From 89b4a4bd7d6496b3b08096cf2a704d38855e843f Mon Sep 17 00:00:00 2001 From: Owen Date: Mon, 20 Jul 2026 11:52:49 -0400 Subject: [PATCH] Add new cli args --- docs/pangolin.md | 1 + docs/pangolin_config_set.md | 2 ++ docs/pangolin_up.md | 2 ++ docs/pangolin_up_client.md | 2 ++ 4 files changed, 7 insertions(+) diff --git a/docs/pangolin.md b/docs/pangolin.md index c570a4a..c852567 100644 --- a/docs/pangolin.md +++ b/docs/pangolin.md @@ -12,6 +12,7 @@ Pangolin CLI * [pangolin apply](pangolin_apply.md) - Apply commands * [pangolin auth](pangolin_auth.md) - Authentication commands +* [pangolin auth-daemon](pangolin_auth-daemon.md) - Start the auth daemon * [pangolin config](pangolin_config.md) - View and edit CLI configuration * [pangolin down](pangolin_down.md) - Stop a connection * [pangolin list](pangolin_list.md) - List resources and other items from the server diff --git a/docs/pangolin_config_set.md b/docs/pangolin_config_set.md index 82e3a1a..9e88750 100644 --- a/docs/pangolin_config_set.md +++ b/docs/pangolin_config_set.md @@ -13,6 +13,8 @@ Supported keys: up.tunnel_dns up.upstream_dns up.override_dns + up.match_domains_dns + up.prefer_local_routes Examples: pangolin config set up.tunnel_dns true diff --git a/docs/pangolin_up.md b/docs/pangolin_up.md index 36f8237..6d29953 100644 --- a/docs/pangolin_up.md +++ b/docs/pangolin_up.md @@ -24,12 +24,14 @@ pangolin up [flags] --id string Client ID (optional, will use user info if not provided) --interface-name name Interface name (default "pangolin") --log-level string Log level (default "info") + --match-domains strings FQDN wildcard patterns (e.g. '*.proxy.internal') to check against local records/upstream DNS; queries for non-matching domains go directly to the system's DNS servers (default: match all domains, or the value from config if set) --mtu int Maximum transmission unit (default 1280) --netstack-dns server DNS server to use for Netstack. This handles DNS resolution outside of the upstream servers. --org string Organization ID (default: selected organization if logged in) --override-dns When enabled, the client uses custom DNS servers to resolve internal resources and aliases. This overrides your system's default DNS settings. Queries that cannot be resolved as a Pangolin resource will be forwarded to your configured Upstream DNS Server. (default true) --ping-interval interval Ping interval (default 5s) --ping-timeout timeout Ping timeout (default 5s) + --prefer-local-routes Add tunnel routes with a high metric so overlapping local/connected routes take precedence (default false) --secret string Client secret (optional, will use user info if not provided) --silent Disable TUI and run silently when detached --tls-client-cert path TLS client certificate path diff --git a/docs/pangolin_up_client.md b/docs/pangolin_up_client.md index e7c1c67..89fcc57 100644 --- a/docs/pangolin_up_client.md +++ b/docs/pangolin_up_client.md @@ -21,12 +21,14 @@ pangolin up client [flags] --id string Client ID (optional, will use user info if not provided) --interface-name name Interface name (default "pangolin") --log-level string Log level (default "info") + --match-domains strings FQDN wildcard patterns (e.g. '*.proxy.internal') to check against local records/upstream DNS; queries for non-matching domains go directly to the system's DNS servers (default: match all domains, or the value from config if set) --mtu int Maximum transmission unit (default 1280) --netstack-dns server DNS server to use for Netstack. This handles DNS resolution outside of the upstream servers. --org string Organization ID (default: selected organization if logged in) --override-dns When enabled, the client uses custom DNS servers to resolve internal resources and aliases. This overrides your system's default DNS settings. Queries that cannot be resolved as a Pangolin resource will be forwarded to your configured Upstream DNS Server. (default true) --ping-interval interval Ping interval (default 5s) --ping-timeout timeout Ping timeout (default 5s) + --prefer-local-routes Add tunnel routes with a high metric so overlapping local/connected routes take precedence (default false) --secret string Client secret (optional, will use user info if not provided) --silent Disable TUI and run silently when detached --tls-client-cert path TLS client certificate path