| Add Resource                                       | Agregar recurso                                            |                      |
-
-##### Add Resource Popup
-
-| EN                                                           | ES                                                           | Notes               |
-| ------------------------------------------------------------ | ------------------------------------------------------------ | ------------------- |
-| Create Resource                                              | Crear recurso                                                |                     |
-| Create a new resource to proxy request to your app           | Crea un nuevo recurso para enviar solicitudes a tu aplicación |                     |
-| Name                                                         | Nombre                                                        |                     |
-| My Resource                                                  | Mi recurso                                                    | name placeholder    |
-| This is the name that will be displayed for this resource.   | Este es el nombre que se mostrará para este recurso.         |                     |
-| Subdomain                                                    | Subdominio                                                    |                     |
-| Enter subdomain                                              | Ingresar subdominio                                           |                     |
-| This is the fully qualified domain name that will be used to access the resource. | Este es el nombre de dominio completo que se utilizará para acceder al recurso. |                     |
-| Site                                                         | Sitio                                                        |                     |
-| Search site…                                                 | Buscar sitio…                                                | Site selector popup |
-| This is the site that will be used in the dashboard.         | Este es el sitio que se utilizará en el panel de control.    |                     |
-| Create Resource                                              | Crear recurso                                                |                     |
-| Close                                                        | Cerrar                                                       |                     |
-
-## Main “User & Roles”
-##### Content
-
-| EN                                                           | ES                                                           | Notes                         |
-| ------------------------------------------------------------ | ------------------------------------------------------------ | ----------------------------- |
-| Manage User & Roles                                          | Administrar usuarios y roles                                 |                               |
-| Invite users and add them to roles to manage access to your organization | Invita a usuarios y agrégalos a roles para administrar el acceso a tu organización |                               |
-| Users                                                        | Usuarios                                                     | sidebar item                  |
-| Roles                                                        | Roles                                                        | sidebar item                  |
-| **User tab**                                                 | **Pestaña de usuario**                                                            |                               |
-| Search users                                                 | Buscar usuarios                                              | placeholder                   |
-| Invite User                                                  | Invitar usuario                                           | addbutton                     |
-| Email                                                        | Email                                                       | table header                  |
-| Status                                                       | Estado                                                       | table header                  |
-| Role                                                         | Role                                                         | table header                  |
-| Confirmed                                                    | Confirmado                                                   | account status                |
-| Not confirmed (?)                                            | No confirmado (?)                                            | unknown for me account status |
-| Owner                                                        | Dueño                                                        | role                          |
-| Admin                                                        | Administrador                                                | role                          |
-| Member                                                       | Miembro                                                      | role                          |
-| **Roles Tab**                                                | **Pestaña Roles**                                            |                               |
-| Search roles                                                 | Buscar roles                                                 | placeholder                   |
-| Add Role                                                     | Agregar rol                                                  | addbutton                     |
-| Name                                                         | Nombre                                                       | table header                  |
-| Description                                                  | Descripción                                                  | table header                  |
-| Admin                                                        | Administrador                                                | role                          |
-| Member                                                       | Miembro                                                      | role                          |
-| Admin role with the most permissions                         | Rol de administrador con más permisos                        | admin role desc               |
-| Members can only view resources                              | Los miembros sólo pueden ver los recursos                    | member role desc              |
-
-##### Invite User popup
-
-| EN                | ES                                                      | Notes       |
-| ----------------- | ------------------------------------------------------- | ----------- |
-| Invite User       | Invitar usuario                                         |             |
-| Email             | Email                                                   |             |
-| Enter an email    | Introduzca un email                                     | placeholder |
-| Role              | Rol                                                     |             |
-| Select role       | Seleccionar rol                                         | placeholder |
-| Gültig für        | Válido para                                             |             |
-| 1 day             | 1 día                                                   |             |
-| 2 days            | 2 días                                                  |             |
-| 3 days            | 3 días                                                  |             |
-| 4 days            | 4 días                                                  |             |
-| 5 days            | 5 días                                                  |             |
-| 6 days            | 6 días                                                  |             |
-| 7 days            | 7 días                                                  |             |
-| Create Invitation | Crear invitación                                        |             |
-| Close             | Cerrar                                                  |             |
-
-
-## Main “Shareable Links”
-##### “Hero” section
-
-| EN                                                           | ES                                                           | Notes |
-| ------------------------------------------------------------ | ------------------------------------------------------------ | ----- |
-| Shareable Links                                              | Enlaces para compartir                                       |       |
-| Create shareable links to your resources. Links provide temporary or unlimited access to your resource. You can configure the expiration duration of the link when you create one. | Crear enlaces que se puedan compartir a tus recursos. Los enlaces proporcionan acceso temporal o ilimitado a tu recurso. Puedes configurar la duración de caducidad del enlace cuando lo creas.                                |       |
-| Easy to create and share                                     | Fácil de crear y compartir                                   |       |
-| Configurable expiration duration                             | Duración de expiración configurable                          |       |
-| Secure and revocable                                         | Seguro y revocable                                           |       |
-##### Content
-
-| EN                                                           | ES                                                           | Notes             |
-| ------------------------------------------------------------ | ------------------------------------------------------------ | ----------------- |
-| Manage Shareable Links                                       | Administrar enlaces compartibles                             |                   |
-| Create shareable links to grant temporary or permanent access to your resources | Crear enlaces compartibles para otorgar acceso temporal o permanente a tus recursos |                   |
-| Search links                                                 | Buscar enlaces                                               | placeholder       |
-| Create Share Link                                            | Crear enlace para compartir                                  | addbutton         |
-| Resource                                                     | Recurso                                                      | table header      |
-| Title                                                        | Título                                                       | table header      |
-| Created                                                      | Creado                                                       | table header      |
-| Expires                                                      | Caduca                                                       | table header      |
-| No links. Create one to get started.                         | No hay enlaces. Crea uno para comenzar.                      | table placeholder |
-
-##### Create Shareable Link popup
-
-| EN                                                           | ES                                                           | Notes                   |
-| ------------------------------------------------------------ | ------------------------------------------------------------ | ----------------------- |
-| Create Shareable Link                                        | Crear un enlace para compartir                               |                         |
-| Anyone with this link can access the resource                | Cualquier persona con este enlace puede acceder al recurso.  |                         |
-| Resource                                                     | Recurso                                                      |                         |
-| Select resource                                              | Seleccionar recurso                                          |                         |
-| Search resources…                                            | Buscar recursos…                                             | resource selector popup |
-| Title (optional)                                             | Título (opcional)                                            |                         |
-| Enter title                                                  | Introducir título                                            | placeholder             |
-| Expire in                                                    | Caduca en                                                    |                         |
-| Minutes                                                      | Minutos                                                      |                         |
-| Hours                                                        | Horas                                                        |                         |
-| Days                                                         | Días                                                         |                         |
-| Months                                                       | Meses                                                        |                         |
-| Years                                                        | Años                                                         |                         |
-| Never expire                                                 | Nunca caduca                                                 |                         |
