this post was submitted on 06 Apr 2024
16 points (86.4% liked)

Selfhosted

38768 readers
369 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 1 year ago
MODERATORS
16
submitted 4 months ago* (last edited 4 months ago) by [email protected] to c/[email protected]
 

I'm trying to figure out how can I install a VPN on truenas that hides my IP. I have tailscale running so I can remotely access Nextcloud and manage it doesn't hide my IP. Wouldn't really throught on using it but my country recently published a law to lick Big Corpo in the ass better, the fines are pretty big so that's why I'm interested.

Can I install a commercial VPNs? Such as Proton VPN or Mulvad?
Thought on installing a VM with a qbitorent and VPN but I don't have enough RAM and I can't upgrade it right now.

Platform: Truenas-scale

top 19 comments
sorted by: hot top controversial new old
[–] [email protected] 6 points 4 months ago

The Truecharts version of Qbittorrent has gluetun baked in as an option already. Initial configuration can be a bit of a pain depending on your VPN provider, but it seems to work beautifully once set up.

[–] [email protected] 5 points 4 months ago (2 children)
[–] [email protected] 1 points 4 months ago

Using gluetun to connect my containers to Mullvad I'm getting 60+% of my bare network speeds.

Another option that doesn't achieve that performance is torproxy which can achieve a similar result.

[–] [email protected] 1 points 4 months ago (4 children)

Using gluetun to connect my containers to Mullvad I'm getting 60+% of my bare network speeds.

Another option that doesn't achieve that performance is torproxy which can achieve a similar result.

[–] [email protected] 2 points 4 months ago (1 children)

I'm getting 60+% of my bare network speeds.

Check if your CPU usage is at 100%, its probably too much for your CPU just like mine. Getting 180-200 Mbps using gluetun and 320 without a VPN

[–] [email protected] 4 points 4 months ago (1 children)

But gluetun is the way 😉

[–] [email protected] 1 points 4 months ago

I agree gluetun is de way 😂 unfortunately my CPU is nowhere near 100%

[–] [email protected] 2 points 4 months ago

I can max out with qbit and ptotonvpn

[–] [email protected] 1 points 4 months ago

I don't think that'll be a problem. I got a good CPU. The connection will is slowing me down

[–] [email protected] 1 points 4 months ago

Could be the VPN provider or the NAS (cpu)

[–] [email protected] 3 points 4 months ago

Wait for the next month release of scale, it very surprisingly comes with jails. You install a Linux distro in a jail then run gluetun+qbit via docker

[–] [email protected] 2 points 4 months ago (1 children)

Truenas scale is just Debian isn't it? You shouldn't have any trouble with it, then. Though if you're using other network stuff like tailscale I would determine how the two are going to work together.

Personally I run everything under docker (not on truenas scale though) and I recently switched to gluetun and it worked perfectly the first time.

[–] [email protected] 1 points 4 months ago

Truenas scale uses kubernets. Tailscale is more like a tunnel to my home servers so I can access the ports therefore the apps

[–] [email protected] 2 points 4 months ago (1 children)

I had someone help me set something similar up but I don't remember the exact details. Something like making the qBit user unable to use any interface but the TUN.

[–] [email protected] 1 points 4 months ago (1 children)

Yeah qbitorrent has this in their settings iirc.

Do ifconfig before VPN, then after. Identify what your VPN connection is (likely TUN0). Then you tell qbitorrent to ONLY use the VPN one.

That way if you suddenly lose VPN service it won't fall back to your actual IP. (This is how the guy that hacked ubiquity got caught).

[–] [email protected] 1 points 4 months ago (1 children)

I know about that setting, but this was different. It relies on Linux permissions. Like you have a dedicated 'user' for running qBit, and that user has no privileges for any network interface other than the VPN.

[–] [email protected] 1 points 4 months ago (1 children)

Sounds like network namespaces.

[–] [email protected] 1 points 4 months ago

Yeah that rings a bell. Weirdly I woke up this morning to an abuse complaint from my hosting provider after years of no issues.

[–] [email protected] 1 points 4 months ago* (last edited 4 months ago)

Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I've seen in this thread:

Fewer Letters More Letters
IP Internet Protocol
NAS Network-Attached Storage
VPN Virtual Private Network

3 acronyms in this thread; the most compressed thread commented on today has 5 acronyms.

[Thread #662 for this sub, first seen 7th Apr 2024, 10:05] [FAQ] [Full list] [Contact] [Source code]