Configuring SyncThing Untrusted (Encrypted) Devices

[@LAWRENCESYSTEMS]

Open Source File Sync: Getting Started Tutorial With Syncthing on Windows & Linux kzbin.info/www/bejne/hWayZZSgfLyNsJo docs.syncthing.net/branch/untrusted/html/users/untrusted.html ⏱️ Timestamps ⏱️ 0:00 Synthing Intro 3:24 Setup prerequisites 5:15 Adding untrusted devices 9:48 Untrusted Device Data Encryption 12:42 Adding another trusted node 17:17 Password Config Documentation

[@alexk7110]

I'm so glad to be subscribed to your channel. I've been happily using Syncthing for more than 5 years now and I'm pretty sure this new feature would pass me by if it wasn't for this video. Keep up the great work.

[@LAWRENCESYSTEMS]

🙂

[@drumpf4all]

I've been waiting for this for years. Thanks.

[@АПологетТВ]

BTW, I already found the practical use of this new feature. I recently brought my old HDD to my local church and put it into their own backup server (that already had Syncthing installed for backing up church staff PCs). Then I configured it as untrusted Syncthing node and implemented a reliable encrypted off-site backup of my most important data from my home Synology server to my church Syncthing node :)

[@FirstLast-zz5cn]

Great video! One thing that is missing is how would we make use of the data on the untrusted device, if our trusted one is lost or damaged. How would we restore(decrypt) the data...

[@succubiuseisspin3707]

This would be a nice way to sync all your backup-to-disk files to the cloud as a disaster recovery plan. All you need to get it back is the password and in the meantime you can be sure that nobody else can access your data.

[@edwinrosales6322]

Great feature and great video! Much appreciated!

[@richardwatkins6725]

great video as ever Lawrence and great tool for the toolkit

[@gnul]

Passwords usually aren't secure, they should get rid of the them, it's not needed, they should just generate a key per untrusted node per directory and share that keys with all trusted devices which have the directory unencrypted, so they can access the data on untrusted devices as well. No user interaction needed and much more secure.

[@SoftBreadSoft]

.... so send the key over an (usually) unencrypted network to be stored on an untrusted server. You do not want to access the encrypted data on an untrusted device. That is the whole point of encryption

[@gnul]

@@SoftBreadSoft The connection is already encrypted.

[@ChaceBonanno]

So the folder gets synced to the untrusted device but the folders encrypted on that one? Can I use this is to sync a folder in my Google Drive folder but encrypted, so that those files are backed up on my Google Drive but only an encrypted version, yet still synced?

[@BrazenNL]

Could you make a video about what to do on the UDMP? I know how to port forward, but what is the safest way to do so?

[@nhojmedina22]

Nice excited to test this

[@martinb.5193]

great demo, thank you!

[@davidespada01]

can we use SyncThing with Google drive i just want to backup stuff to GDrive nothing fancy

[@jeffluo9591]

Is there a way to sync my OneNote content across devices with Syncthing and ditch the Microsoft server?

[@Maisonier]

Great video as usual !!!

[@mohamedatef8424]

Hello tom , thanks for demo , -i have question about encryption so its safe to use it for 2 site sync i men not cloud it will be safe ?! - and can i change port of gui or any port for best bracts ?

[@mirkoregina8733]

Hi, I have a distro based on DEBIAN Q4OS I need to connect 4 hard disks with windows and mac backups and I would like to create a server with raid sharing of all hard disks and including a continuous and incremental backup also of smartphones and ipads in the family ... I was thinking about nextcloud and openmediavault but something else would probably be missing to perfect everything and example the folder search on different file systems I forgot ... I also have nvidia shield which can act as a nas if it would be enough without paying plex .Advice? Thank you.

[@cal3751]

I'm a little late to the party but I am considering SyncThing for SynologyAndroid syncing. A problem I have run into with other syncing solutions is that the Android device loses date & time metadata. I.e. The date from Windows is lost and Android shows the date/time of the transfer. If this true with SyncThing?