-| Expiration time is how long the link will be usable and provide access to the resource. After this time, the link will no longer work, and users who used this link will lose access to the resource. | El tiempo de expiración es el tiempo durante el cual el enlace se podrá utilizar y brindará acceso al recurso. Después de este tiempo, el enlace dejará de funcionar y los usuarios que lo hayan utilizado perderán el acceso al recurso. |                         |
-| Create Link                                                  | Crear enlace                                                |                         |
-| Close                                                        | Cerrar                                                      |                         |
-
-
-## Main “General”
-
-| EN                                                           | ES                                                           | Notes        |
-| ------------------------------------------------------------ | ------------------------------------------------------------ | ------------ |
-| General                                                      | General                                                      |              |
-| Configure your organization’s general settings               | Configura los ajustes generales de tu organización           |              |
-| General                                                      | General                                                      | sidebar item |
-| Organization Settings                                        | Configuración de la organización                             |              |
-| Manage your organization details and configuration           | Administra los detalles y la configuración de tu organización|              |
-| Name                                                         | Nombre                                                       |              |
-| This is the display name of the org                          | Este es el nombre para mostrar de la organización.           |              |
-| Save Settings                                                | Guardar configuración                                        |              |
-| Danger Zone                                                  | Zona de peligro                                              |              |
-| Once you delete this org, there is no going back. Please be certain. | Una vez que elimines esta organización, no habrá vuelta atrás. Asegúrate de hacerlo. |              |
-| Delete Organization Data                                     | Eliminar datos de la organización                             |              |

internationalization/pl.md

@@ -1,287 +0,0 @@
-## Authentication Site
-
-
-| EN                                                       | PL                                                           | Notes      |
-| -------------------------------------------------------- | ------------------------------------------------------------ | ---------- |
-| Powered by [Pangolin](https://github.com/fosrl/pangolin) | Zasilane przez [Pangolin](https://github.com/fosrl/pangolin) |            |
-| Authentication Required                                  | Wymagane uwierzytelnienie                                    |            |
-| Choose your preferred method to access {resource}        | Wybierz preferowaną metodę dostępu do {resource}             |            |
-| PIN                                                      | PIN                                                          |            |
-| User                                                     | Zaloguj                                                      |            |
-| 6-digit PIN Code                                         | 6-cyfrowy kod PIN                                            | pin login  |
-| Login in with PIN                                        | Zaloguj się PIN’em                                           | pin login  |
-| Email                                                    | Email                                                        | user login |
-| Enter your email                                         | Wprowadź swój email                                          | user login |
-| Password                                                 | Hasło                                                        | user login |
-| Enter your password                                      | Wprowadź swoje hasło                                         | user login |
-| Forgot your password?                                    | Zapomniałeś hasła?                                           | user login |
-| Log in                                                   | Zaloguj                                                      | user login |
-
-
-## Login site
-
-| EN                    | PL                             | Notes       |
-| --------------------- | ------------------------------ | ----------- |
-| Welcome to Pangolin   | Witaj w Pangolin               |             |
-| Log in to get started | Zaloguj się, aby rozpocząć<br> |             |
-| Email                 | Email                          |             |
-| Enter your email      | Wprowadź swój adres e-mail<br> | placeholder |
-| Password              | Hasło                          |             |
-| Enter your password   | Wprowadź swoje hasło           | placeholder |
-| Forgot your password? | Nie pamiętasz hasła?           |             |
-| Log in                | Zaloguj                        |             |
-
-# Ogranization site after successful login
-
-
-| EN                                        | PL                                         | Notes |
-| ----------------------------------------- | ------------------------------------------ | ----- |
-| Welcome to Pangolin                       | Witaj w Pangolin                           |       |
-| You're a member of {number} organization. | Jesteś użytkownikiem {number} organizacji. |       |
-
-## Shared Header, Navbar and Footer
-##### Header
-
-| EN                  | PL                 | Notes |
-| ------------------- | ------------------ | ----- |
-| Documentation       | Dokumentacja       |       |
-| Support             | Wsparcie           |       |
-| Organization {name} | Organizacja {name} |       |
-##### Organization selector
-
-| EN               | PL               | Notes |
-| ---------------- | ---------------- | ----- |
-| Search…          | Szukaj…          |       |
-| Create           | Utwórz           |       |
-| New Organization | Nowa organizacja |       |
-| Organizations    | Organizacje      |       |
-
-##### Navbar
-
-| EN              | PL                     | Notes |
-| --------------- | ---------------------- | ----- |
-| Sites           | Witryny                |       |
-| Resources       | Zasoby                 |       |
-| User & Roles    | Użytkownicy i Role     |       |
-| Shareable Links | Łącza do udostępniania |       |
-| General         | Ogólne                 |       |
-##### Footer
-| EN                        | PL                         |                |
-| ------------------------- | -------------------------- | -------------- |
-| Page {number} of {number} | Strona {number} z {number} |                |
-| Rows per page             | Wierszy na stronę          |                |
-| Pangolin                  | Pangolin                   | bottom of site |
-| Built by Fossorial        | Stworzone przez Fossorial  | bottom of site |
-| Open Source               | Open source                | bottom of site |
-| Documentation             | Dokumentacja               | bottom of site |
-| {version}                 | {version}                  | bottom of site |
-## Main “Sites”
-##### “Hero” section
-
-| EN                                                                                                                                                                                                         | PL                                                                                                                                                                                                                                                                 | Notes |
-| ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ----- |
-| Newt (Recommended)                                                                                                                                                                                         | Newt (zalecane)                                                                                                                                                                                                                                                    |       |
-| For the best user experience, use Newt. It uses WireGuard under the hood and allows you to address your private resources by their LAN address on your private network from within the Pangolin dashboard. | Aby zapewnić najlepsze doświadczenie użytkownika, korzystaj z Newt. Wykorzystuje on technologię WireGuard w tle i pozwala na dostęp do Twoich prywatnych zasobów za pomocą ich adresu LAN w prywatnej sieci bezpośrednio z poziomu pulpitu nawigacyjnego Pangolin. |       |
-| Runs in Docker                                                                                                                                                                                             | Działa w Dockerze                                                                                                                                                                                                                                                  |       |
-| Runs in shell on macOS, Linux, and Windows                                                                                                                                                                 | Działa w powłoce na systemach macOS, Linux i Windows                                                                                                                                                                                                               |       |
-| Install Newt                                                                                                                                                                                               | Zainstaluj Newt                                                                                                                                                                                                                                                    |       |
-| Podstawowy WireGuard<br>                                                                                                                                                                                   | Użyj dowolnego klienta WireGuard, aby się połączyć. Będziesz musiał uzyskiwać dostęp do swoich wewnętrznych zasobów za pomocą adresu IP równorzędnego                                                                                                              |       |
-| Compatible with all WireGuard clients<br>                                                                                                                                                                  | Kompatybilny ze wszystkimi klientami WireGuard<br>                                                                                                                                                                                                                 |       |
-| Manual configuration required                                                                                                                                                                              | Wymagana ręczna konfiguracja<br>                                                                                                                                                                                                                                   |       |
-##### Content
-
-| EN                                                        | PL                                                                       | Notes                            |
-| --------------------------------------------------------- | ------------------------------------------------------------------------ | -------------------------------- |
-| Manage Sites                                              | Zarządzanie witrynami                                                    |                                  |
-| Allow connectivity to your network through secure tunnels | Zezwalaj na łączność z Twoją siecią za pośrednictwem bezpiecznych tuneli |                                  |
-| Search sites                                              | Szukaj witryny                                                           | placeholder                      |
-| Add Site                                                  | Dodaj witrynę                                                            |                                  |
-| Name                                                      | Nazwa                                                                    | table header                     |
-| Online                                                    | Status                                                                   | table header                     |
-| Site                                                      | Witryna                                                                  | table header                     |
-| Data In                                                   | Dane wchodzące                                                           | table header                     |
-| Data Out                                                  | Dane wychodzące                                                          | table header                     |
