Mistborn, a free, self hosted, open source WireGuard server GUI with pi-hole and cockpit built in.

[@DanCalloway]

I have a bare bones (1GB RAM, 25 GB storage space) Linode server in Atlanta, GA which is currently hosting my Wireguard VPN service which I setup manually myself. This Wireguard VPN service is supporting my FerenOS Tower Main PC, my Acer Aspire Laptop, my Dell Latitude laptop, my Apple iPad, and my Apple iPhone 7SE mobile devices. It would have been quite nice to have a GUI interface to accomplish this since I had to do all of the heavy lifting from the Linux terminal on the Linode Server and my client Linux boxes. Great video!

[@parvizhomayun1588]

Hi Dear... Thank you for This Awesome video, And thank you for the beautiful introduction of this great platform... I will eagerly follow your work... Good job! and Great Work...

[@AwesomeOpenSource]

You are most welcome

[@parvizhomayun1588]

@@AwesomeOpenSource Thank you very much for your kindness ... be healthy and successful ...

[@geogmz8277]

Loved this.. I'd love to see your Home Assistant Set Up I'm running HA at home just starting added few things I don't have that many "smart IoTs" devices yet.. But the integration with Mikrotik Routers via API is was got me hooked for presence detection.

[@AwesomeOpenSource]

Not A Federal I’ll be doing a video on it eventually. I’m still learning and trying to add a few things. Mostly I have WiFi switches and plugs. Not too much stuff to put on the system yet. But I’m building up over time.

[@crazycat362]

Bro we have to blow this project up

[@jwcolby54]

Love your series and focus. An ask for myself, I am getting into the raspberry pi, I have two ATM but I would like to get various servers set up in docker wherever possible. For example I already run pihole and dns over https, but it is bare metal. I want to get the same server running wireguard so I can get in from my truck. But I assume it has to install in front of, or point to the pihole / dns server. I want it in a docker container. Then there's NginX. Where does that go and how to hook it up? Running in docker! Etc. Etc. So first, can you please wherever possible discuss doing each thing you discuss in a container, and why you can't use a container if it isn't possible. Next can you discuss how to set up all these really cool tools chained together such that each does it's job and passes control on. Again let me say I love your channel, I am subscribed and I am learning a ton from you. Good job and keep it up!

[@AwesomeOpenSource]

Sorry for the late reply. You're asking a lot of questions. As for pi-hole, you can run that inside mistborn, in fact it installs with Mistborn using the installer I showed. Additionally it's running in a docker container in Mistborn already. The only way to access these items is to be on the Wireguard VPN from Mistborn already, so it passes the requests from your connected machine on the VPN along to pi-hole running under Mistborn. In this case, no need to run NginX as a proxy since the traffic is already being encrypted through the VPN. Does that help?

[@massey93]

Great video! I wonder what i would be like running along side OMV5 on buster.

[@kevinhughes9801]

Good stuff thank you

[@AwesomeOpenSource]

No problem 👍

[@igorminaev7017]

Many thanks for the very useful video! Everything works fine, only can't manage Pihole: the page doesn't open - Bad Gateway

[@AwesomeOpenSource]

Hmmmm. You might post the issue to the gitlab issues.

[@igorminaev7017]

@@AwesomeOpenSource It works completely on Debian 11

[@bridgetrobertson7134]

Couldn't choose a different name, could he? Searching for any info about it only returns info about Sanderson's books and I'm sure Sanderson will sue his ass off as soon as he gets a chance.

[@AwesomeOpenSource]

I presume he's a fan. Want to say someone else brought that up to him at one point on Reddit, and he said he looks back now and wishes he had named it differently.

[@alexeng414]

@@AwesomeOpenSource I can't imagine the series being called any differently xd that is too iconic

[@rogerb6378]

Thank you. I am connected to my wireguard. Now how can I connect to my server e.g. router (192.168.1.1)?

[@AwesomeOpenSource]

Are you wanting to connect the router to the wireguard network, or connect directly to the router through the wireguard network, like to manage the router?

[@franciscoribeirosilva6516]

I have a DNS not found problem. How to solve?

