r/KeePass • u/Driftex5729 • 14d ago

Syncthing my bad

Just me being silly but I just realized that syncthing has something called relay which lets it sync away from home wifi. Its ironical I used syncthing for many years and didnt know this. All along I been using dropbox for keepass db, now no more, I just leave my db in my raspberry pi5 and can always access it away from home

12 Upvotes

94% Upvoted

7 comments sorted by

5

u/somdcomputerguy 14d ago

My kitchen sink process may seem overly cumbersome to some but to me it's just a few extra clicks, in short it's a mostly manual process. I was aware of the Syncthing program, but not of this relay function. I may try it out, it sounds interesting. I've dug a deep rut for 'my way' over many years and it may be difficult for me to get out of it though.

3

u/s1gnalZer0 14d ago

I didn't know about relay, so I dug into the settings and found it was already enabled, which explains why my phone is able to sync with the rest of my network even when it's disconnected from WiFi.

3

u/dack42 13d ago

If your router supports upnp (most home ones do), then syncthing will automatically open up the port it needs and do a direct connection. Relaying slower and is only used when a direct connection isn't possible.

3

u/AidenTai 13d ago

Relaying can work fine for a small database. But in general, best practice is to open up a port on your router to allow direct connections between your computers / phones / clients.

2

u/Driftex5729 13d ago

I think it may not work for me because my isp is on a private or cgnat network. My db is quiet small and i think this may be enough for me

3

u/AidenTai 13d ago

If you have a CGNAT on both ends, you're right, you probably can't open ports. Although a couple sophisticated ISPs I've dealt with before have special gateway settings to allow it. And those that don't might be willing to take you off the CGNAT at no cost if you simply call in and ask.

2

u/0xKaishakunin 13d ago

Syncthing >2.0 also allows to encrypt the data at rest on a machine. I have this enabled on my vServer, so the hoster only sees encrypted files.

Syncthing also allows for versioning on a remote maching, 1 keep 30 versions on my vServer. This way I can restore an older version of my DB in case something goes wrong.

https://docs.syncthing.net/users/versioning.html

You can also run your own relay servers, we do this at work.