-| Connection Type                                           | Typ połączenia                                                           | table header                     |
-| Online                                                    | Online                                                                   | site state                       |
-| Offline                                                   | Poza siecią                                                              | site state                       |
-| Edit →                                                    | Edytuj →                                                                 |                                  |
-| View settings                                             | Pokaż ustawienia                                                         | Popup after clicking “…” on site |
-| Delete                                                    | Usuń                                                                     | Popup after clicking “…” on site |
-##### Add Site Popup
-
-| EN                                                     | PL                                                  | Notes       |
-| ------------------------------------------------------ | --------------------------------------------------- | ----------- |
-| Create Site                                            | Utwórz witrynę                                      |             |
-| Create a new site to start connection for this site    | Utwórz nową witrynę aby rozpocząć połączenie        |             |
-| Name                                                   | Nazwa                                               |             |
-| Site name                                              | Nazwa witryny                                       | placeholder |
-| This is the name that will be displayed for this site. | Tak będzie wyświetlana twoja witryna                | desc        |
-| Method                                                 | Metoda                                              |             |
-| Local                                                  | Lokalna                                             |             |
-| Newt                                                   | Newt                                                |             |
-| WireGuard                                              | WireGuard                                           |             |
-| This is how you will expose connections.               | Tak będą eksponowane połączenie.                    |             |
-| You will only be able to see the configuration once.   | Tą konfigurację możesz zobaczyć tylko raz.          |             |
-| Learn how to install Newt on your system               | Dowiedz się jak zainstalować Newt na twoim systemie |             |
-| I have copied the config                               | Skopiowałem konfigurację                            |             |
-| Create Site                                            | Utwórz witrynę                                      |             |
-| Close                                                  | Zamknij                                             |             |
-
-## Main “Resources”
-
-##### “Hero” section
-
-| EN                                                                                                                                                                                                                                                                                   | PL                                                                                                                                                                                                                                                                                   | Notes |
-| ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ----- |
-| Resources                                                                                                                                                                                                                                                                            | Zasoby                                                                                                                                                                                                                                                                               |       |
-| Zasoby to serwery proxy dla aplikacji działających w Twojej prywatnej sieci. Utwórz zasób dla dowolnej aplikacji HTTP lub HTTPS w swojej prywatnej sieci. Każdy zasób musi być połączony z witryną, aby umożliwić prywatne i bezpieczne połączenie przez szyfrowany tunel WireGuard. | Zasoby to serwery proxy dla aplikacji działających w Twojej prywatnej sieci. Utwórz zasób dla dowolnej aplikacji HTTP lub HTTPS w swojej prywatnej sieci. Każdy zasób musi być połączony z witryną, aby umożliwić prywatne i bezpieczne połączenie przez szyfrowany tunel WireGuard. |       |
-| Secure connectivity with WireGuard encryption                                                                                                                                                                                                                                        | Bezpieczna łączność z szyfrowaniem WireGuard                                                                                                                                                                                                                                         |       |
-| Configure multiple authentication methods                                                                                                                                                                                                                                            | Konfigurowanie wielu metod uwierzytelniania                                                                                                                                                                                                                                          |       |
-| User and role-based access control                                                                                                                                                                                                                                                   | Kontrola dostępu oparta na użytkownikach i rolach                                                                                                                                                                                                                                    |       |
-##### Content
-
-| EN                                                 | PL                                                             | Notes                |
-| -------------------------------------------------- | -------------------------------------------------------------- | -------------------- |
-| Manage Resources                                   | Zarządzaj zasobami                                             |                      |
-| Create secure proxies to your private applications | Twórz bezpieczne serwery proxy dla swoich prywatnych aplikacji |                      |
-| Search resources                                   | Szukaj w zasobach                                              | placeholder          |
-| Name                                               | Nazwa                                                          |                      |
-| Site                                               | Witryna                                                        |                      |
-| Full URL                                           | Pełny URL                                                      |                      |
-| Authentication                                     | Uwierzytelnianie                                               |                      |
-| Not Protected                                      | Niezabezpieczony                                               | authentication state |
-| Protected                                          | Zabezpieczony                                                  | authentication state |
-| Edit →                                             | Edytuj →                                                       |                      |
-| Add Resource                                       | Dodaj zasób                                                    |                      |
-##### Add Resource Popup
-
-| EN                                                                                | PL                                                                     | Notes               |
-| --------------------------------------------------------------------------------- | ---------------------------------------------------------------------- | ------------------- |
-| Create Resource                                                                   | Utwórz zasób                                                           |                     |
-| Create a new resource to proxy request to your app                                | Utwórz nowy zasób, aby przekazywać żądania do swojej aplikacji         |                     |
-| Name                                                                              | Nazwa                                                                  |                     |
-| My Resource                                                                       | Nowy zasób                                                             | name placeholder    |
-| This is the name that will be displayed for this resource.                        | To jest nazwa, która będzie wyświetlana dla tego zasobu                |                     |
-| Subdomain                                                                         | Subdomena                                                              |                     |
-| Enter subdomain                                                                   | Wprowadź subdomenę                                                     |                     |
-| This is the fully qualified domain name that will be used to access the resource. | To jest pełna nazwa domeny, która będzie używana do dostępu do zasobu. |                     |
-| Site                                                                              | Witryna                                                                |                     |
-| Search site…                                                                      | Szukaj witryny…                                                        | Site selector popup |
-| This is the site that will be used in the dashboard.                              | To jest witryna, która będzie używana w pulpicie nawigacyjnym.         |                     |
-| Create Resource                                                                   | Utwórz zasób                                                           |                     |
-| Close                                                                             | Zamknij                                                                |                     |
-
-
-## Main “User & Roles”
-##### Content
-
-| EN                                                                       | PL                                                                                   | Notes                         |
-| ------------------------------------------------------------------------ | ------------------------------------------------------------------------------------ | ----------------------------- |
-| Manage User & Roles                                                      | Zarządzanie użytkownikami i rolami                                                   |                               |
-| Invite users and add them to roles to manage access to your organization | Zaproś użytkowników i przypisz im role, aby zarządzać dostępem do Twojej organizacji |                               |
-| Users                                                                    | Użytkownicy                                                                          | sidebar item                  |
-| Roles                                                                    | Role                                                                                 | sidebar item                  |
-| **User tab**                                                             |                                                                                      |                               |
-| Search users                                                             | Wyszukaj użytkownika                                                                 | placeholder                   |
-| Invite User                                                              | Zaproś użytkownika                                                                   | addbutton                     |
-| Email                                                                    | Email                                                                                | table header                  |
-| Status                                                                   | Status                                                                               | table header                  |
-| Role                                                                     | Rola                                                                                 | table header                  |
-| Confirmed                                                                | Zatwierdzony                                                                         | account status                |
