Add native support for Pangolin (self-hosted alternative to Cloudflare Tunnel)

[andrea-tr2]

Many Dokploy users rely on Cloudflare Tunnel snippets to publish services without opening ports, yet that path still depends on Cloudflare's SaaS.

Pangolin achieves the same outward-facing tunnel while remaining fully self-hosted. It runs its own WireGuard relay, exposes private resources through a single outbound connection, and includes the access controls that ordinarily require Cloudflare Access: per-path, role and IP rules, one-time share links, native OIDC (Logto, ZITADEL, Authentik, Keycloak) and forwarding for any single-port TCP or UDP service in addition to HTTP/HTTPS.

Repo: https://github.com/fosrl/pangolin

Integrating Pangolin mainly involves a lightweight Newt container - https://github.com/fosrl/newt (Pangolin's WireGuard tunnel client, functionally similar to cloudflared.)