this post was submitted on 09 May 2026
35 points (97.3% liked)

Selfhosted

59063 readers
428 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

  7. No low-effort posts. This is subjective and will largely be determined by the community member reports.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
35
VPN Tradeoffs (lemmy.ca)
submitted 1 day ago* (last edited 12 hours ago) by eightys3v3n@lemmy.ca to c/selfhosted@lemmy.world
 

What is everyone else using for VPN solutions and what are the trade offs?

I want a VPN to access all my personal devices and use services like Syncthing. I use it on my phone so it can't use ungodly amounts of idle data.

I looked at Netbird but found the idle data usage almost 1GB per few days using JetBird with Lazy connections. I tried the default app but it makes me SSO login every day or two, it wouldn't stay connected, and it still used a reasonable amount of idle data.

I looked at Tailscale but I'm not going to lock access to all my devices behind a Google account login or some other third party service login for no reason. It seems like hosting my own auth server is too much additional risk as well. I tried self hosting headscale which worked well except that I have no decent front end to easily add devices. I have to log into a terminal, then execute docker commands which was a huge pain in the ass. I didn't even touch on any of the firewalling or routing that can be done because it was so much more complex in headscale then in a web interface. I tried hosting two or three headscale front ends but couldn't get one working that supported most of the available feature set. Usually I was given generic connection errors with no clear way to diagnose or clear troubleshooting steps so after a few hours I moved on.

Edit 2026-05-10:
Thank you for all the feedback.

Will try disabling expiry on SSO login for my phone via Netbird official app.
Will look into Pangolin.
May try Headplane UI for Headscale again though lower priority than Netbird because it's fully open source.

you are viewing a single comment's thread
view the rest of the comments
[–] Sickday@kbin.earth 3 points 1 day ago (1 children)

personally I just use headscale with tailscale clients and mullvad vpn via wireguard on the control server. there's a bit of systemd magic required to make sure wg-quick starts before headscale does. dns is setup via a pihole device and I just point headscale's config at that device for dns. it's a pretty simple setup, but I have no issue doing everything via cli so this works well for me.

[–] eightys3v3n@lemmy.ca 1 points 12 hours ago (1 children)

:P
I hadn't even considered running not one, but three VPNs and chaining them together for different functionalities.

[–] Sickday@kbin.earth 1 points 12 hours ago (1 children)

I'm only using 1 vpn provider (mullvad) and using a wireguard config for 1 location. Headscale provides my mesh network controller, and pihole is a dns server. Not sure how you came to that conclusion

[–] eightys3v3n@lemmy.ca 1 points 6 hours ago

How are you using Headscale, with a thirdparty VPN? I can understand Mullvad might have a Wireguard config option?