[@AwesomeOpenSource]

So, make sure you use the initial admin config file to connect to the server over the Wireguard connection. If you have that, and still have problems, you may want to ask on the GitLab issues board.

[@Glatze603]

Nice Video, but doesn´t work for me when mistborn is installed on a VPS - no Wireguard-Connection to this server possible, with no machine in my network (A-record and public IP at cloudflare was set). Reconnect with ssh wasn´t possible, too (see the documentation: SSH: If Mistborn is installed over SSH (most common) then an iptables rule is added allowing future SSH connections from the same source IP address. All other external SSH is blocked). Nice idea, but not really usable.

[@AwesomeOpenSource]

Yeah, Mistborn is odd, but for SSH, once it's installed, you have to use the Wireguard connection and creds it sets up for you. You have to setup the admin wireguard config file - this video is fairly old, so it may be out of date as the project has likely changed a good bit over time.

[@MrTubeityourself]

Is this something one can use to mask the IP address for all traffic by routing it all through a vpn service? The doc makes it sound like a good thing that the traffic shows it is coming from his home address

[@AwesomeOpenSource]

This will mask the IP, it will appear to be the IP of the server.

[@MrTubeityourself]

@@AwesomeOpenSource thanks that might work quite nicely.

[@nimijneb]

Install went perfectly, I can access Mistborn when connected to Wireguard. However, I have no access to outside internet. Any tips?

[@AwesomeOpenSource]

Not off the top of my head. You might check his documentation to see if something has changed in the setup process.

[@michaell7511]

Thanks for this tutorial. It's been helpful. One question though: What happens if one is running this on a home PC with a dynamic IP address? Is there a way to use perhaps duckdns to ensure that Wireguard can be reached when one is on the road if IP address changes?

[@AwesomeOpenSource]

You can set the URL and use that with a dynamic IP so the connection isn't trying to be made to the Public IP I suppose. That should work. There may be disconnected times between when the IP changes and when the dynamic service updates.

[@michaell7511]

@@AwesomeOpenSource Thanks for the speedy response. The reason I was asking that is because I have installed this on one of my spare PC at home and it works well while within home network, but Wireguard/internet access is not available outside my home network though I had forwarded the port used by Wireguard on my router. Hence I'm trying to figure out how to use duckdns as external IP. I had set up in the past a Wireguard vpn on lxc Proxmox and used my duckdns in place of my external IP and it works well.

[@AwesomeOpenSource]

@@michaell7511 Let me see if I can do a video on it. I think you'll want to have the duckdns setup to your home public IP first, then run the Mistborn installer afterward. AS one of the steps durin ginstall is entering your domain name. I haven't used DuckDNS, so I might try it out. Seems like it's not self-hosted, but maybe I'm thinking of something else.

[@michaell7511]

@@AwesomeOpenSource That would be awesome if this can be achieved thereby making it truly self-hosted. Thank you sir!

[@amx2311]

Tailscale is a project that allows you to setup wireguard tunnels through an account. The Tailscale service can be set to check for ip address changes.

[@DanAllen1]

Is there a way to expose the Pihole instance to my local network? If I am understanding, this implementation allows for access only from devices within the VPN?

[@AwesomeOpenSource]

Not that I'm aware of, this will only work for devices you connect to your VPN through mistborn. And then those devices, in the default setup, cannot talk to each other. This is intentional in the Mistborn setup.

[@DanAllen1]

@@AwesomeOpenSource Thanks. I do see an option in the GUI to allow clients to talk to each other, not that I need that. Looking in /etc I notice that it doesn't create a PiHole folder, so I'm guessing it is in docker or otherwise emulated. Any harm in adding native PiHole? will it eff with my iptables?

[@AwesomeOpenSource]

@@DanAllen1 You are definitely getting beyond my knowledge at this point. I've asked questions over on the Mistborn gitlab site though, and gotten great responses from the developer. I'd suggest having a chat with him, and even offering to help with any mods you might like to see. Apparently the request to allow devices to talk was one he saw value in, as it came up from me and a viewer way back. So there's room for improvement.