-| Not confirmed (?)                                                        | Niezatwierdzony (?)                                                                  | unknown for me account status |
-| Owner                                                                    | Właściciel                                                                           | role                          |
-| Admin                                                                    | Administrator                                                                        | role                          |
-| Member                                                                   | Użytkownik                                                                           | role                          |
-| **Roles Tab**                                                            |                                                                                      |                               |
-| Search roles                                                             | Wyszukaj role                                                                        | placeholder                   |
-| Add Role                                                                 | Dodaj role                                                                           | addbutton                     |
-| Name                                                                     | Nazwa                                                                                | table header                  |
-| Description                                                              | Opis                                                                                 | table header                  |
-| Admin                                                                    | Administrator                                                                        | role                          |
-| Member                                                                   | Użytkownik                                                                           | role                          |
-| Admin role with the most permissions                                     | Rola administratora z najszerszymi uprawnieniami                                     | admin role desc               |
-| Members can only view resources                                          | Członkowie mogą jedynie przeglądać zasoby                                            | member role desc              |
-
-##### Invite User popup
-
-| EN                | PL                                         | Notes       |
-| ----------------- | ------------------------------------------ | ----------- |
-| Invite User       | Give new users access to your organization |             |
-| Email             | Email                                      |             |
-| Enter an email    | Wprowadź email                             | placeholder |
-| Role              | Rola                                       |             |
-| Select role       | Wybierz role                               | placeholder |
-| Vaild for         | Ważne do                                   |             |
-| 1 day             | Dzień                                      |             |
-| 2 days            | 2 dni                                      |             |
-| 3 days            | 3 dni                                      |             |
-| 4 days            | 4 dni                                      |             |
-| 5 days            | 5 dni                                      |             |
-| 6 days            | 6 dni                                      |             |
-| 7 days            | 7 dni                                      |             |
-| Create Invitation | Utwórz zaproszenie                         |             |
-| Close             | Zamknij                                    |             |
-
-
-## Main “Shareable Links”
-##### “Hero” section
-
-| EN                                                                                                                                                                                 | PL                                                                                                                                                                                | Notes |
-| ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----- |
-| Shareable Links                                                                                                                                                                    | Łącza do udostępniania                                                                                                                                                            |       |
-| Create shareable links to your resources. Links provide temporary or unlimited access to your resource. You can configure the expiration duration of the link when you create one. | Twórz linki do udostępniania swoich zasobów. Linki zapewniają tymczasowy lub nieograniczony dostęp do zasobu. Możesz skonfigurować czas wygaśnięcia linku podczas jego tworzenia. |       |
-| Easy to create and share                                                                                                                                                           | Łatwe tworzenie i udostępnianie                                                                                                                                                   |       |
-| Configurable expiration duration                                                                                                                                                   | Konfigurowalny czas wygaśnięcia                                                                                                                                                   |       |
-| Secure and revocable                                                                                                                                                               | Bezpieczne i odwołalne                                                                                                                                                            |       |
-##### Content
-
-| EN                                                                              | PL                                                                                          | Notes             |
-| ------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------- | ----------------- |
-| Manage Shareable Links                                                          | Zarządzaj łączami do udostępniania                                                          |                   |
-| Create shareable links to grant temporary or permament access to your resources | Utwórz łącze do udostępniania w celu przyznania tymczasowego lub stałego dostępu do zasobów |                   |
-| Search links                                                                    | Szukaj łączy                                                                                | placeholder       |
-| Create Share Link                                                               | Utwórz nowe łącze                                                                           | addbutton         |
-| Resource                                                                        | Zasób                                                                                       | table header      |
-| Title                                                                           | Tytuł                                                                                       | table header      |
-| Created                                                                         | Utworzone                                                                                   | table header      |
-| Expires                                                                         | Wygasa                                                                                      | table header      |
-| No links. Create one to get started.                                            | Brak łączy. Utwórz, aby rozpocząć.                                                          | table placeholder |
-
-##### Create Shareable Link popup
-
-| EN                                                                                                                                                                                                    | PL                                                                                                                                                                                             | Notes                   |
-| ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------- |
-| Create Shareable Link                                                                                                                                                                                 | Utwórz łącze do udostępnienia                                                                                                                                                                  |                         |
-| Anyone with this link can access the resource                                                                                                                                                         | Każdy kto ma ten link może korzystać z zasobu                                                                                                                                                  |                         |
-| Resource                                                                                                                                                                                              | Zasób                                                                                                                                                                                          |                         |
-| Select resource                                                                                                                                                                                       | Wybierz zasób                                                                                                                                                                                  |                         |
-| Search resources…                                                                                                                                                                                     | Szukaj zasobów…                                                                                                                                                                                | resource selector popup |
-| Title (optional)                                                                                                                                                                                      | Tytuł (opcjonalny)                                                                                                                                                                             |                         |
-| Enter title                                                                                                                                                                                           | Wprowadź tytuł                                                                                                                                                                                 | placeholder             |
-| Expire in                                                                                                                                                                                             | Wygasa za                                                                                                                                                                                      |                         |
-| Minutes                                                                                                                                                                                               | Minut                                                                                                                                                                                          |                         |
-| Hours                                                                                                                                                                                                 | Godzin                                                                                                                                                                                         |                         |
-| Days                                                                                                                                                                                                  | Dni                                                                                                                                                                                            |                         |
-| Months                                                                                                                                                                                                | Miesięcy                                                                                                                                                                                       |                         |
