Need help deciding on a VPN. I'm currently looking at PiVPN and (Headscale/tailscale). reddit / selfhosted ---------------------------------------------------------------------- marckau · 2023-12-08 17:45 I have a Raspberry Pi 4 (8GB) running only Paperless-NGX. My goal is to access not only Paperless but also other self-hosted items on my older Raspberry Pi remotely (apple time machine, etc). I'd like to preface that my wife is not tech-savvy. I will handle all the install and that part can be complicated but day-to-day use of the system should be seamless (hence why I'm looking at tailscale). Both systems work well with Pi-hole, which I plan to add as well. While I've searched, there are very few comparisons of PiVPN and Tailscale. Lastly, if it matters I would like to make my home the exit node. I welcome any and all feedback. ---------------------------------------------------------------------- thekrautboy · 2023-12-08 17:52 > I'd like to preface that my wife is not tech-savvy. I will handle all the install and that part can be complicated but day-to-day use of the system should be seamless (hence why I'm looking at tailscale). Then yes, use Tailscale (with Headcale as controlserver if you want to 100% selfhost the entire thing). And very simple to make it run as subnet router exitnode, so your wife etc can connect to the TS and everything acts as if they are local clients in your home network, no TS apps required to be installed on everything, just a single node. /r/Tailscale ---------------------------------------------------------------------- AnApexBread · 2023-12-08 17:59 >While I've searched, there are very few comparisons of PiVPN and Tailscale. That's because neither of them are actually VPNs. Pi-VPN is a script that will install either Wireguard or OpenVPN and Tailscale is a GUI for managing it's Wireguard. After the install both of them are going to be 1 click connect. With either method your Wife will simply have to push 1 button to turn the VPN on when she needs to. The real difference comes with how you install everything. ---------------------------------------------------------------------- marckau · 2023-12-08 18:05 Okay that makes alot more sense. Another question then if I use PiVPN and wiregaurd. Once I setup my wifes phone its just turn on and off VPN thats all? ---------------------------------------------------------------------- AnApexBread · 2023-12-08 18:12 Yup. As long as your wireguard host can reach the resources then so can any device connected through it. So all the apps and stuff on your wife's phone will work. The more technical answer is: When installing and setting up wireguard you an specify what traffic goes through it and what doesn't. The client will see Wireguard as a gateway and as long as the IP of where the client is going is in through that gateway then it will send the traffic through Wireguard. A typicaly Wireguard config uses [0.0.0.0/0](http://0.0.0.0/0) as the allowed IP range, which just means 'Send everything through Wireguard' but you could narrow it down to something like [192.168.0.1/24](http://192.168.0.1/24) or even a single IP if you want her to have access to only 1 resource. ---------------------------------------------------------------------- marckau · 2023-12-08 20:22 Thank you one last question would you recogmend PiVPN or wg-easy? ---------------------------------------------------------------------- AnApexBread · 2023-12-08 20:24 Pivpn uses wg-easy. Or at least it used to. I recommend pivpn all the time because it makes the setup process super simple. ---------------------------------------------------------------------- zfa · 2023-12-08 20:57 Just use pi-vpn and have your wife's config route **only** your home subnet(s) over the connection. Configure her phone to either leave the connection always on (if she's on Android) or have it set to auto-connect when you leave your home ssid (iOS). ---------------------------------------------------------------------- DazzlingAlfalfa3632 · 2023-12-09 01:06 Actually the VPN (Tailscale) would be connected all the time, all she’d have to do is click to change the gateway. ---------------------------------------------------------------------- HoustonBOFH · 2023-12-09 15:35 When you take the GUI front ends out, there are actually very few choices. OpenVPN, Wireguard, OpenConnect (an Anyconnect clone, Ocserv) or SoftEther. Anyconnect defaults to 443, which is nice to get traffic passed, but a challenge if you also want to host websites. All of them have a client that is one click connect. ---------------------------------------------------------------------- bacitoto-san · 2023-12-11 09:08 Yeah and you can add it as a [hotbar shortcut](https://i.imgur.com/VuJqdqA.png). I use it all the time