# Newt

Newt is a local WireGuard tunnel client and TCP/UDP proxy that provides zero-trust remote access to home lab services through Pangolin. It is open source and self-hosted, installable on Docker Hub, Kubernetes (Helm), Proxmox, TrueNAS and Unraid.

Canonical page: https://ourlocalhost.com/app/560/newt

## Description

Newt is a local WireGuard tunnel client and TCP/UDP proxy that provides zero-trust remote access to home lab services through Pangolin. It exposes private resources without port forwarding or public exposure. For new deployments, use the Pangolin CLI instead of this template.

## Platform availability

Available on 5 of 9 platforms: Unraid, TrueNAS, Proxmox, Helm, Windows.

## Desktop and other devices

Windows.

## Health score

82/100 (Excellent), based on 3 of 4 factors.
- Maintained: 100 (last commit 20 days ago)
- Popular: 59 (911 GitHub stars)
- Easy to install: 75 (5 install platforms, install notes, Docker image)

## Links

- Docker Hub: https://hub.docker.com/r/fosrl/newt
- Documentation: https://docs.pangolin.net/manage/sites/understanding-sites
- desktop: https://github.com/fosrl/newt/releases/latest
- Kubernetes (Helm): https://artifacthub.io/packages/helm/fosrl/newt
- Proxmox: https://community-scripts.github.io/ProxmoxVE/scripts?id=newt
- TrueNAS: https://apps.truenas.com/catalog/newt/
- Unraid: https://ca.unraid.net/apps/newt-1c63wgx00z7pmt?q=Newt
- Official website: https://pangolin.net
- GitHub: https://github.com/fosrl/newt

## Common questions

### Should I use the Newt template for a new deployment?

For new deployments, the recommendation is to use the Pangolin Site template with the Pangolin CLI rather than the Newt template. Newt acts as the tunneled gateway to your local network.

### What must I configure before Newt can start a tunnel?

Provide the server endpoint, connector ID, and secret using flags or a config file. If any of those values are missing or wrong, Newt cannot start the tunnel.

### Can Newt expose local services behind CGNAT without opening router ports?

Yes. Self-hosting Pangolin with Newt can expose home services over the internet without opening router ports or publishing your home IP. It also avoids CGNAT limitations.

### How do remote users authenticate for access?

Users connect with their existing identity. Pangolin enforces identity- and context-aware rules for zero-trust access to specific applications.

---
Source: Our Local Host (https://ourlocalhost.com/app/560/newt), the self-hosted and open-source app directory.