mirror of
https://github.com/fosrl/pangolin.git
synced 2026-05-07 05:09:18 -05:00
[GH-ISSUE #1862] New Sites Greyed Out / Only “Local” Option Available After Update — Remote NEWTs Cannot Access Resources #2030
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @tajbuilds on GitHub (Nov 14, 2025).
Original GitHub issue: https://github.com/fosrl/pangolin/issues/1862
Originally assigned to: @oschwartz10612 on GitHub.
Describe the Bug
After updating Pangolin + Gerbil to the latest release 12 from 11, I can no longer add new Sites with “Remote” or “Exit Node” options.
Only Local is available, and every other site option is greyed out.
Additionally:
NEWT connects successfully
WebSocket establishes
Gerbil successfully adds peers
The dashboard loads through the domain
But any remote access to internal resources results in Gateway Timeout
NEWT logs on client side show no docker socket access
Traefik shows errors fetching dynamic config from Pangolin
This was all working before the update.
Environment
Server (Exit Node):
Oracle Cloud VM – Ubuntu 24.04
Docker Engine 27
Docker Compose v2
Running:
fosrl/pangolin:latest
fosrl/gerbil:latest
traefik:v3.4.0
Client NEWTs (multiple):
Synology (DSM 7.x)
Another laptop (Ubuntu)
Both NEWTs show connected but no docker socket access
Networking:
Oracle VCN ingress rules opened:
TCP 80, 443, 5013, 22
UDP 51820, 21820
Traefik running via network_mode:service pattern (as per docs)
DNS + Cloudflare well configured
To Reproduce
Deploy Pangolin + Gerbil using current fosrl/pangolin:latest and fosrl/gerbil:latest
Add NEWT from Synology + another device
NEWT connects and is visible
Go to Sites → Add Site
Only Local is selectable. Remote options are greyed out.
Selecting an added site → accessing internal resource → results in Gateway Timeout
Expected Behavior
Remote sites should be selectable
NEWT with active connection should have Docker socket access detected
Remote access via tunnel should work
Pangolin → Traefik dynamic config endpoint should not timeout
@Lokowitz commented on GitHub (Nov 14, 2025):
Hi @TajFOT please try the fix mentioned here https://github.com/fosrl/pangolin/issues/1724#issuecomment-3435455019
@oschwartz10612 maybe a db migration for the next release would be beneficial.
@StarkZarn commented on GitHub (Nov 27, 2025):
This appears to still be an issue, as of a fresh install for some podman experimentation 2 days ago. Even with the DB subnet update, and commenting out the
orgs.subnet_groupkey in the config file, I still have the issue. Theorgs.subnet_groupkey is still mentioned in the documentation fwiw, which is contrary to the commenter in #1724@dereksanders7 commented on GitHub (Dec 9, 2025):
I resolved this by removing my "local" site temporarily
@whitestrake commented on GitHub (Dec 9, 2025):
Only just ran into this issue. My install has been around for a while, gone through a bunch of config migration.
The resolution in my case was also to delete the Local site I was using (thanks dereksanders7). Remaking the Local site immediately afterwards, I was still able to make new Newt sites too. Luckily I only had two or three local targets to fix up after, not too much trouble.
@Re4mstr commented on GitHub (Dec 10, 2025):
I am having this issue as well. Been around a long time as well.. I have 40 resources, so I'm not very interested in fixing up all of those if I dare delete the current local site..
@heroichaiku commented on GitHub (Dec 12, 2025):
I was messing around with a number of things to try resolve this issue for myself. Now, FWIW, I don't have either a) a massive configuration or b) much experience with pangolin.
What did help in my case was
systemctl gerbil restartprobably won't help in 99.9% of cases but hopefully it'll work for someone out there.@oschwartz10612 commented on GitHub (Jan 20, 2026):
I think this is a duplicate of https://github.com/fosrl/pangolin/issues/1806. Please LMK if not!