I think Pangolin works a bit differently... Correct me if I'm wrong...
Where headscale is a coordination server for a wireguard mesh, pangolin is a reverse proxy server that connects to the backend services via wireguard tunnels
I did manage to get it to work, but I recall it took me a while. I have several devices connected to it now though. I'm keenly looking forward to the autogroup:self ACL support so I can set up sensible ACLs and share my net with some mates - I only have my own devices on it right now.
Anything I can share that might help your understanding?
I bought a modern MSI gaming laptop with awesome on-paper specs and they did something fucky such that the keyboard doesn't work until about kernel v6.7. The keyboard. Wtf.
I imagine this process is more about ensuring the employee is the one entering the new password, rather than the malicious actor - which would easily be possible if a simple password reset email was sent out.
Mary wishes you to know that nothing is happening, everything is fine