[@LAWRENCESYSTEMS]

I have not tested it on Android in quite a while

[@xFrozenxSnowx]

Would this be a good solution to send offsite backups easily to the remote location and not worry about encrypting it yourself? I understand there is a risk of ransomware encrypting the source syncthing files thereby destroying the offsite backup. Just trying to see what is a good solution to run to backup important files between friends' servers but are easy to manage and doesn't give access to other people's files

[@mariuszkrynsky2004]

I forgot my password to gui syncthing on my PC. Is anyone knows how to reset it.

[@fmslickful]

cool terminal

[@alkeryn1700]

if you were to manually delete the encrypted file, would that delete it from the trusted nodes ?

[@LAWRENCESYSTEMS]

Yes, but you don't know what files you are deleting.

[@alkeryn1700]

@@LAWRENCESYSTEMS ah too bad, yea it would be nice if the logs were cryptographically signed so that if the "untrusted" device was compromised it couldn't mess with your trusted ones in that way. i think i'm probably gonna write my own software on top of libp2p then thank you ! :)

[@StahlFirearmsNo2]

Do you have any videos on conditioning a server closet?

[@LAWRENCESYSTEMS]

Nope, just put in a mini split air conditioner.

[@mrrogers4591]

You can put in a thermostat controlled exhaust fan to exhaust hot air and pull in cooler air from air conditioned space. I set my closet thermostat at 5F warmer than max set temp of main thermostat.

[@ivanjuarez1412]

Dumb question what is the software he is using for the diagram?

[@hogify]

it's "app dot diagrams dot net" (replace dot with "." obv..)

[@berndeckenfels]

If the source folder has file revisions turned on, can I replicate them to the untrusted in a way it is good for backups?

[@LAWRENCESYSTEMS]

As I said in the video, only use revisions on the unencrypted nodes.

[@berndeckenfels]

@@LAWRENCESYSTEMS yes but the question is does it push multiple revisions into the encrypted store

[@LAWRENCESYSTEMS]

@@berndeckenfels No

[@AaronStuder]

2 years later and still in beta...

[@lolololowbx280]

Hi tom any update on unifi dpi, some folks at reddit say now you could see dpi counter in time frame manner, still much more useful than old unifi dpi

[@darokis]

Is there a way to update syncthing in TrueNAS jail to version 1.17 I am still at 1.13 after trying to do Iocage update.

[@LAWRENCESYSTEMS]

Manually build the jail and don't rely on the plugin that is outdated. kzbin.info/www/bejne/aX6uhoOAmtBlfdk

[@darokis]

@@LAWRENCESYSTEMS thanks Tom. That is exactly what i did a couple months ago. however when click update in TrueNAS GUI it is not updating to latest version. I tried "iocage upgrade SyncThing" via command and it is asking me for target release. what would be a target release ?

[@darokis]

or where can i find it ?

[@ierosgr]

I tried to sync 2 shared folders used by a dc and none of the security principled synced to the other side. I think it takes the as owner the user who controls syncthing.... I thought it would be more like robocopy If what I noticed is true and cant be changed by properties what is the point of synchronizing folders with different credentials from source to destination

[@gnul]

What is when you have a Documents folder and you have your own devices A, B and C, obviously a send and receive directory... Then there is device Z, which maybe is owned by a friend, you don't trust people, not even your parents, so, the owner of Z might steal your stupidly created passwords.txt file which is within your documents and contains e.g. your Bitcoin Secrets. So what do you do, you use this feature of Untrusted Devices. But there might be still a problem, the directory is marked send and receive, cause you have your own devices ABC. So Z might delete the encrypted files, what could go wrong? You might loose your passwords.txt. Nobody read it, but nobody includes you, so your Bitcoin are gone, congrats. Maybe before Z is deleting the files, hesheit changes all files like 20 times, so all versions gets overridden, if you use versioning. Soo, are there things Syncthing might do to prevent that? Sadly there is no option to say send only with device x... But in encrypted case, it would be technically possible to do send receive, when ABC are validating the files, and disallow changes by the filesystem of Z, only when valid things are pushed to Z.... I mean A B offline, C pushes changes to Z, C offline, A online, A gets changes from Z, but validates signatures and integrity of them, that the changes are made by C and doesn't screw up everything, or something like that. Does Synchting do something like that?^^ Or could Z corrupt files of ABC?