I set up Wireguard on my phone, server, and computer to let my phone access my home network when I’m outside of it.
It works for the most part, but the inconvenient thing is that on Android you can only have 1 VPN running at a time. I want to use Mullvad VPN for the rest of my network connections for privacy.
I could make a single Wireguard config that defines 2 peers to connect to mullvad and my home VPN at the same time, but by doing this, I lock myself to a single server without the benefits of being able to swap servers at the same time.
Locking myself to a single mullvad server results in:
- less privacy, since my IP is more static
- inability to switch to bypass a VPN block
On desktop, I can have multiple wireguard VPNs at once, but if I have both running at the same time, then my LAN is accessed over the home VPN which is routed through Mullvad VPN. It goes
Computer -> Mullvad server -> Home VPN -> Home server
which is pretty wasteful.
Additionally, I’d prefer not to not do something like: Phone -> Home VPN -> Mullvad server -> destination, as my upload speed is pretty bad and this would throttle every non-local connection
What options do I have?
tailscale has Mullvad add-on, but it’s a paid add-on, you can self-host tailscale with headscale
“WG Tunnel” on f-droid lets you define a config/native for either mobile or wifi, whichever you want.
two configs on both? It does that. A config on one and nothing on the other? It does that. It swaps whenever your phone moves from mobile to wifi or vice versa.
if neither is selected, it considers it “both”.
Thank you! I have been wanting this and had no clue it already existed!
Now if only it were possible to have a VPN active on wireless Android Auto.
Edit: WG Tunnel is compatible with Android Auto. To enable compatibility, use the app’s split tunneling feature to exclude the Android Auto app from the tunnel.
Why don’t you just use Shelter to create a work profile on your phone? The work profile can have a second vpn connection. I do this with my homeserver. The apps that connect to the home server are installed in the work profile so they have permanent access to the homeseraer while the normal profile is on my external vpn.
This is so close to what I need. Unfortunately I have a self hosted bitwarden, and when the app is installed it doesn’t auto fill passwords in apps to the other account
Why not just pay for Bitwarden.
Uh. You know you’re responding in a self hosting community right? Should I explain why we’re all here?
I do, and the point still stands. If this is something vital to you, why not let someone else be responsible for security/hosting/issues/etc.
Alright, I’ll entertain this a little. Besides the one issue that I just brought up, there are no other issues. I host a dozen other things, and the VM I have it on is sandboxed besides the wireguard tunnel, so security isn’t a problem.
The better question, is why not self host?