-| Years                                                                                                                                                                                                 | Lat                                                                                                                                                                                            |                         |
-| Never expire                                                                                                                                                                                          | Nie wygasa                                                                                                                                                                                     |                         |
-| Expiration time is how long the link will be usable and provide access to the resource. After this time, the link will no longer work, and users who used this link will lose access to the resource. | Czas wygaśnięcia to okres, przez który link będzie aktywny i zapewni dostęp do zasobu. Po upływie tego czasu link przestanie działać, a użytkownicy, którzy go użyli, stracą dostęp do zasobu. |                         |
-| Create Link                                                                                                                                                                                           | Utwórz łącze                                                                                                                                                                                   |                         |
-| Close                                                                                                                                                                                                 | Zamknij                                                                                                                                                                                        |                         |
-
-
-## Main “General”
-
-| EN                                                                   | PL                                                                  | Notes        |
-| -------------------------------------------------------------------- | ------------------------------------------------------------------- | ------------ |
-| General                                                              | Ogólne                                                              |              |
-| Configure your organization’s general settings                       | Zarządzaj ogólnymi ustawieniami twoich organizacji                  |              |
-| General                                                              | Ogólne                                                              | sidebar item |
-| Organization Settings                                                | Ustawienia organizacji                                              |              |
-| Manage your organization details and configuration                   | Zarządzaj szczegółami i konfiguracją organizacji                    |              |
-| Name                                                                 | Nazwa                                                               |              |
-| This is the display name of the org                                  | To jest wyświetlana nazwa Twojej organizacji                        |              |
-| Save Settings                                                        | Zapisz ustawienia                                                   |              |
-| Danger Zone                                                          | Niebezpieczna strefa                                                |              |
-| Once you delete this org, there is no going back. Please be certain. | Jeśli usuniesz swoją tą organizację, nie ma odwrotu. Bądź ostrożny! |              |
-| Delete Organization Data                                             | Usuń dane organizacji                                               |              |

internationalization/tr.md

@@ -1,310 +0,0 @@
-## Authentication Site
-
-| EN                                                       | TR                                                                                 | Notes      |
-| -------------------------------------------------------- | ---------------------------------------------------------------------------------- | ---------- |
-| Powered by [Pangolin](https://github.com/fosrl/pangolin) | Pangolin Tarafından Destekleniyor                                                  |            |
-| Authentication Required                                  | Kimlik Doğrulaması Gerekli                                                         |            |
-| Choose your preferred method to access {resource}        | {resource}'a erişmek için tercih ettiğiniz yöntemi seçin                           |            |
-| PIN                                                      | PIN                                                                                |            |
-| User                                                     | Kullanıcı                                                                          |            |
-| 6-digit PIN Code                                         | 6 haneli PIN Kodu                                                                  | pin login  |
-| Login in with PIN                                        | PIN ile Giriş Yap                                                                  | pin login  |
-| Email                                                    | E-posta                                                                            | user login |
-| Enter your email                                         | E-postanızı girin                                                                  | user login |
-| Password                                                 | Şifre                                                                              | user login |
-| Enter your password                                      | Şifrenizi girin                                                                    | user login |
-| Forgot your password?                                    | Şifrenizi mi unuttunuz?                                                            | user login |
-| Log in                                                   | Giriş Yap                                                                          | user login |
-
----
-
-## Login site
-
-| EN                    | TR                                                     | Notes       |
-| --------------------- | ------------------------------------------------------ | ----------- |
-| Welcome to Pangolin   | Pangolin'e Hoşgeldiniz                                 |             |
-| Log in to get started | Başlamak için giriş yapın                              |             |
-| Email                 | E-posta                                                |             |
-| Enter your email      | E-posta adresinizi girin                               | placeholder |
-| Password              | Şifre                                                  |             |
-| Enter your password   | Şifrenizi girin                                        | placeholder |
-| Forgot your password? | Şifrenizi mi unuttunuz?                                |             |
-| Log in                | Giriş Yap                                              |             |
-
----
-
-# Organization site after successful login
-
-| EN                                        | TR                                                                  | Notes |
-| ----------------------------------------- | ------------------------------------------------------------------- | ----- |
-| Welcome to Pangolin                       | Pangolin'e Hoşgeldiniz                                              |       |
-| You're a member of {number} organization. | {number} organizasyonunun üyesiniz.                                 |       |
-
----
-
-## Shared Header, Navbar and Footer
-
-##### Header
-
-| EN                  | TR                         | Notes |
-| ------------------- | -------------------------- | ----- |
-| Documentation       | Dokümantasyon              |       |
-| Support             | Destek                     |       |
-| Organization {name} | Organizasyon {name}        |       |
-
-##### Organization selector
-
-| EN               | TR                     | Notes |
-| ---------------- | ---------------------- | ----- |
-| Search…          | Ara…                   |       |
-| Create           | Oluştur                |       |
-| New Organization | Yeni Organizasyon      |       |
-| Organizations    | Organizasyonlar        |       |
-
-##### Navbar
-
-| EN              | TR                              | Notes |
-| --------------- | ------------------------------- | ----- |
-| Sites           | Siteler                         |       |
-| Resources       | Kaynaklar                       |       |
-| User & Roles    | Kullanıcılar ve Roller          |       |
-| Shareable Links | Paylaşılabilir Linkler          |       |
-| General         | Genel                           |       |
-
-##### Footer
-
-| EN                        | TR                                               | Notes                |
-| ------------------------- | ------------------------------------------------ | -------------------- |
-| Page {number} of {number} | Sayfa {number} / {number}                        |                      |
-| Rows per page             | Sayfa başına satırlar                            |                      |
-| Pangolin                  | Pangolin                                         | Footer'da yer alır   |
-| Built by Fossorial        | Fossorial tarafından oluşturuldu                 | Footer'da yer alır   |
-| Open Source               | Açık Kaynak                                      | Footer'da yer alır   |
-| Documentation             | Dokümantasyon                                    | Footer'da yer alır   |
-| {version}                 | {version}                                        | Footer'da yer alır   |
-
----
-
-## Main “Sites”
-
-##### “Hero” section
-
-| EN                                                           | TR                                                                                                                         | Notes |
-| ------------------------------------------------------------ | -------------------------------------------------------------------------------------------------------------------------- | ----- |
-| Newt (Recommended)                                           | Newt (Tavsiye Edilen)                                                                                                      |       |
-| For the best user experience, use Newt. It uses WireGuard under the hood and allows you to address your private resources by their LAN address on your private network from within the Pangolin dashboard. | En iyi kullanıcı deneyimi için Newt'i kullanın. Newt, arka planda WireGuard kullanır ve Pangolin kontrol paneli üzerinden özel ağınızdaki kaynaklarınıza LAN adresleriyle erişmenizi sağlar. |       |
-| Runs in Docker                                               | Docker üzerinde çalışır                                                                                                    |       |
-| Runs in shell on macOS, Linux, and Windows                   | macOS, Linux ve Windows’ta komut satırında çalışır                                                                         |       |
-| Install Newt                                                 | Newt'i Yükle                                                                                                               |       |
-| Basic WireGuard<br>                                          | Temel WireGuard<br>                                                                                                        |       |
-| Compatible with all WireGuard clients<br>                    | Tüm WireGuard istemcileriyle uyumlu<br>                                                                                    |       |
-| Manual configuration required                                | Manuel yapılandırma gereklidir                                                                                             |       |
-
-##### Content
-
-| EN                                                        | TR                                                                          | Notes        |
-| --------------------------------------------------------- | --------------------------------------------------------------------------- | ------------ |
-| Manage Sites                                              | Siteleri Yönet                                                              |              |
-| Allow connectivity to your network through secure tunnels | Güvenli tüneller aracılığıyla ağınıza bağlantı sağlayın                     |              |
-| Search sites                                              | Siteleri ara                                                                | placeholder  |
-| Add Site                                                  | Site Ekle                                                                   |              |
-| Name                                                      | Ad                                                                          | Table Header |
-| Online                                                    | Çevrimiçi                                                                   | Table Header |
-| Site                                                      | Site                                                                        | Table Header |
