this post was submitted on 09 May 2026
20 points (95.5% liked)

Selfhosted

59043 readers
375 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

  7. No low-effort posts. This is subjective and will largely be determined by the community member reports.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
ruud@lemmy.world
Loki@lemmy.world
CannaVet@lemmy.world
devve@lemmy.world
HybridSarcasm@lemmy.world
HybridSarcasm@lemmy.hybridsarcasm.xyz
20
VPN Tradeoffs (lemmy.ca)
submitted 16 hours ago by eightys3v3n@lemmy.ca to c/selfhosted@lemmy.world
19 comments fedilink hide all child comments
 

What is everyone else using for VPN solutions and what are the trade offs?

I want a VPN to access all my personal devices and use services like Syncthing. I use it on my phone so it can't use ungodly amounts of idle data.

I looked at Netbird but found the idle data usage almost 1GB per few days using JetBird with Lazy connections. I tried the default app but it makes me SSO login every day or two, it wouldn't stay connected, and it still used a reasonable amount of idle data.

I looked at Tailscale but I'm not going to lock access to all my devices behind a Google account login or some other third party service login for no reason. It seems like hosting my own auth server is too much additional risk as well. I tried self hosting headscale which worked well except that I have no decent front end to easily add devices. I have to log into a terminal, then execute docker commands which was a huge pain in the ass. I didn't even touch on any of the firewalling or routing that can be done because it was so much more complex in headscale then in a web interface. I tried hosting two or three headscale front ends but couldn't get one working that supported most of the available feature set. Usually I was given generic connection errors with no clear way to diagnose or clear troubleshooting steps so after a few hours I moved on.

you are viewing a single comment's thread
view the rest of the comments
[–] Onomatopoeia@lemmy.cafe 1 points 13 hours ago* (last edited 13 hours ago)

Sounds like you're talking about a Mesh VPN.

Syncthing doesn't need a VPN to function - in fact you're better off not using a VPN as it's own rules will see the VPN as a LAN connection and sync data across it when your Syncthing rules exclude using your data connection. Maybe that's what you saw with Netbird's data usage. I'd be really surprised if Netbird itself used any significant data.

I have about 20 sync jobs per phone - some are allowed to use cell data (photos), others aren't. When I enable Tailscale on my phone, Syncthing will try to sync all the jobs because it sees the VPN as a LAN.

I run rooted and use a firewall and block VPN there for Syncthing to prevent this.