this post was submitted on 27 Sep 2025
59 points (98.4% liked)

Selfhosted

51807 readers
704 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
ruud@lemmy.world
Loki@lemmy.world
CannaVet@lemmy.world
devve@lemmy.world
HybridSarcasm@lemmy.world
HybridSarcasm@lemmy.hybridsarcasm.xyz
59
Suggestions to have a home server VPN and and Mullvad at the same time? (lemdro.id)
submitted 14 hours ago* (last edited 6 hours ago) by Xylight@lemdro.id to c/selfhosted@lemmy.world
22 comments fedilink hide all child comments
 

I set up Wireguard on my phone, server, and computer to let my phone access my home network when I'm outside of it.

It works for the most part, but the inconvenient thing is that on Android you can only have 1 VPN running at a time. I want to use Mullvad VPN for the rest of my network connections for privacy.

I could make a single Wireguard config that defines 2 peers to connect to mullvad and my home VPN at the same time, but by doing this, I lock myself to a single server without the benefits of being able to swap servers at the same time.

Locking myself to a single mullvad server results in:

  • less privacy, since my IP is more static
  • inability to switch to bypass a VPN block

On desktop, I can have multiple wireguard VPNs at once, but if I have both running at the same time, then my LAN is accessed over the home VPN which is routed through Mullvad VPN. It goes

Computer -> Mullvad server -> Home VPN -> Home server

which is pretty wasteful.

Additionally, I'd prefer not to not do something like: Phone -> Home VPN -> Mullvad server -> destination, as my upload speed is pretty bad and this would throttle every non-local connection

What options do I have?

you are viewing a single comment's thread
view the rest of the comments
[–] acid_falcon@lemmy.world 1 points 12 hours ago (2 children)

This is so close to what I need. Unfortunately I have a self hosted bitwarden, and when the app is installed it doesn't auto fill passwords in apps to the other account

[–] AbsolutelyNotAVelociraptor@sh.itjust.works 1 points 32 minutes ago

Okay so... what about using tailscale? You set as exit node your server, which is configured with gluetun to connect to a VPN (or ideally, it's online through a router that has itself a VPN for all the connections). Then you connect through tailscale to your homeserver and exit the internet through it (which is already under a VPN).

[–] AtariDump@lemmy.world -3 points 8 hours ago (2 children)

Why not just pay for Bitwarden.

[–] Wispy2891@lemmy.world 1 points 1 hour ago

Even if using their servers, it still can't access apps inside a work profile

[–] acid_falcon@lemmy.world 3 points 5 hours ago (1 children)

Uh. You know you're responding in a self hosting community right? Should I explain why we're all here?

[–] AtariDump@lemmy.world 0 points 4 hours ago (1 children)

I do, and the point still stands. If this is something vital to you, why not let someone else be responsible for security/hosting/issues/etc.

[–] acid_falcon@lemmy.world 2 points 4 hours ago

Alright, I'll entertain this a little. Besides the one issue that I just brought up, there are no other issues. I host a dozen other things, and the VM I have it on is sandboxed besides the wireguard tunnel, so security isn't a problem.

The better question, is why not self host?