-| Data In                                                   | Gelen Veri                                                                  | Table Header |
-| Data Out                                                  | Giden Veri                                                                  | Table Header |
-| Connection Type                                           | Bağlantı Türü                                                               | Table Header |
-| Online                                                    | Çevrimiçi                                                                   | Site state   |
-| Offline                                                   | Çevrimdışı                                                                  | Site state   |
-| Edit →                                                    | Düzenle →                                                                   |              |
-| View settings                                             | Ayarları Görüntüle                                                          | Popup        |
-| Delete                                                    | Sil                                                                         | Popup        |
-
-##### Add Site Popup
-
-| EN                                                     | TR                                                                                          | Notes       |
-| ------------------------------------------------------ | ------------------------------------------------------------------------------------------- | ----------- |
-| Create Site                                            | Site Oluştur                                                                                |             |
-| Create a new site to start connection for this site    | Bu site için bağlantıyı başlatmak amacıyla yeni bir site oluşturun                          |             |
-| Name                                                   | Ad                                                                                          |             |
-| Site name                                              | Site adı                                                                                    | placeholder |
-| This is the name that will be displayed for this site. | Bu, site için görüntülenecek addır.                                                         | desc        |
-| Method                                                 | Yöntem                                                                                      |             |
-| Local                                                  | Yerel                                                                                       |             |
-| Newt                                                   | Newt                                                                                        |             |
-| WireGuard                                              | WireGuard                                                                                   |             |
-| This is how you will expose connections.               | Bağlantılarınızı bu şekilde açığa çıkaracaksınız.                                           |             |
-| You will only be able to see the configuration once.   | Yapılandırmayı yalnızca bir kez görüntüleyebilirsiniz.                                      |             |
-| Learn how to install Newt on your system               | Sisteminizde Newt'in nasıl kurulacağını öğrenin                                             |             |
-| I have copied the config                               | Yapılandırmayı kopyaladım                                                                   |             |
-| Create Site                                            | Site Oluştur                                                                                |             |
-| Close                                                  | Kapat                                                                                       |             |
-
----
-
-## Main “Resources”
-
-##### “Hero” section
-
-| EN                                                           | TR                                                                                                                             | Notes |
-| ------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------ | ----- |
-| Resources                                                    | Kaynaklar                                                                                                                      |       |
-| Ressourcen sind Proxy-Server für Anwendungen, die in Ihrem privaten Netzwerk laufen. Erstellen Sie eine Ressource für jede HTTP- oder HTTPS-Anwendung in Ihrem privaten Netzwerk. Jede Ressource muss mit einer Website verbunden sein, um eine private und sichere Verbindung über den verschlüsselten WireGuard-Tunnel zu ermöglichen. | Kaynaklar, özel ağınızda çalışan uygulamalar için proxy sunucularıdır. Özel ağınızdaki her HTTP veya HTTPS uygulaması için bir kaynak oluşturun. Her kaynağın, şifrelenmiş WireGuard tüneli üzerinden özel ve güvenli bağlantı sağlamak üzere bir siteyle ilişkili olması gerekir. |       |
-| Secure connectivity with WireGuard encryption                | WireGuard şifrelemesiyle güvenli bağlantı                                                                                      |       |
-| Configure multiple authentication methods                    | Birden çok kimlik doğrulama yöntemini yapılandırın                                                                             |       |
-| User and role-based access control                           | Kullanıcı ve role dayalı erişim kontrolü                                                                                       |       |
-
-##### Content
-
-| EN                                                 | TR                                                            | Notes                |
-| -------------------------------------------------- | ------------------------------------------------------------- | -------------------- |
-| Manage Resources                                   | Kaynakları Yönet                                              |                      |
-| Create secure proxies to your private applications | Özel uygulamalarınız için güvenli proxy’ler oluşturun         |                      |
-| Search resources                                   | Kaynakları ara                                                | placeholder          |
-| Name                                               | Ad                                                            |                      |
-| Site                                               | Site                                                          |                      |
-| Full URL                                           | Tam URL                                                       |                      |
-| Authentication                                     | Kimlik Doğrulama                                              |                      |
-| Not Protected                                      | Korunmayan                                                    | authentication state |
-| Protected                                          | Korunan                                                       | authentication state |
-| Edit →                                             | Düzenle →                                                     |                      |
-| Add Resource                                       | Kaynak Ekle                                                   |                      |
-
-##### Add Resource Popup
-
-| EN                                                           | TR                                                                                              | Notes         |
-| ------------------------------------------------------------ | ----------------------------------------------------------------------------------------------- | ------------- |
-| Create Resource                                              | Kaynak Oluştur                                                                                  |               |
-| Create a new resource to proxy request to your app           | Uygulamanıza gelen istekleri yönlendirmek için yeni bir kaynak oluşturun                        |               |
-| Name                                                         | Ad                                                                                              |               |
-| My Resource                                                  | Kaynağım                                                                                        | name placeholder |
-| This is the name that will be displayed for this resource.   | Bu, kaynağın görüntülenecek adıdır.                                                             |               |
-| Subdomain                                                    | Alt alan adı                                                                                    |               |
-| Enter subdomain                                              | Alt alan adını girin                                                                            |               |
-| This is the fully qualified domain name that will be used to access the resource. | Kaynağa erişmek için kullanılacak tam nitelikli alan adıdır.               |               |
-| Site                                                         | Site                                                                                            |               |
-| Search site…                                                 | Site ara…                                                                                       | Site selector popup |
-| This is the site that will be used in the dashboard.         | Kontrol panelinde kullanılacak sitedir.                                                         |               |
-| Create Resource                                              | Kaynak Oluştur                                                                                  |               |
-| Close                                                        | Kapat                                                                                           |               |
-
----
-
-## Main “User & Roles”
-
-##### Content
-
-| EN                                                           | TR                                                                                         | Notes                         |
-| ------------------------------------------------------------ | ------------------------------------------------------------------------------------------ | ----------------------------- |
-| Manage User & Roles                                          | Kullanıcılar ve Rolleri Yönet                                                              |                               |
-| Invite users and add them to roles to manage access to your organization | Organizasyonunuza erişimi yönetmek için kullanıcıları davet edin ve rollere atayın |                               |
-| Users                                                        | Kullanıcılar                                                                               | sidebar item                  |
-| Roles                                                        | Roller                                                                                     | sidebar item                  |
-| **User tab**                                                 | **Kullanıcı Sekmesi**                                                                      |                               |
-| Search users                                                 | Kullanıcıları ara                                                                          | placeholder                   |
-| Invite User                                                  | Kullanıcı Davet Et                                                                         | addbutton                     |
-| Email                                                        | E-posta                                                                                    | table header                  |
-| Status                                                       | Durum                                                                                      | table header                  |
-| Role                                                         | Rol                                                                                        | table header                  |
-| Confirmed                                                    | Onaylandı                                                                                  | account status                |
-| Not confirmed (?)                                            | Onaylanmadı (?)                                                                            | account status                |
-| Owner                                                        | Sahip                                                                                      | role                          |
-| Admin                                                        | Yönetici                                                                                   | role                          |
-| Member                                                       | Üye                                                                                        | role                          |
-| **Roles Tab**                                                | **Roller Sekmesi**                                                                         |                               |
