Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Build your own private WireGuard VPN with PiVPN

jeffgeerling.com

Post reply on HN
Print view View original

161–170 of 235 posts

Re: Build your own private WireGuard VPN with PiVPN

#161

Post by joshbaptiste »

bombcar wrote: post #153
ye-olde-sysrq wrote: post #89

I run wg-easy https://github.com/WeeJeWel/wg-easy for this sort of thing. I use the docker container, and it's great. "Just works". Also, unrelated, I just decided I don't like the sentiment of "PiMyProjectName" branding. I know most projects don't just run on a Pi, and that the intent is to say "you can self-host thing", but at this point if you want to run a home server sort of thing, just buy some cheap 100-200 do…

If you need Pi like but not specifically a Pi check out the Rock5B: https://www.sevarg.net/2023/01/01/battle-of-the-boards-2023/

Alternative SBCs I've been looking at are the Orange PI 5, Khadas VIM1S, NanoPi R6S

https://hackerboards.com/

Re: Build your own private WireGuard VPN with PiVPN

#162

Post by BrandoElFollito »

lxgr wrote: post #138
BrandoElFollito wrote: post #102

Earlier quoted context omitted.

> GDPR EU laws and some others explicitly say that they can be enforced to entities outside the EU They can tell whatever they want, but it would need to be a US court (in that case) who would do the litigation. Which they won't. > The US does do that kind of thing though. As a dev, break some law, step foot in the US for a conference, get arrested yes, this is why I mentioned that my point is only for local business…

> They can tell whatever they want, but it would need to be a US court (in that case) who would do the litigation. Which they won't. That's a pretty incomplete view of how jurisdiction works. You do probably need a US court ruling to enforce a claim against a US entity – but if that entity has any EU subsidiaries or assets, you can bet that European courts will come after those. > Blocking for security is another thi…

> That's a pretty incomplete view of how jurisdiction works. You do probably need a US court ruling to enforce a claim against a US entity – but if that entity has any EU subsidiaries or assets, you can bet that European courts will come after those.

I am not sure you read my post in details - I explicitly mentioned that I am talking about local services, without any international footprint. And mentioned that in case of this footprint - yes, they will be sought after.

This is also exactly waht the US does to enforce their "extraterritoriality"

Re: Build your own private WireGuard VPN with PiVPN

#163

Post by KaiserPro »

unethical_ban wrote: post #44
cyberpunk wrote: post #27

Earlier quoted context omitted.

A little trick for this is to listen on udp/53 which is almost always unblocked, even before captive portals

Actually, I found ATT blocking inbound port 53 to my home. Maybe udp 443 could work?

yeah high rates of data over port 53 tends to trigger a lot of firewalls. I've never had much success with it.

443 is much more likley to be let past, with the popularity of QUIC.

Re: Build your own private WireGuard VPN with PiVPN

#164

Post by KaiserPro »

chaxor wrote: post #24

Base wireguard is pretty easy to setup, especially with wg-quick, so idk why anything would be required to make it easier. Also, Rosenpass is quite great and easy to use, which really improves the security further. Hopefully Rosenpass will become part of the base implementation at some point.

for one or two devices, yes.

But after that, key and config management becomes a bit more challenging.

I have a bout 14 devices on a VPN, so that uses ansible to make sure all the keys are where they should be, and can be rotated if needs be.

Re: Build your own private WireGuard VPN with PiVPN

#165

Post by RockRobotRock »

moffkalast wrote: post #111
Entinel wrote: post #39

Earlier quoted context omitted.

They are an American business that does not deal with other countries outside North America. Why would they care about the world outside of "ol' Merica?"

Well if they don't want the rest of the world's money, that's alright. Someone else will get it instead.

Do you know what home depot is? They're a store, that you have to like, go to.

