Homelab

22 readers

1 users here now

Rules

Be Civil.
Post about your homelab, discussion of your homelab, questions you may have, or general discussion about transition your skill from the homelab to the workplace.
No memes or potato images.
We love detailed homelab builds, especially network diagrams!
Report any posts that you feel should be brought to our attention.
Please no shitposting or blogspam.
No Referral Linking.
Keep piracy discussion off of this community

founded 1 year ago

MODERATORS

communick@selfhosted.forum

rglullis@communick.news

Wireguard: OpnSense or Unraid? (alien.top)

submitted 1 year ago by CrapuleJack@alien.top to c/homelab@selfhosted.forum

2 comments fedilink hide all child comments

I have this very small homelab with OpnSense as firewall / router and an Unraid server behind it. The Unraid server is mostly used as a NAS but also hosts some docker containers.

Im thinking of setting up a Wireguard VPN. Both OpnSense and Unraid allows to set that up.

Looks to me like the Unraid setup might be easier / cleaner involving docker, but makes more sense to me to install this on the firewall, just a gut feeling...

Any advices? should i setup Wireguard on the OpnSense box or the Unraid box?

top 2 comments

sorted by: hot top controversial new old

[–] sparlocktats@alien.top 0 points 1 year ago (1 children)

I'd say set it up on the OPNsense machine. It already handles all your firewall/NAT stuff so it'll be easier to manage. With the wireguard service on the unraid, you'll have two machines to configure.

[–] CrapuleJack@alien.top 1 points 1 year ago

Thanks for you advise.

I must say since I asked I did set up using docker/unraid and the package wg-easy.

It could not have been more simple and does exactly what i need; i did not have to touch the firewall besides opening a port.

Granted my need is ultra simple and if i was to have any more complexity (lets say more than a few other users for example) it would be totally worth learning opnsense a little more and do the setup there. wg-easy does what it says on the tin but does not allow for much customisation... wich is the point really.

Again thanks for the answer