Syncthing on Qubes

[helplease]

My question is simple, I want to sync files between a qube and my Android device. How can I set up Syncthing securely? I just want Local Discovery. NAT Traversal, Global Discovery and Relaying will be disabled. Can someone help? Thank you.

[solene]

This can be achieved by setting the IP address of your android phone in the device on the qube, there won’t be any need for discovery as the remote address is known.

The android device will be able to connect back then.

Works fine for me ©

[gonzalo-bulnes]

Have you looked at the community guides @helplease ?

Copy files between smartphone and app-vm via USB or LAN/Internet (syncthing)

how you can copy files between smartphone and app-vm for review and add best set configuration security on Syncthing I will translate this into Arabic after finishing Via USB cable (Preparation steps) On QubesOS from application menu click on creeat qubes vm and choose (on Basic tab) name: phone-vm type: AppVM template: fedora-x ''x is fedora vergion has installed on your qubesOS" network: none [ ] Lanch settings after after creation “check on it” and click OK on settings phone-vm cho…

Split-syncthing

Syncthing is an awesome piece of software used to keep files in sync across multiple devices using end-to-end encryption without requiring port forwarding or leaving files on a third-party server. This guide is intended to allow syncing of files in netvm-less qubes across two (or more) devices running Qubes. This could be used to sync bookmarks for split-browser, or for keeping a KeepassXC file up to date. Requirements You will need to install syncthing in the template :exclamation:This reli…

[KitsuneNoBaka]

Unfortunately first guide is… more like leaflet that don’t give you answer. At least for LAN/Internet syncthing.
It’s “you install syncthing on phone, install syncthing in qube and it works” - no it’s not.
For now “global discovery” only works.
My network is router->switch->lan qube os laptop and router->wifi phone.
Local discovery works on macbook, works on win pc but not on qube os laptop.
On some older topics floats some scripts to open ports but they don’t work - makes errors.
If I set static IP to phone and without internet connection then local discovery don’t work. Don’t have WAN connection to router now to test with internet.

[solene]

if you don’t want local discovery and faster speed, you need the non qubes os client to have a static ip, and set that static ip into the remote within syncthing running in qubes

[KitsuneNoBaka]

Oh, but I want local discovery only which doesn’t work.

[solene]

this does not work as the local network of a qube is by default sys-firewall

You may want to run a local relay on your LAN, it would work.

[sync]

Is sharing files through local network is more secure (not talking about privacy) than through internet?

I use OpenWrt router and I checked box about isolating clients/preventing client-to-client communication, because my LAN may have some not so secure devices.

I believe I wouldn’t be able to use Syncthing with such setup. Is it actually dangerous to allow devices to communicate through LAN? Maybe there is some measures available to limit potential risks? I need only to be able to share files and nothing more.