setup-ipsec-vpn

Pangolin combines a WireGuard-based VPN with tunneled reverse-proxy access for infrastructure spread across different networks. Authorized users can open web applications, VNC, RDP, and SSH sessions in a browser, while clients provide access to private hosts, databases, and network ranges. Site connectors use outbound tunnels and NAT traversal, so protected networks do not require public IP addresses or inbound ports.

Nitter provides a self-hosted alternative frontend for reading Twitter/X without client-side JavaScript or ads. Requests are proxied through the server, reducing direct tracking exposure for visitors, and the interface also offers RSS feeds and responsive pages. Hosting an instance now requires session tokens from real Twitter accounts because earlier access methods were removed, along with Redis or Valkey and the usual reverse-proxy configuration.

KeeWeb can create password vaults or open KDBX databases produced by KeePass, KeePassXC, and compatible tools. It runs in a browser or as a desktop application on Linux, Windows, and macOS. Vaults may remain as local files or be stored through Dropbox, Google Drive, or OneDrive, and the web edition can be self-hosted for greater control over deployment.

This is the official client for the Mullvad VPN service across desktop and mobile platforms. It supports WireGuard connections and options such as multihop routing, traffic obfuscation, custom DNS, content blocking, and controlled local-network access, while split-tunneling availability varies by platform. Mullvad publishes signed builds and external audit reports for the app. A Mullvad VPN service account is required to use it as a VPN client.