Docudjeex
File & share

Pingvin

Install Pingvin Share, a self-hosted file sharing platform to send files securely without relying on WeTransfer or Google Drive.

Pingvin is a tool for quickly sharing files, similar to WeTransfer. Its many sharing options (password, expiration time, custom link, etc.) make it the ideal tool for sharing files quickly. Pingvin can also create upload requests, i.e. a shareable link you can send to someone so they can upload their files for you to retrieve.

Installation

Deploy the stack

Open Dockge, click compose, name the stack pingvin, then copy-paste this:

compose.yaml
---
services:
  pingvin-share:
    container_name: pingvin
    image: stonith404/pingvin-share
    restart: unless-stopped
    ports:
      - 3600:3000
    volumes:
      - /srv/docker/pingvin/data:/opt/app/backend/data
      - /srv/docker/pingvin/data/img:/opt/app/frontend/public/img
      - /srv/docker/pingvin/uploads:/opt/app/backend/uploads # path to the folder where you want to store files uploaded to pingvin. Change to your preference.
    depends_on:
      clamav:
        condition: service_healthy
    networks:
      - swag

  clamav: #antivirus for the files
    restart: unless-stopped
    image: clamav/clamav
From here on, we assume the network name for Swag is swag_default.
✨ Tip: Add the watchtower label to each container to automate updates.
compose.yaml
services:
  pingvin-share:
    #...
    labels:

      - com.centurylinklabs.watchtower.enable=true
  
  clamav:
    #...
    labels:

      - com.centurylinklabs.watchtower.enable=true
```

Deploy the container and go to http://yourserverip:3600. That's it! Your Pingvin web UI instance is up and running!

Done !

If it fails: check your firewall rules.

Exposing Pingvin with Swag

The whole point of a solution like this is being able to access it remotely, from all your devices. To do this, we'll expose Pingvin through Swag.

📋 Prerequisite:

We assume you have the subdomain pingvin.mydomain.com with a CNAME pointing to mydomain.com in your DNS zone. And of course, unless you're using Cloudflare Zero Trust, port 443 on your router is forwarded to port 443 on your server via NAT rules.

Add Pingvin's network to SWAG

In Dockge, go to the SWAG stack and edit the compose file to add the pingvin network:

compose.yaml
---
services:
  swag:
     container_name: # ...
      # ... 
     networks:             # Connects the container to the custom network 
      # ...           
      - pingvin            # Name of the network declared in the stack
    
networks:                  # Defines the custom network
  # ...
  pingvin:                 # Name of the network declared in the stack
    name: pingvin_default  # Actual name of the external network
    external: true         # States that it's a network to look up externally
From here on, we assume the pingvin network name is pingvin_default. You can verify the connection is working by visiting the SWAG dashboard at http://yourserverip:81.

Redeploy the stack by clicking "deploy" and wait for SWAG to be fully up.

Create the subdomain.conf file

In the Swag folders, create the pingvin.subdomain.conf file.

✨ Tip: you can use File Browser Quantum to browse your files and edit your documents instead of using terminal commands.
Terminal
sudo nano /srv/docker/swag/config/nginx/proxy-confs/pingvin.subdomain.conf

Paste the configuration below:

pingvin.subdomain.conf
## Version 2023/12/19

server {
    listen 443 ssl;
    listen [::]:443 ssl;

    server_name pingvin.*;

    include /config/nginx/ssl.conf;

    client_max_body_size 0;

    #if ($lan-ip = yes) { set $geo-whitelist yes; }
    #if ($geo-whitelist = no) { return 404; }
    if ($geo-blacklist = no) { return 404; }

    # enable for ldap auth (requires ldap-location.conf in the location block)
    #include /config/nginx/ldap-server.conf;

    # enable for Authelia (requires authelia-location.conf in the location block)
    #include /config/nginx/authelia-server.conf;

    # enable for Authentik (requires authentik-location.conf in the location block)
    #include /config/nginx/authentik-server.conf;

    location / {
        # enable the next two lines for http auth
        #auth_basic "Restricted";
        #auth_basic_user_file /config/nginx/.htpasswd;

        # enable for ldap auth (requires ldap-server.conf in the server block)
        #include /config/nginx/ldap-location.conf;

        # enable for Authelia (requires authelia-server.conf in the server block)
        #include /config/nginx/authelia-location.conf;

        # enable for Authentik (requires authentik-server.conf in the server block)
        #include /config/nginx/authentik-location.conf;

        include /config/nginx/proxy.conf;
        include /config/nginx/resolver.conf;
        set $upstream_app pingvin;
        set $upstream_port 3000;
        set $upstream_proto http;
        proxy_pass $upstream_proto://$upstream_app:$upstream_port;

    }
}

Press Ctrl+O, then Enter to save, and Ctrl+X to exit.

Done !

That's it, you've exposed Pingvin!

Protecting Pingvin with Pocket ID

Pingvin supports OIDC natively, so you can require a Pocket ID login before letting anyone share or receive files, instead of (or alongside) the app's own accounts.

Register Pingvin as an OIDC client

Register an OIDC client in Pocket ID named pingvin, with this callback URL:

https://pingvin.yourdomain.com/api/oauth/callback/oidc

Enable Social Login in Pingvin

In Pingvin, go to Administration > Configuration > Social Login and fill in:

FieldValue
OpenID ConnectEnabled
Discovery URIPocket ID's OIDC discovery URL
Scopeopenid email profile groups

Done !

That's it! From now on, when you log in to Pingvin, an "Open ID" button will be available below the login form.

✨ You can use Authentik instead of Pocket ID:
Contributor:Djeex

File Browser Quantum

Install File Browser Quantum, a modernized fork of File Browser, to browse and manage your server files from a fast web interface.

Code-Server

Install code-server to run VS Code in your browser from your homelab, mount folders and expose it securely with SWAG.

Copyright © 2026