Syncthing in docker + Raspberry Pi 4 + Synchronize from everywhere

Hello everybody,

I succeeded to install Syncthing in docker on my Raspberry Pi 4 with OMV 5. It works perfectly between the server and my computer.

Now I'd like to keep on synchronizing files when I'm not at home (at work for exemple).

I think it's possible but I don't know how. I read things about LetsEncrypt, Nginx... I created a domain on duckdns, but I don't really understand how to use LetsEncrypt or Nginx with Syncthing to synchronize from everywhere...

Could someone help me?

Thanx in advance.

When I’m home syncing files between my laptop and the rpi4 is ok.

Now how syncing files between the rpi4 and another computer at work?

Thanx

Quote from macom

These links might point you in the right direction.

https://blog.linuxserver.io/20…rypt-nginx-starter-guide/

https://docs.linuxserver.io/general/swag

Please note that swag and letsencrypt are more or less the same thing.

https://blog.linuxserver.io/2020/08/21/introducing-swag/

Display More

Thanx for the docs!

I read it twice but I understood it partially. So I want your expert analysis just to know if I did things correctly.

I'm going to detailed my work now :

After reading the docs I decided to use SWAG container in my docker compose to install Syncthing. Here is the Stack I used in Portainer:

Quote

---

version: "2.1"

services:

  syncthing:

    image: ghcr.io/linuxserver/syncthing

    container_name: syncthing

    hostname: syncthing #optional

    environment:

- PUID=1000

- PGID=100

- TZ=Europe/Paris

    volumes:

- /srv/dev-disk-by-label-WD8To/appdata/syncthing:/config

- /srv/dev-disk-by-label-WD8To/Syncthing:/data1

ports:

- 8384:8384

- 22000:22000

- 21027:21027/udp

    restart: unless-stopped

  swag:

image: linuxserver/swag

    container_name: swag

    cap_add:

- NET_ADMIN

    environment:

- PUID=1000

- PGID=100

- TZ=Europe/Paris

- URL=**********.duckdns.org

- SUBDOMAINS=wildcard

- VALIDATION=duckdns

- DUCKDNSTOKEN=**************************************************

    volumes:

- /srv/dev-disk-by-label-WD8To/appdata/swag:/config

ports:

- 443:443

restart: unless-stopped

Display More

As you can see I used Duckdns as authorization method.

I forwarded port 443 in my web router.

The stack installed without error and I had got two new containers : "swag" and "syncthing" which are working together (if my understanding of the docs is correct).

Then I renamed syncthing.subdomain.conf.sample to syncthing.subdomain.conf in appdata/swag/nginx/proxy-confs/ and modified it like this:

Quote

## Version 2020/12/09

# make sure that your dns has a cname set for syncthing and that your syncthing container is not using a base url

server {

listen 443 ssl;

listen [::]:443 ssl;

server_name syncthing.*;

include /config/nginx/ssl.conf;

client_max_body_size 0;

# enable for ldap auth, fill in ldap details in ldap.conf

#include /config/nginx/ldap.conf;

# enable for Authelia

#include /config/nginx/authelia-server.conf;

location / {

# enable the next two lines for http auth

#auth_basic "Restricted";

#auth_basic_user_file /config/nginx/.htpasswd;

# enable the next two lines for ldap auth

#auth_request /auth;

#error_page 401 =200 /ldaplogin;

# enable for Authelia

#include /config/nginx/authelia-location.conf;

include /config/nginx/proxy.conf;

resolver 127.0.0.11 valid=30s;

set $upstream_app syncthing;

set $upstream_port 8384;

set $upstream_proto https;

proxy_pass $upstream_proto://192.168.1.44:$upstream_port;

}

}

Display More

As you can see I put yellow font color to indicate the changes. But I don't know here if the changes are correct. The address is my NAS address where OMV is installed.

Thanks to changes, I could access to the Synchting GUI of the NAS using https://syncthing.*********.duckdns.org.

I add a username and a password to access the GUI.

After that I installed the syncthing client on my Mac. And I shared a folder between my Mac and my server (using Show ID to accept new Remote Devices in the web GUI).

I succeeded to share and sync files between my Mac and my NAS on the same network.

Then I wanted to know if I could do the same things on different networks, so i stopped my Mac wifi and I shared my internet phone to connect the Mac. The NAS was always on my router network.

I tried to make changes in the Mac shared folder (add files, delete files) and it seemed that files were added or deleted also on the folder NAS.

So to resume, I think I did it! All seems to work. But... although i understand why I can reach the server GUI, I don't understand why the files syncs between the server and the MacBook when the two are on different networks.

So now my question is : does my work seem to be good for experts? Am i well protected ? Is it a risk that somebody could access to my data?

Thanx in advance.

N.B: English is not my native language so I hope all was clear for you...

Ok,

The new question is : is Fail2ban automatically activated or do I have to activate myself? How configure it?

For the moment the only strong password I use is to access the web GUI.

Thanx

Hi Agricola,

Ok what you say makes sense.

So I tried to reinstall the docker container without SWAG, and files sync when my two devices are on different networks.

So it is much easier than I thought at the beginning! As we say in France "Why do easy when you can do difficult?" (I don't know if it is well traduced )

In fact I just want a personal cloud, without using Google, Apple or others... I want to save my files in case of drive failure...

At the beginning, when I created my NAS, I discovered Nextcloud, so I tried it, and abandoned it because of some issues (and there were too much applications in it I didn't use). Next I discovered Seafile which seemed to be a good solution for what I want. But I never succeeded to install it (I didn't find any official Seafile container for Rpi4).

Finally I found Syncthing. Now that it seems to work, I hope I won't have issues with it...

Thanx for your help!

sieben

In fact Syncthing suits perfectly now for my needs.

I’d really want to try Seafile once, just to see... but only if I can install it easily in a docker container.

But thanx for your answer to this thread.

Agricola

Quote from Agricola

SWAG does include reverse_proxy.conf files for Syncthing. Why? I don’t see why. All of the reverse_proxy files that I have used have worked without a hitch super easily. It’s great to be able to access Airsonic or Navidrome from a remote location on someone else’s machine, but I can’t see why anyone would want to do that with Syncthing, or if it’s even possible.

I can answer : I used reverse proxy with syncthing once to share folders and files on someone’s else’s machine. Very useful...