-| Search roles                                                 | Rolleri ara                                                                                | placeholder                   |
-| Add Role                                                     | Rol Ekle                                                                                   | addbutton                     |
-| Name                                                         | Ad                                                                                         | table header                  |
-| Description                                                  | Açıklama                                                                                   | table header                  |
-| Admin                                                        | Yönetici                                                                                   | role                          |
-| Member                                                       | Üye                                                                                        | role                          |
-| Admin role with the most permissions                         | En fazla yetkiye sahip yönetici rolü                                                       | admin role desc               |
-| Members can only view resources                              | Üyeler yalnızca kaynakları görüntüleyebilir                                                | member role desc              |
-
-##### Invite User popup
-
-| EN                | TR                                                                      | Notes       |
-| ----------------- | ----------------------------------------------------------------------- | ----------- |
-| Invite User       | Kullanıcı Davet Et                                                      |             |
-| Email             | E-posta                                                                 |             |
-| Enter an email    | Bir e-posta adresi girin                                                | placeholder |
-| Role              | Rol                                                                     |             |
-| Select role       | Rol seçin                                                               | placeholder |
-| Gültig für        | Geçerlilik Süresi                                                       |             |
-| 1 day             | 1 gün                                                                   |             |
-| 2 days            | 2 gün                                                                   |             |
-| 3 days            | 3 gün                                                                   |             |
-| 4 days            | 4 gün                                                                   |             |
-| 5 days            | 5 gün                                                                   |             |
-| 6 days            | 6 gün                                                                   |             |
-| 7 days            | 7 gün                                                                   |             |
-| Create Invitation | Davetiye Oluştur                                                        |             |
-| Close             | Kapat                                                                   |             |
-
----
-
-## Main “Shareable Links”
-
-##### “Hero” section
-
-| EN                                                           | TR                                                                                                                            | Notes |
-| ------------------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------- | ----- |
-| Shareable Links                                              | Paylaşılabilir Bağlantılar                                                                                                    |       |
-| Create shareable links to your resources. Links provide temporary or unlimited access to your resource. You can configure the expiration duration of the link when you create one. | Kaynaklarınıza paylaşılabilir bağlantılar oluşturun. Bağlantılar, kaynağınıza geçici veya sınırsız erişim sağlar. Oluştururken bağlantının geçerlilik süresini ayarlayabilirsiniz. |       |
-| Easy to create and share                                     | Oluşturması ve paylaşması kolay                                                                                               |       |
-| Configurable expiration duration                             | Yapılandırılabilir geçerlilik süresi                                                                                          |       |
-| Secure and revocable                                         | Güvenli ve iptal edilebilir                                                                                                   |       |
-
-##### Content
-
-| EN                                                           | TR                                                                                       | Notes          |
-| ------------------------------------------------------------ | ---------------------------------------------------------------------------------------- | -------------- |
-| Manage Shareable Links                                       | Paylaşılabilir Bağlantıları Yönet                                                        |                |
-| Create shareable links to grant temporary or permanent access to your resources | Kaynaklarınıza geçici veya kalıcı erişim sağlamak için paylaşılabilir bağlantılar oluşturun |                |
-| Search links                                                 | Bağlantıları ara                                                                         | placeholder    |
-| Create Share Link                                            | Bağlantı Oluştur                                                                         | addbutton      |
-| Resource                                                     | Kaynak                                                                                   | table header   |
-| Title                                                        | Başlık                                                                                   | table header   |
-| Created                                                      | Oluşturulma Tarihi                                                                       | table header   |
-| Expires                                                      | Son Kullanma Tarihi                                                                      | table header   |
-| No links. Create one to get started.                         | Bağlantı yok. Başlamak için bir tane oluşturun.                                          | table placeholder |
-
-##### Create Shareable Link popup
-
-| EN                                                           | TR                                                                                                                     | Notes                   |
-| ------------------------------------------------------------ | ---------------------------------------------------------------------------------------------------------------------- | ----------------------- |
-| Create Shareable Link                                        | Paylaşılabilir Bağlantı Oluştur                                                                                        |                         |
-| Anyone with this link can access the resource                | Bu bağlantıya sahip olan herkes kaynağa erişebilir                                                                     |                         |
-| Resource                                                     | Kaynak                                                                                                                 |                         |
-| Select resource                                              | Kaynak seçin                                                                                                           |                         |
-| Search resources…                                            | Kaynak ara…                                                                                                            | resource selector popup |
-| Title (optional)                                             | Başlık (isteğe bağlı)                                                                                                  |                         |
-| Enter title                                                  | Başlık girin                                                                                                           | placeholder             |
-| Expire in                                                    | Sona Erme Süresi                                                                                                       |                         |
-| Minutes                                                      | Dakika                                                                                                                 |                         |
-| Hours                                                        | Saat                                                                                                                   |                         |
-| Days                                                         | Gün                                                                                                                    |                         |
-| Months                                                       | Ay                                                                                                                     |                         |
-| Years                                                        | Yıl                                                                                                                    |                         |
-| Never expire                                                 | Asla sona erme                                                                                                         |                         |
-| Expiration time is how long the link will be usable and provide access to the resource. After this time, the link will no longer work, and users who used this link will lose access to the resource. | Bağlantının geçerlilik süresi, bağlantının ne kadar süreyle kullanılabilir olacağını ve kaynağa erişim sağlayacağını belirler. Bu sürenin sonunda bağlantı çalışmaz hale gelir ve bağlantıyı kullananlar kaynağa erişimini kaybeder. |                         |
-| Create Link                                                  | Bağlantı Oluştur                                                                                                       |                         |
-| Close                                                        | Kapat                                                                                                                  |                         |
-
----
-
-## Main “General”
-
-| EN                                                           | TR                                                                                          | Notes        |
-| ------------------------------------------------------------ | ------------------------------------------------------------------------------------------- | ------------ |
-| General                                                      | Genel                                                                                       |              |
-| Configure your organization’s general settings               | Organizasyonunuzun genel ayarlarını yapılandırın                                            |              |
-| General                                                      | Genel                                                                                       | sidebar item |
-| Organization Settings                                        | Organizasyon Ayarları                                                                       |              |
-| Manage your organization details and configuration           | Organizasyonunuzun detaylarını ve yapılandırmasını yönetin                                  |              |
-| Name                                                         | Ad                                                                                          |              |
-| This is the display name of the org                          | Bu, organizasyonunuzun görüntülenecek adıdır.                                               |              |
-| Save Settings                                                | Ayarları Kaydet                                                                             |              |
-| Danger Zone                                                  | Tehlikeli Bölge                                                                             |              |
-| Once you delete this org, there is no going back. Please be certain. | Bu organizasyonu sildikten sonra geri dönüş yoktur. Lütfen emin olun.                       |              |
-| Delete Organization Data                                     | Organizasyon Verilerini Sil                                                                 |              |

next.config.mjs

@@ -1,9 +1,13 @@
-/** @type {import('next').NextConfig} */
+import createNextIntlPlugin from "next-intl/plugin";
+
+const withNextIntl = createNextIntlPlugin();
+
+/** @type {import("next").NextConfig} */
 const nextConfig = {
     eslint: {
-        ignoreDuringBuilds: true,
+        ignoreDuringBuilds: true
     },
     output: "standalone"
 };
 
-export default nextConfig;
+export default withNextIntl(nextConfig);

package.json

@@ -12,123 +12,144 @@
     "license": "SEE LICENSE IN LICENSE AND README.md",
