I was that guy. And then ended up with that career partly because of it.

Yeah, but if you were doing lxc + docker per container you might as well use this oci as lxc method. I think both methods are silly, but that’s just my opinion.

How does that make it easier for maintenance?

You have each “docker” container in there own lxc running docker? That’s a silly way to do it if I’m understanding correctly. You’re adding overhead to containers for little to no benefit. You could put them all in the same lxc or Proxmox supports OCI containers natively now.

Do you not understand what a suite of tools is? It’s a curated collection of tools that have been chosen to work together. You’re describing the reasons why Pangolin is in fact a full suite. You’re right, Pangolin is the bit that orchestrates them and brings them together with an easier way to manage them. That’s what a suite of tools does.

Pangolin uses gerbil with newt for those wireguard tunnels. That’s a massive improvement already. It also adds a bunch more features like vpn, you can crowdsec, and more that I don’t use. To say it’s debatable if it’s a suite of tools is just wrong.

I’ve set it up next to my NPM and it’s more complicated, but so much more capable. Traefik is what it uses to proxy things. You’re comparing a full suite of tools with just one piece.

Free vps in oracle cloud with Pangolin. Never have to worry about explaining VPNs.