• 0 Posts
  • 15 Comments
Joined 2 years ago
cake
Cake day: April 27th, 2022

help-circle





  • I don‘t know what specifically you would like to know and what your background is, so I will just elaborate a bit more.

    The basic idea is that the VPS, which is not behind a NAT and has a static IP, listens on a port for WireGuard connections. You connect from the NAS to the VPS. On the NAS you configure the WireGuard connection with “PersistentKeepalive = 25”. That makes the NAS send keepalive packets every 25 seconds which should be enough to keep the connection alive, meaning that it keeps a port open in the firewall and keeps the NAT mapping alive. You now have a reliable tunnel between your VPS and your NAS even if your IP address changes at home.

    If you can get a second (public) IP address from your provider you could even give your NAS that IP address on its WireGuard interface. Then, your VPS can just route IP packets to the NAS over WireGuard. No reverse proxy needed. You should get IPv6 addresses for free. In fact, your VPS should already have at least a /64 IPv6 network for itself. For an IPv4 address you will have to pay extra. You need the reverse proxy only if you can‘t give a public IP address to your NAS.

    Edit: If you have any specific questions, feel free to ask.










    • Plex and Jellyfin for movies and TV shows. I want to switch from Plex to Jellyfin but it is not quite there yet. It‘s very little effort to keep Jellyfin running in parallel though. I am keeping it around to regularly compare the two and re-evaluate.
    • Tube Archivist for archiving and watching YouTube videos.
    • Miniflux for reading feeds.
    • Nextcloud, mainly for calendars and contacts; occasionally for sharing files with others.
    • Syncthing for syncing files.
    • Financier for budgeting.
    • Paperless-ngx for managing documents.
    • Qbittorrent for downloading and sharing Linux ISOs.
    • Prowlarr for searching Linux ISOs.
    • Copyparty for sharing Linux ISOs with friends.
    • Shaarli for saving bookmarks.
    • Jekyll for statically generating my personal blog.
    • Caddy as HTTP server / reverse proxy for all of the above. Automatically provisions certificates from Let‘s Encrypt.
    • PostgreSQL as database for Nextcloud and Miniflux.
    • Simple Nixos Mailserver for emails with Postfix, Dovecot and rspamd.
    • Dehydrated for getting certificates from Let‘s Encrypt for the mail server.
    • Btrbk and Restic for backups.

    Most of this stuff runs on my server at home (ASRock J4105-ITX, 8 GB RAM , 250 GB SSD, 18 TB HDD). The mail server and the blog run on a cheap VPS (1 vCPU, 2 GB RAM, 20 GB SSD). Both servers run NixOS.