     "scripts": {
         "dev": "NODE_ENV=development ENVIRONMENT=dev tsx watch server/index.ts",
-        "db:generate": "drizzle-kit generate",
+        "db:pg:generate": "drizzle-kit generate --config=./drizzle.pg.config.ts",
-        "db:push": "npx tsx server/db/migrate.ts",
+        "db:sqlite:generate": "drizzle-kit generate --config=./drizzle.sqlite.config.ts",
-        "db:studio": "drizzle-kit studio",
+        "db:pg:push": "npx tsx server/db/pg/migrate.ts",
-        "build": "mkdir -p dist && next build && node esbuild.mjs -e server/index.ts -o dist/server.mjs && node esbuild.mjs -e server/setup/migrations.ts -o dist/migrations.mjs",
+        "db:sqlite:push": "npx tsx server/db/sqlite/migrate.ts",
-        "start": "NODE_OPTIONS=--enable-source-maps NODE_ENV=development ENVIRONMENT=prod sh -c 'node dist/migrations.mjs && node dist/server.mjs'",
+        "db:sqlite:studio": "drizzle-kit studio --config=./drizzle.sqlite.config.ts",
-        "email": "email dev --dir server/emails/templates --port 3005"
+        "db:pg:studio": "drizzle-kit studio --config=./drizzle.pg.config.ts",
+        "db:clear-migrations": "rm -rf server/migrations",
+        "set:sqlite": "echo 'export * from \"./sqlite\";' > server/db/index.ts",
+        "set:pg": "echo 'export * from \"./pg\";' > server/db/index.ts",
+        "next:build": "next build",
+        "build:sqlite": "mkdir -p dist && next build && node esbuild.mjs -e server/index.ts -o dist/server.mjs && node esbuild.mjs -e server/setup/migrationsSqlite.ts -o dist/migrations.mjs",
+        "build:pg": "mkdir -p dist && next build && node esbuild.mjs -e server/index.ts -o dist/server.mjs && node esbuild.mjs -e server/setup/migrationsPg.ts -o dist/migrations.mjs",
+        "start": "ENVIRONMENT=prod node dist/migrations.mjs && ENVIRONMENT=prod NODE_ENV=development node --enable-source-maps dist/server.mjs",
+        "email": "email dev --dir server/emails/templates --port 3005",
+        "build:cli": "node esbuild.mjs -e cli/index.ts -o dist/cli.mjs"
     },
     "dependencies": {
-        "@asteasolutions/zod-to-openapi": "^7.3.0",
+        "@asteasolutions/zod-to-openapi": "^7.3.4",
-        "@hookform/resolvers": "3.9.1",
+        "@hookform/resolvers": "5.2.2",
-        "@node-rs/argon2": "2.0.2",
+        "@node-rs/argon2": "^2.0.2",
         "@oslojs/crypto": "1.0.1",
         "@oslojs/encoding": "1.1.0",
-        "@radix-ui/react-avatar": "1.1.2",
+        "@radix-ui/react-avatar": "1.1.10",
-        "@radix-ui/react-checkbox": "1.1.3",
+        "@radix-ui/react-checkbox": "1.3.3",
-        "@radix-ui/react-collapsible": "1.1.2",
+        "@radix-ui/react-collapsible": "1.1.12",
-        "@radix-ui/react-dialog": "1.1.4",
+        "@radix-ui/react-dialog": "1.1.15",
-        "@radix-ui/react-dropdown-menu": "2.1.4",
+        "@radix-ui/react-dropdown-menu": "2.1.16",
         "@radix-ui/react-icons": "1.3.2",
-        "@radix-ui/react-label": "2.1.1",
+        "@radix-ui/react-label": "2.1.7",
-        "@radix-ui/react-popover": "1.1.4",
+        "@radix-ui/react-popover": "1.1.15",
-        "@radix-ui/react-progress": "^1.1.4",
+        "@radix-ui/react-progress": "^1.1.7",
-        "@radix-ui/react-radio-group": "1.2.2",
+        "@radix-ui/react-radio-group": "1.3.8",
-        "@radix-ui/react-select": "2.1.4",
+        "@radix-ui/react-scroll-area": "^1.2.10",
-        "@radix-ui/react-separator": "1.1.1",
+        "@radix-ui/react-select": "2.2.6",
-        "@radix-ui/react-slot": "1.1.1",
+        "@radix-ui/react-separator": "1.1.7",
-        "@radix-ui/react-switch": "1.1.2",
+        "@radix-ui/react-slot": "1.2.3",
-        "@radix-ui/react-tabs": "1.1.2",
+        "@radix-ui/react-switch": "1.2.6",
-        "@radix-ui/react-toast": "1.2.4",
+        "@radix-ui/react-tabs": "1.1.13",
-        "@react-email/components": "0.0.36",
+        "@radix-ui/react-toast": "1.2.15",
-        "@react-email/render": "^1.0.6",
+        "@radix-ui/react-tooltip": "^1.2.8",
-        "@react-email/tailwind": "1.0.4",
+        "@react-email/components": "0.5.6",
+        "@react-email/render": "^1.3.2",
+        "@react-email/tailwind": "1.2.2",
+        "@simplewebauthn/browser": "^13.2.2",
+        "@simplewebauthn/server": "^13.2.2",
         "@tailwindcss/forms": "^0.5.10",
-        "@tanstack/react-table": "8.20.6",
+        "@tanstack/react-table": "8.21.3",
-        "arctic": "^3.6.0",
+        "arctic": "^3.7.0",
-        "axios": "1.8.4",
+        "axios": "^1.12.2",
         "better-sqlite3": "11.7.0",
         "canvas-confetti": "1.9.3",
-        "class-variance-authority": "0.7.1",
+        "class-variance-authority": "^0.7.1",
         "clsx": "2.1.1",
-        "cmdk": "1.0.4",
+        "cmdk": "1.1.1",
         "cookie": "^1.0.2",
         "cookie-parser": "1.4.7",
         "cookies": "^0.9.1",
         "cors": "2.8.5",
         "crypto-js": "^4.2.0",
-        "drizzle-orm": "0.38.3",
+        "drizzle-orm": "0.44.6",
-        "eslint": "9.17.0",
+        "eslint": "9.37.0",
-        "eslint-config-next": "15.1.3",
+        "eslint-config-next": "15.5.4",
-        "express": "4.21.2",
+        "express": "5.1.0",
-        "express-rate-limit": "7.5.0",
+        "express-rate-limit": "8.1.0",
-        "glob": "11.0.0",
+        "glob": "11.0.3",
-        "helmet": "8.0.0",
+        "helmet": "8.1.0",
         "http-errors": "2.0.0",
         "i": "^0.3.7",
-        "input-otp": "1.4.1",
+        "input-otp": "1.4.2",
         "jmespath": "^0.16.0",
         "js-yaml": "4.1.0",
         "jsonwebtoken": "^9.0.2",
-        "lucide-react": "0.469.0",
+        "lucide-react": "^0.545.0",
+        "maxmind": "5.0.0",
         "moment": "2.30.1",
-        "next": "15.2.4",
+        "next": "15.5.4",
-        "next-themes": "0.4.4",
+        "next-intl": "^4.3.12",
+        "next-themes": "0.4.6",
         "node-cache": "5.1.2",
         "node-fetch": "3.3.2",
-        "nodemailer": "6.9.16",
+        "nodemailer": "7.0.9",
-        "npm": "^11.2.0",
+        "npm": "^11.6.2",
         "oslo": "1.2.1",
+        "pg": "^8.16.2",
         "qrcode.react": "4.2.0",
-        "react": "19.0.0",
+        "react": "19.2.0",
-        "react-dom": "19.0.0",
+        "react-dom": "19.2.0",
-        "react-easy-sort": "^1.6.0",
+        "react-easy-sort": "^1.8.0",
-        "react-hook-form": "7.54.2",
+        "react-hook-form": "7.65.0",
         "react-icons": "^5.5.0",
         "rebuild": "0.1.2",
-        "semver": "7.6.3",
+        "resend": "^6.1.2",
+        "semver": "^7.7.3",
         "swagger-ui-express": "^5.0.1",
-        "tailwind-merge": "2.6.0",
+        "tailwind-merge": "3.3.1",
-        "tw-animate-css": "^1.2.5",
+        "tw-animate-css": "^1.3.8",
-        "uuid": "^11.1.0",
+        "uuid": "^13.0.0",
         "vaul": "1.1.2",
-        "winston": "3.17.0",
+        "winston": "3.18.3",
         "winston-daily-rotate-file": "5.0.0",
-        "ws": "8.18.0",
+        "ws": "8.18.3",
-        "zod": "3.24.1",
+        "yargs": "18.0.0",
-        "zod-validation-error": "3.4.0"
+        "zod": "3.25.76",
+        "zod-validation-error": "3.5.2"
     },
     "devDependencies": {
-        "@dotenvx/dotenvx": "1.32.0",
+        "@dotenvx/dotenvx": "1.51.0",
         "@esbuild-plugins/tsconfig-paths": "0.1.2",
-        "@tailwindcss/postcss": "^4.1.3",
+        "@react-email/preview-server": "4.3.0",
+        "@tailwindcss/postcss": "^4.1.14",
         "@types/better-sqlite3": "7.6.12",
-        "@types/cookie-parser": "1.4.8",
+        "@types/cookie-parser": "1.4.9",
-        "@types/cors": "2.8.17",
+        "@types/cors": "2.8.19",
         "@types/crypto-js": "^4.2.2",
-        "@types/express": "5.0.0",
+        "@types/express": "5.0.3",
+        "@types/express-session": "^1.18.2",
         "@types/jmespath": "^0.15.2",
         "@types/js-yaml": "4.0.9",
-        "@types/jsonwebtoken": "^9.0.9",
+        "@types/jsonwebtoken": "^9.0.10",
-        "@types/node": "^22",
+        "@types/node": "24.7.2",
-        "@types/nodemailer": "6.4.17",
+        "@types/nodemailer": "7.0.2",
-        "@types/react": "19.1.1",
+        "@types/pg": "8.15.5",
-        "@types/react-dom": "19.1.2",
+        "@types/react": "19.2.2",
-        "@types/semver": "7.5.8",
+        "@types/react-dom": "19.2.1",
+        "@types/semver": "^7.7.1",
         "@types/swagger-ui-express": "^4.1.8",
-        "@types/ws": "8.5.13",
+        "@types/ws": "8.18.1",
         "@types/yargs": "17.0.33",
-        "drizzle-kit": "0.30.6",
+        "drizzle-kit": "0.31.5",
-        "esbuild": "0.25.2",
+        "esbuild": "0.25.10",
         "esbuild-node-externals": "1.18.0",
         "postcss": "^8",
-        "react-email": "4.0.6",
+        "react-email": "4.3.0",
         "tailwindcss": "^4.1.4",
-        "tsc-alias": "1.8.10",
+        "tsc-alias": "1.8.16",
-        "tsx": "4.19.3",
+        "tsx": "4.20.6",
         "typescript": "^5",
-        "yargs": "17.7.2"
+        "typescript-eslint": "^8.46.0"
     },
     "overrides": {
         "emblor": {

postcss.config.mjs

@@ -1,7 +1,7 @@
 /** @type {import('postcss-load-config').Config} */
 const config = {
     plugins: {
-        '@tailwindcss/postcss': {},
+        "@tailwindcss/postcss": {},
     },
 };
 

public/logo/pangolin_black.svg

@@ -1,22 +1,21 @@
 <?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!-- Created with Inkscape (http://www.inkscape.org/) -->
+
 <svg
+   width="900.82861"
+   height="955.20648"
+   viewBox="0 0 238.34422 252.7317"
    version="1.1"
-   x="0px"
+   id="svg420"
-   y="0px"
+   inkscape:export-filename="logo.svg"
-   viewBox="0 0 399.99999 400.00002"
+   inkscape:export-xdpi="221.14999"
-   enable-background="new 0 0 419.528 419.528"
+   inkscape:export-ydpi="221.14999"
-   xml:space="preserve"
-   id="svg52"
-   sodipodi:docname="noun-pangolin-1798092.svg"
-   width="400"
-   height="400"
-   inkscape:version="1.2.2 (b0a8486541, 2022-12-01)"
    xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
    xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
    xmlns="http://www.w3.org/2000/svg"
-   xmlns:svg="http://www.w3.org/2000/svg"><defs
+   xmlns:svg="http://www.w3.org/2000/svg">
-     id="defs56" /><sodipodi:namedview
+  <sodipodi:namedview
-     id="namedview54"
+     id="namedview422"
      pagecolor="#ffffff"
      bordercolor="#666666"
      borderopacity="1.0"
@@ -24,15 +23,18 @@
      inkscape:pageopacity="0.0"
      inkscape:pagecheckerboard="0"
      inkscape:deskcolor="#d1d1d1"
-     showgrid="false"
+     inkscape:document-units="mm"
-     inkscape:zoom="1.9583914"
+     showgrid="false" />
-     inkscape:cx="209.86611"
+  <defs
-     inkscape:cy="262.20499"
+     id="defs417" />
-     inkscape:window-width="3840"
+  <g
-     inkscape:window-height="2136"
+     inkscape:label="Layer 1"
-     inkscape:window-x="0"
+     inkscape:groupmode="layer"
-     inkscape:window-y="0"
+     id="layer1"
-     inkscape:window-maximized="1"
+     transform="translate(-13.119542,-5.9258171)">
-     inkscape:current-layer="svg52" /><path
+    <path
-     d="m 62.232921,184.91974 c 0,2.431 -1.97,4.402 -4.399,4.402 -2.429,0 -4.399,-1.972 -4.399,-4.402 0,-2.429 1.97,-4.399 4.399,-4.399 2.429,-10e-4 4.399,1.97 4.399,4.399 z m 58.993999,-4.821 c -25.943999,-2.826 -38.978999,7.453 -71.181999,31.357 -27.572,20.467 -32.767,4.381 -31.748,-2.614 1.499,-10.282 25.222,-58.573 48.079,-88.461 28.273,7.34 49.869999,30.727 54.850999,59.718 z m -55.915999,4.821 c 0,-4.131 -3.349,-7.478 -7.478,-7.478 -4.129,0 -7.478,3.347 -7.478,7.478 0,4.131 3.349,7.481 7.478,7.481 4.13,0 7.478,-3.35 7.478,-7.481 z m -15.032,48.424 -0.234,14.041 20.413,22.687 -9.818,7.353 33.306,27.492 -11.759,8.124 42.631999,19.939 -10.825,9.747 48.291,8.078 -7.526,10.307 48.758,-4.531 -3.997,11.725 53.916,-18.153 -2.76,13.357 48.077,-34.345 1.479,13.562 34.087,-48.576 7.478,14.206 15.187,-58.89 10.391,8.533 -2.14,-57.884 13.814,5.13 -21.082,-51.204 13.404,0.048 -33.696,-42.131 15.312,-1.366 -47.026,-32.831002 14.255,-8.399 -54.817,-14.682 9.257,-11.695 -49.625,0.352 0.6,-13.337 -38.537,14.084 -1.597,-12.689 -29.984,21.429 -6.446,-10.852 -22.59,26.504 -7.021,-9.572 -18.923,30.294 -9.595999,-8.744 -16.754,30.138002 c 31.509999,10.197 54.979999,37.951 59.126999,71.547 0.404,0.087 -22.37,31.257 10.955,57.85 -0.576,-2.985 -6.113,-53.902 47.496,-57.61 26.668,-1.844 48.4,21.666 48.4,48.399 0,8.184 -2.05,15.883 -5.636,22.64 -15.927,29.611 -64.858,30.755 -80.429,30.596 -45.154,-0.459 -104.051999,-51.521 -104.051999,-51.521 z"
+       d="m 213.66176,90.072122 c 4.95655,0 8.97383,4.018046 8.97383,8.973827 0,4.956581 -4.01728,8.974621 -8.97383,8.974621 -4.95657,0 -8.97462,-4.01804 -8.97462,-8.974621 0,-4.955781 4.01805,-8.973827 8.97462,-8.973827 z m 35.2316,37.450998 c -0.90048,29.80928 -23.66033,69.21262 -54.51292,79.34466 -36.04206,11.836 -63.40991,-5.92226 -72.08409,-26.74061 -6.75754,-16.21966 -1.65117,-35.62363 10.96266,-43.83669 10.6506,-6.93533 30.48543,-8.76736 47.15454,2.19144 -5.85627,-15.34246 -21.62491,-25.4256 -35.59101,-28.49424 -13.96613,-3.06867 -28.38324,0.43858 -38.74504,5.69946 13.29071,-14.68572 44.40801,-28.946049 78.24077,-10.95958 22.67676,12.05491 32.43775,28.93208 42.0489,51.72763 C 251.59637,117.87858 234.026,71.411066 203.39074,43.794029 172.15544,15.636686 129.95516,4.340214 97.668803,6.103155 108.32483,12.678273 120.84625,22.06586 132.41209,33.053363 81.298533,26.697169 39.174705,38.314245 13.119542,73.749217 27.67508,70.878527 46.868833,69.073666 65.974711,70.016861 28.737658,96.252107 7.1124298,140.38147 18.105298,186.43137 c 6.718497,-11.74129 16.767711,-25.84558 28.726275,-38.62863 -3.677175,34.36994 1.42836,80.83745 45.62293,110.85478 -2.25587,-9.42394 -4.08014,-20.88443 -4.91466,-33.0154 20.673197,16.1282 50.685067,29.42205 87.917917,20.24096 65.77679,-16.21975 83.34719,-79.78335 73.4356,-118.35996"
-     id="path46" /></svg>
+       style="fill:#000000;fill-opacity:1;fill-rule:nonzero;stroke:none;stroke-width:0.0776283"
+       id="path32" />
+  </g>
+</svg>