Running Syncthing on a VPS

2023-05-30T00:00:00+00:00

I've been going down the self-hosting rabbit hole recently and decided to try out Syncthing</a> as a way of syncing notes across my devices. I decided to run a node on a VPS so that I would have one node running 24/7 that my devices can sync to. This guide will help you set up Syncthing on a VPS and secure it using ufw</a> and fail2ban</a>. This guide will only use the command line (no web GUI).</p>

Installing</h2>

The installation process varies depending on which OS you are running on the server but most common Linux distros should have a version of Syncthing packaged in the default repositories. We are also going to install fail2ban</code> for security.</p>

For Ubuntu or Debian server:</p>

$</span> sudo apt install syncthing fail2ban</span></span></code></pre>
For Arch:</p>
$</span> sudo pacman</span> -S</span> syncthing ufw fail2ban</span></span></code></pre>
For Fedora:</p>
$</span> sudo dnf install syncthing ufw fail2ban</span></span></code></pre>Security</h2>
Disclaimer</h3>
I am not a security expert. Do your own research before following these instructions.</p>
Enable fail2ban</code></h3>
All you have to do to enable fail2ban is run</p>
$</span> systemctl enable fail2ban</span></span>
$</span> systemctl start fail2ban</span></span></code></pre>Opening ports on VPS</h3>
The ports we are going to need open for Syncthing are 22000 and 21027/udp. Your VPS provider should have instructions on opening ports.</p>
Setting up ufw</code></h3>
ufw</code> (uncomplicated firewall) is an easy-to-use firewall tool that we will use to drop all incoming traffic on ports other than the Syncthing ports. We can allow traffic on Syncthing ports by running</p>
$</span> sudo ufw allow syncthing</span></span></code></pre>
If you are using SSH to access your VPS it is also important that your open the SSH port so you don't get locked out. To do this, run sudo ufw allow ssh</code>.</p>
Configuration</h2>
To generate a Syncthing config on the server, run</p>
$</span> syncthing generate</span></span></code></pre>
This should output a device ID, make sure to save this for later. I will refer to this as SERVER_ID</code> from now on.</p>
Connecting a device</h3>
These next instructions will show you how to connect a device, such as a laptop or desktop computer, to the server. First, make sure Syncthing is running on both the device and the server. Start Syncthing on the server by running the following two commands:</p>
$</span> systemctl enable syncthing@USER.service</span></span>
$</span> systemctl start syncthing@USER.service</span></span></code></pre>
where USER</code> is replaced by your username.</p>
First, we will need the device ID of the device. Run syncthing -device-id</code> to get it. I will refer to this as LOCAL_ID</code> from now on. On your local device, run</p>
$</span> syncthing cli config devices add</span> --device-id</span> LOCAL_ID</span></span></code></pre>
and on your local device run</p>
$</span> syncthing cli config devices add</span> --device-id</span> SERVER_ID</span></span></code></pre>
To configure the server to auto-accept folders from the local device, run the following command on the server:</p>
$</span> syncthing cli config devices LOCAL_ID auto-accept-folders set</span> true</span></span></code></pre>
Now you can add a folder from your local device. On the local device, run</p>
$</span> syncthing cli config folders list</span></span></code></pre>
and copy the folder ID of the folder you want to add. Then run</p>
$</span> syncthing cli config folders FOLDER_ID devices add</span> --device-id</span> SERVER_ID</span></span></code></pre>
to add the folder.</p>
Credits</h2>

Thanks to jonny-exe</a> for creating this gist</a>.</li>
This superuser post</a> was also great.</li>
</ul>

- self-hosting

Running Syncthing on a VPS

Security</h2>

Disclaimer</h3> I am not a security expert. Do your own research before following these instructions.</p>

Opening ports on VPS</h3> The ports we are going to need open for Syncthing are 22000 and 21027/udp. Your VPS provider should have instructions on opening ports.</p>

Credits</h2> Thanks to jonny-exe</a> for creating this gist</a>.</li> This superuser post</a> was also great.</li> </ul>

Disclaimer</h3>
I am not a security expert. Do your own research before following these instructions.</p>

Opening ports on VPS</h3>
The ports we are going to need open for Syncthing are 22000 and 21027/udp. Your VPS provider should have instructions on opening ports.</p>

Credits</h2>

Thanks to jonny-exe</a> for creating this gist</a>.</li>
This superuser post</a> was also great.</li> </ul>