this post was submitted on 31 Dec 2025
58 points (98.3% liked)

Selfhosted

61114 readers
1212 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.

  8. AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS
 
  • A different device from your home server?
  • On the same home server as the services but directly on the host?
  • On the same home server as the services but inside some VM or container?

Do you configure it manually or do you use some helper/interface like WGEasy?

I have been personally using wgeasy but recently started locking down and hardening my containers and this node app running as root is kinda...

you are viewing a single comment's thread
view the rest of the comments
[–] sakphul@discuss.tchncs.de 6 points 7 months ago (1 children)

Always in the router if it supports it. If it does not support wireguard I would rather (if you are able and allowed to) replace the router instead of using something else.

[–] piyuv@lemmy.world 7 points 7 months ago (3 children)
[–] dogs0n@sh.itjust.works 2 points 7 months ago* (last edited 7 months ago)

Maybe easier to setup because routers that support vpns come with nice-ish web uis.

That said, if you have a server (pc, pi, etc), setting up wireguard with wg-easy is mostly painless (comes with a nice web ui), so there is no reason to replace your router in this case!

Instead of replacing a router, I'd prefer buying a pi anyways.

Unless you want to route all outbound traffic through a vpn with zero config on devices, I can't see why you'd replace a router.

Final note: most people prefer hosting a vpn on a server, even if their router supports it as far as I'm aware at least (edit: this might be erong judging from the rest of the comments saying they use their router).

[–] Auli@lemmy.ca 1 points 7 months ago

It's my outside device it allows things into my network might as well terminate the VPN there. I mean if my router is down I'm not getting to the VPN endpoint inside my network.

[–] sakphul@discuss.tchncs.de 0 points 7 months ago

For me a similar tasks should be handled by the same device. Network routing and VPN are similar things for me, therefor they are handled by the router.

It also handles VPN connections to other remote locations. So again same things in the same device.

Another benefit (which you can also have on the Server with some additional effort): the router boots up without interaction after a power outage. The Server does not. Them I can connect and unlock (LUKS password) the servers.