add images

packages/docusaurus/docs/01-overview.md

@@ -19,7 +19,7 @@ Pangolin’s architecture consists of the following components, each designed to
 
 ### [**Traefik**](https://github.com/traefik/traefik) (Reverse Proxy)
    A high-performance, modular reverse proxy that routes requests to private resources. Traefik is widely adopted, and its plugin system allows further customization and security enhancements. For example:
-    - Out-of-the-box compatibility with plugins like Fail2Ban or CrowdSec.
+    - Out-of-the-box compatibility with plugins like [Fail2Ban](https://plugins.traefik.io/plugins/628c9ebcffc0cd18356a979f/fail2-ban) or [CrowdSec](https://plugins.traefik.io/plugins/6335346ca4caa9ddeffda116/crowdsec-bouncer-traefik-plugin).
     - Enhanced security via our custom Traefik plugin Badger, which acts as an authentication bouncer.
 
 ### [**Badger**](https://github.com/traefik/badger) (Traefik Plugin):
@@ -35,5 +35,5 @@ Pangolin’s architecture consists of the following components, each designed to
 ## System Diagram
 
 <p align="center">
-    ![graphic](@site/static/img/Fossorial_Overview.drawio.svg)
+    ![graphic](@site/static/img/overview/system-diagram.svg)
 </p>

packages/docusaurus/docs/02-Getting Started/01-quick-install.md

@@ -38,7 +38,7 @@ The installer will prompt you for the following basic information:
 
 You'll need to configure the admin user. This is the first user in the system. You will log in initially with this user.
 
-1. **Admin Email**: Defaults to `admin@yourdomain` but can be customized
+1. **Admin Email**: Defaults to `admin@yourdomain.com` but can be customized
 2. **Admin Password**: Must meet these requirements:
    - At least one uppercase letter
    - At least one lowercase letter
@@ -102,4 +102,4 @@ After successful installation:
 
 - The installer checks for an existing configuration and won't overwrite it if found
 - Docker installation is optional if already present
-<!-- - You can pull the latest and rerun the install script to update the containers! -->
+<!-- - You can pull the latest and rerun the install script to update the containers! -->

packages/docusaurus/docs/03-Pangolin/overview.md

@@ -1 +1,111 @@
 # Overview
+
+Pangolin is a self-hosted tunneled reverse proxy management server with identity and access management, designed to securely expose private resources through encrypted [WireGuard](https://www.wireguard.com/) tunnels running in user space. With Pangolin, you retain full control over your infrastructure while providing a user-friendly and feature-rich solution for managing proxies, authentication, and access, and simplifying complex network setups, all with a clean and simple UI.
+
+## Preview
+
+<img src={require("@site/static/img/pangolin/overview/preview.png").default} alt="Preview"/>
+
+_Sites page of Pangolin showing multiple site-to-site tunnels connected to the central server._
+
+## Key Features
+
+### Reverse Proxy Through WireGuard Tunnel
+
+- Expose private resources on your network **without opening ports**.
+- Secure and easy to configure site-to-site connectivity via a custom **user space WireGuard client**, [Newt](https://github.com/fosrl/newt).
+- Built-in support for any WireGuard client.
+- Automated **SSL certificates** (https) via [LetsEncrypt](https://letsencrypt.org/).
+
+### Identity & Access Management
+
+- Centralized authentication system using platform SSO. **Users will only have to manage one login.**
+- Create organizations, each with multiple sites, users, and roles.
+- **Role-based access control** to manage resource access permissions.
+- Additional authentication options include:
+  - Email whitelisting with **one-time passcodes.**
+  - **Temporary, self-destructing share links.**
+  - Resource specific pin codes.
+  - Resource specific passwords.
+
+### Simple Dashboard UI
+
+- Manage sites, users, and roles with a clean and intuitive UI.
+- Monitor site usage and connectivity.
+- Light and dark mode options.
+
+### Easy Deployment
+
+- Docker Compose based setup for simplified deployment.
+- Future-proof installation script for streamlined setup and feature additions.
+- Run on any VPS.
+- Use your preferred WireGuard client to connect, or use Newt, our custom user space client for the best experience.
+
+### Modular Design
+
+- Extend functionality with existing [Traefik](https://github.com/traefik/traefik) plugins, such as [Fail2Ban](https://plugins.traefik.io/plugins/628c9ebcffc0cd18356a979f/fail2-ban) or [CrowdSec](https://plugins.traefik.io/plugins/6335346ca4caa9ddeffda116/crowdsec-bouncer-traefik-plugin), which integrate seamlessly.
+- Attach as many sites to the central server as you wish.
+
+## Screenshots
+
+Pangolin has a straightforward and simple dashboard UI:
+
+<div align="center">
+  <table>
+  <tr>
+      <td align="center"><img src={require("@site/static/img/pangolin/overview/sites.png").default} alt="Sites Example" width="200"/></td>
+      <td align="center"><img src={require("@site/static/img/pangolin/overview/users.png").default} alt="Users Example" width="200"/></td>
+      <td align="center"><img src={require("@site/static/img/pangolin/overview/share-link.png").default} alt="Share Link Example" width="200"/></td>
+    </tr>
+    <tr>
+      <td align="center"><b>Sites</b></td>
+      <td align="center"><b>Users</b></td>
+      <td align="center"><b>Share Link</b></td>
+    </tr>
+    <tr>
+      <td align="center"><img src={require("@site/static/img/pangolin/overview/auth.png").default} alt="Authentication Example" width="200"/></td>
+      <td align="center"><img src={require("@site/static/img/pangolin/overview/connectivity.png").default} alt="Connectivity Example" width="200"/></td>
+      <td align="center"></td>
+    </tr>
+    <tr>
+      <td align="center"><b>Authentication</b></td>
+      <td align="center"><b>Connectivity</b></td>
+      <td align="center"><b></b></td>
+    </tr>
+  </table>
+</div>
+
+## Workflow Example
+
+### Deployment and Usage Example
+
+1. **Deploy the Central Server**:
+
+   - Deploy the Docker Compose stack containing Pangolin, Gerbil, and Traefik onto a VPS hosted on a cloud platform like Amazon EC2, DigitalOcean Droplet, or similar. There are many cheap VPS hosting options available to suit your needs.
+
+2. **Domain Configuration**:
+
+   - Point your domain name to the VPS and configure Pangolin with your preferred settings.
+
+3. **Connect Private Sites**:
+   - Install Newt or use another WireGuard client on private sites.
+   - Automaticlaly establish a connection from these sites to the central server.
+4. **Configure Users & Roles**
+   - Define organizations and invite users.
+   - Implement user- or role-based permissions to control resource access.
+
+**Use Case Example - Bypassing Port Restrictions in Home Lab**:  
+ Imagine private sites where the ISP restricts port forwarding. By connecting these sites to Pangolin via WireGuard, you can securely expose HTTP and HTTPS resources on the private network without any networking complexity.
+
+**Use Case Example - IoT Networks**:  
+ IoT networks are often fragmented and difficult to manage. By deploying Pangolin on a central server, you can connect all your IoT sites via Newt or another WireGuard client. This creates a simple, secure, and centralized way to access IoT resources without the need for intricate networking setups.
+
+## Similar Projects and Inspirations
+
+Pangolin was inspired by several existing projects and concepts:
+
+- **Cloudflare Tunnels**:  
+  A similar approach to proxying private resources securely, but Pangolin is a self-hosted alternative, giving you full control over your infrastructure.
+
+- **Authentic and Authelia**:  
+  These projects inspired Pangolin’s centralized authentication system for proxies, enabling robust user and role management.