Cloud Linux VPS - Extending Docker from the Cloud home lab (Via VPN) reddit / selfhosted ---------------------------------------------------------------------- noaccess · 2023-11-25 01:34 I have had a NAS running docker with various container, mainly RR content but I just purchased a very cheep ubuntu running docker (managed via portainer) VPS over the cloud. My NAS CPU/RAM is fairly limited and I would like to offload some resources to this cloud instance. Is there any good documentation on establishing a VPN for local traffic to my network? I have Wireguard running on my Unifi UDM and I am thinking this is the first step for linking the virutal cloud server. Thanks! ---------------------------------------------------------------------- Senkyou · 2023-11-25 04:43 Yep. Install a client with a config generated from your WG server. Or go tailscale. It's the current king of easy. ---------------------------------------------------------------------- szakes1 · 2023-11-25 07:02 Read about site-to-site VPN configuration, it's what you're looking for. ---------------------------------------------------------------------- bethfreeman913 · 2023-11-25 10:10 you should check out the WireGuard documentation, it's pretty straightforward to set up with your Unifi UDM. Once you have your VPN connection established, you can easily route your local traffic to your new cloud VPS. Good luck! ---------------------------------------------------------------------- PovilasID · 2023-11-25 14:41 I have a setup where Wireguard docker container that is connected to my local network and if I use any other container to get local access I use \`network\_mode: service:wireguard-container\` for that remote container have the same access as my VPN container. This has pros and cons. Major pro that the host machine has no access to my network, so it works as regular server. Cons are that if I want to expose say a web panel for one of my local services I have to apply proxy settings to the VPN container and if you use a multiple copies of the same container that does not allow to change default port... you get collisions. ---------------------------------------------------------------------- noaccess · 2023-11-25 15:15 I think this is pretty much what I am looking for. I dont see a big need to have the host access the local network as everything I am using is in docker containers. I tried getting wireguard running on the host and a container and kept getting errors like the one below when trying to start wireguard ​ RTNETLINK answers: Operation not supported Unable to access interface: Protocol not supported AI also ran sudo modprobe wireguard which gave this modprobe: FATAL: Module wireguard not found in directory /lib/modules/4.15.0-20-generic Any details on how you got yours going? ---------------------------------------------------------------------- PovilasID · 2023-11-25 15:35 chem... look into \*arr download clients docker compose file for inspiration. ---------------------------------------------------------------------- chk86 · 2023-11-25 16:52 I'm not sure what NAS you're running, but my NAS is a Synology 220+ and does not natively include the wireguard module. Adding it is a bit tricky. I ended up setting a raspberry pi running wireguard. ---------------------------------------------------------------------- noaccess · 2023-11-25 20:55 i got tailscale up, pretty easy. Whats the best way to get tailscale on my home docker enviorment? It is running on a western digital NAS. I can run it as a docker container but then would only that one container be accessible to and from the vpn? Would I have to install tailscale on the NAS itself? I dont know if that is possible with the type of OS. ---------------------------------------------------------------------- Senkyou · 2023-11-25 20:57 If you put it on the host all containers will be able to use it. If you don't, it's a lot more work to make it accessible to each container. What OS is your NAS running? ---------------------------------------------------------------------- noaccess · 2023-11-25 21:10 its a WD PR4100. The general linux installer does not work saying it cant determine the linux version. ---------------------------------------------------------------------- Senkyou · 2023-11-26 15:05 Then you may want to look into exit nodes as well. It can solve this issue for you. They have documentation on the Tailscale site.