It’s not really clear exactly what you want.
When you’re at home, and for services running on your home server, it you want everything to go through the remote wireguard server then that’s achievable.
However, if you want to be able to access services running on your home server, while you’re not at home, via that remote wireguard server, that generally requires port forwarding which commercial providers generally don’t offer.
Can you clarify ?
This is true. I’m pretty sure they acknowledge this transparently.
It’s helpful to hilight the common distro’s but it’s not an endorsement.
I don’t use tailscale or gluetun. They’re probably good options I just wasn’t aware of them when I was setting up and what I’m doing now has worked great for years.
My home server has 4 containers you’re interested in:
wireguard_out
this is a wireguard instance which is connected to a mullvad server on a paid subscription.
For any containers I want to “use this vpn” I just attach them to this container’s stack. it’s one of the network options in docker. Notably these containers include qbittorrent and squid (below).
Wireguard configurations look unapproachable at first but it’s one of those things where messing around with it for an hour or so will serve you well for a lifetime. There’s not heaps more to learn. LLMs are great at writing wireguard configurations.
squid
This is a http proxy attached to the wireguard_out stack. You didn’t ask about this and may not need it but I’ve found it super useful.
One of the private torrent trackers I use will only let your torrent client connect to the tracker from the same IP address you used to download the torrent file - so when browsing their website you need to use the vpn connection. Using squid makes this really easy.
In firefox (librewolf) I have foxyproxy addon which allows you to specify a proxy to use for specific urls. So when I navigate to mytracker.com firefox automatically routes the connection through squid > wireguard > mullvad on my server.
wireguard_in
This handles my “road warrior” set up so I can access services on my home server while I’m away.
This container has a separate docker network to most of my other containers, in the ip subnet 10.0.2.0/24.
traefik
this is a reverse proxy
it’s on the same network as wireguard_in with the ip address 10.0.2.2
I’ve configured a public dns “A” record *.home.mydomain.com to point to 10.0.2.2, the private ip address.
The configurations I use for the wireguard connections on my phone or other devices only route requests for this subnet through the wireguard connection. so if I’m away from home and my phone requests lemmy.world that goes through the public network, but if I request photon.home.mydomain.com that goes through my vpn. This way you don’t need to turn off / on the wireguard connection.
I use file based configurations for traefik. It can do docker label configurations but they’re just awful IMO. The yaml configurations are much more readable and manageable.
As an aside, you can replicate this structure many times on one host. I have several incoming wireguard networks for different purposes. You configure the traefik container to sit across all the networks, like a spider at the centre of a web.
I’d never heard of the XY Problem before.
I get it - big opportunity to waste lots of time.
However, while I’ve never posted a question on stack overflow or similar, a common complaint is that it’s a toxic community because of responses related to this problem - a user asks about X and is accused of asking about Y and most responses undermine the premise being question Z.
I have been fiddling with trying to build a Dockerfile and container
You’re laboring under the common misconception that enticing windows and macos users is the objective. It’s not.
For anyone involved in any FOSS project (linux or otherwise), your objective is to make your project the best it can be. In this context the endless variety of distributions and their philosophies is a great strength.
I love watching politicians try to understand the internet.
VPNs have loads of vanilla use cases.
It would be infinitely more productive to regulate the predatory practices of stream providers and reduce the incentive for piracy.
Sync is one of those things that seems like it should be trivial but is actually super complicated.
Sure does sound pretty toxic.
The term has had so many definitions its not really meaningful.
I just message my partner like a troglodyte.
If the only thing stopping your partner from cheating is location sharing then you’ve got problems.
Gimp refers to sexual exploitation. Often the “exploited” is a willing participant but often not. Regardless it’s “funny” the way a 12 year old finds drawing dicks on things funny.
Libreoffice only tells geeks exactly what the product is. My team, who uses Libreoffice, couldn’t explain what Libre means, and no one can pronounce it.
Being quick and catchy is a pretty low bar. No one knows or cares about the story behind Lemmy. It sounds silly in conversation.
Opensource projects often have terrible names.
Gimp, libreoffice, lemmy, Apache… just the ones that come to mind.
You missed the part where they lie about dropping the database.
LOL. No “we” didn’t. A few idiots did.
These large tech companies have e focus groups and can do extensive research on how their markets will react to these changes.
Any analysis on social media just doesn’t have access to that data.
I think i might just go live in the woods.
My partner describes her bowel movements to me when she returns from her daily ablutions.
It just nuts that anyone would want this.
This question comes up every other week. I reject the premise that “more users” is a commonly held objective.
For most linux / OSS projects the objective is to be the best the project can be. Having an active community is usually part of that but “more users” is a low priority.