I replaced Cloudflare Tunnel with Pangolin, and finally own my whole ingress path
…the Pangolin handled the control plane dashboard, Gerbil handled the WireGuard server , Traefik handled the reverse proxy, and Newt ran as the tunnel client. So, it was the same architecture as Cloudflare…