Re: Build your own private WireGuard VPN with PiVPN

#166

Post by 0xcde4c3db »

manmal wrote: post #160
ye-olde-sysrq wrote: post #89

I run wg-easy https://github.com/WeeJeWel/wg-easy for this sort of thing. I use the docker container, and it's great. "Just works". Also, unrelated, I just decided I don't like the sentiment of "PiMyProjectName" branding. I know most projects don't just run on a Pi, and that the intent is to say "you can self-host thing", but at this point if you want to run a home server sort of thing, just buy some cheap 100-200 do…

Indeed. You can build a power saving PC with eg a used Fujitsu D3401 board and a used Skylake or Kaby Lake CPU, or just get a used Esprimo P756/757 tower (E90+ for lower idle power) for 100 bucks or less. Those should idle at ca 15W (without spinning HDDs). And you can put in 4+ SATA HDDs, which is way more reliable than using an USB enclosure. Works great as an Ubuntu/ZFS server or with unRAID. Beats any Synology NA…

> just get a used Esprimo P756/757 tower (E90+ for lower idle power) for 100 bucks or less

Are these still readily available somewhere? All I can find are a tiny handful of $300+ listings and RAM upgrade spam.

Re: Build your own private WireGuard VPN with PiVPN

#167

Post by mgbmtl »

BrandoElFollito wrote: post #162
lxgr wrote: post #138

Earlier quoted context omitted.

> They can tell whatever they want, but it would need to be a US court (in that case) who would do the litigation. Which they won't. That's a pretty incomplete view of how jurisdiction works. You do probably need a US court ruling to enforce a claim against a US entity – but if that entity has any EU subsidiaries or assets, you can bet that European courts will come after those. > Blocking for security is another thi…

> That's a pretty incomplete view of how jurisdiction works. You do probably need a US court ruling to enforce a claim against a US entity – but if that entity has any EU subsidiaries or assets, you can bet that European courts will come after those. I am not sure you read my post in details - I explicitly mentioned that I am talking about local services, without any international footprint. And mentioned that in cas…

They're maybe local services, but they're not local businesses. c.f. my post :)

And they can be enforced not only from assets, but also from travel or various financial tools at their disposal. (it would be surprising, but for many businesses, it's not worth the hassle)

Re: Build your own private WireGuard VPN with PiVPN

#168

Post by momirlan »

darkwater wrote: post #53
otterpro wrote: post #4

Before going to a long 3 month trip to Asia last year, I installed WireGuard on my Raspberry Pi 1 (original model B from 2012) which was running at home in US. I found PiVPN to be the easiest way to install Wireguard. I didn't know if I even needed a VPN but I was glad, and I was able to use internet as if I were at home. It was weird, but a lot of sites are blocked oversea, even though it shouldn't. For example, I c…

I also did something similar, plus all my home automation which is 98% local-first|only. My trip was just 3 weeks but on the first day leaving, between one plane and another, my power company had a 4hours extraordinary maintenance cut, my UPS didn't last enough and with that blackout the RPi SD card died, and I was locked out my LAN for all the trip. Lesson learned: configure the UPS to communicate with the servers a…

run linux from SSD, can get a cheapo one for less than $25 these days. the SATA to USB adapter will probably cost as much. no more SD issues

Re: Build your own private WireGuard VPN with PiVPN

#169

Post by manmal »

0xcde4c3db wrote: post #166
manmal wrote: post #160

Earlier quoted context omitted.

Indeed. You can build a power saving PC with eg a used Fujitsu D3401 board and a used Skylake or Kaby Lake CPU, or just get a used Esprimo P756/757 tower (E90+ for lower idle power) for 100 bucks or less. Those should idle at ca 15W (without spinning HDDs). And you can put in 4+ SATA HDDs, which is way more reliable than using an USB enclosure. Works great as an Ubuntu/ZFS server or with unRAID. Beats any Synology NA…

> just get a used Esprimo P756/757 tower (E90+ for lower idle power) for 100 bucks or less Are these still readily available somewhere? All I can find are a tiny handful of $300+ listings and RAM upgrade spam.

I bought a P765 tower last week for EUR 90 (incl shipping) off a German eBay listing (commercial, so I can even deduct VAT). Not sure about other parts of the world, sorry!

Re: Build your own private WireGuard VPN with PiVPN

#170

Post by abap_rocky »

twodave wrote: post #75

If you're going this far, might as well do as the author did and add a pi-hole to the mix, issue some credentials to your phone and block ads and/or other stuff via DNS everywhere you go. I also use this to remote into my work computer from wherever I am, using my travel laptop, an iPad or even just my cell phone.

This is precisely what I do and it's great. Built myself a workstation desktop last year that I wanted to access remotely via an older laptop and it's worked beautifully, even when I was out in Europe for a week last summer.
Post reply on HN