How to secure the dokploy admin panel behind VPN?

[yagodearellano]

I just got my first VPS and I really want to take security seriously.

I understand that some services (like WordPress, or n8n for webhooks) need to be exposed to the internet, but I want to keep others 100% isolated.

How do you handle this?

I tried setting up a VPN with Tailscale, but since I’m using Dokploy as the manager (which relies on Docker Swarm), the apps only ever see Docker’s internal IP. I can’t find a way to make Traefik run in host network mode to solve this — I don’t think it’s possible.

For now I’ve added Basic Auth protection to the Dokploy panel, Kuma, Beszel… but it doesn’t feel right. There must be a way to make them accessible only through VPN.

Any advice is welcome!

[IsmaelTechProxy]

https://github.com/fosrl/pangolin might be your answer however it does conflict with dokploy setup and I got it to work by only proxing the dokploy dashboard and that's so far the stuff inside a container don't work but you might figure it out