[@LeszekT-IT]

That's a nice project. What i'd like to know is how to configure Mistborn not to route all traffice through the tunnel, but only allow access to the internal network. I know how to configure Wireguard this way, but not Mistborn. I need to because my changes would get overwritten. Maybe someone here knows the answer ?

[@AwesomeOpenSource]

I don't, but I've found the developer of Mistborn to be quite responsive to requests for help in different configs on his Gitlab issues board.

[@janbiker]

rocket chat after install BAD Gateway, not work :(

[@RanjitSingh-wy4ku]

Any Idea on how to resolve this: I am getting following error: Created symlink /etc/systemd/system/multi-user.target.wants/Mistborn-base.servic e → /etc/systemd/system/Mistborn-base.service. Job for Mistborn-base.service failed because the control process exited with err or code. Failed to start Mistborn Base.

[@RanjitSingh-wy4ku]

My iptables executable are in /usr/sbin/iptables instead of /sbin/iptables. any idea to get around this?

[@AwesomeOpenSource]

@@RanjitSingh-wy4ku Sorry, no, but you can ask the Mistborn author on his gitlab. Just create an issue, and he can help I'm sure.

[@RanjitSingh-wy4ku]

Finally able to solve it; If someone else faces this issue: Here is how I resolved it Installed VPS again with ubuntu 18 release (earlier was 20 ); then cd to directory: /sbin sudo apt-get install iptables then run sudo apt-get update && apt-get upgrade commands

[@RanjitSingh-wy4ku]

After complete installation, and setting up the profile. Installed wireguard client on windows machine, after importing the conf file and got successfully connected with server. It is not able to receive any traffic back Transfer: 0 B received, 296 B sent and sent traffic keeps on increasing but cannot access any url , including home.mistborn Can it be because of some port that is blocked?

[@AwesomeOpenSource]

@@RanjitSingh-wy4ku shouldn’t be, I wouldn’t think. No webpages or anything load?

[@ilco31]

would be cool to run this from docker

[@AwesomeOpenSource]

I think the script sets up some docker containers in the background.

[@andysbmw74]

Good project, not much support that I can find for an open source software, pihole does not except system password as well as no way of changing it, bit clunky.

[@AwesomeOpenSource]

I believe he set up default passwords (listed on the wiki of the gitlab project site linked in the description). Once logged in you can change the password of pi-hole.

[@audiophilemeghalaya5141]

Can you do port forwarding with Mistborn?

[@AwesomeOpenSource]

I don't think so. Why would you want to do that?

[@ShahabSheikhzadeh]

This project is fantastic conceptually and it shows that a lot of work into it. But what I've found is, by putting all of this together there are probably some baked in assumptions and/or poor documentation. When I set this up, I wasn't able to route out to the Internet, despite being connected via VPN. It seems that the intention is to have this set up on a VPS. Reading the comments and other posts, it seems like these days people are having similar issues, external VPS or not. I also realized (I think) that the DNS blocking was set up in such a way (from the comments, I think) that you couldn't route/send request to/from unless you were using the VPN, e.g. it didn't allow local connections. What's the point of that if you just want to use part of the project? Some silly things that need to be ironed out, for sure.

[@AwesomeOpenSource]

I'm sure the author would be open to input and ideas.

[@flyingmonkey3822]

I installed this on raspbian buster on pi4 4g w 64G usb boot, and enabled static IP to it from my home modem/router. I can ssh into it from my laptop, and I’ve installed WireGuard on the laptop as per the website, followed this tutorial, and created a WireGuard profile on my laptop from the config file given… but after turning on WireGuard I lose connection to the network and internet. Home.mistborn doesn’t resolve a DNS name even when I manually enter the dns endpoint. Any ideas on where to start troubleshooting?

[@AwesomeOpenSource]

I really don't, I'm sorry. You might ask over on the Mistborn Gitlab pages.

[@jojohnes5863]

After sudo journalctl -xfu Mistborn-base I have no possibility to enter sudo mistborn-cli getconf. The logs is running endless. How can I stop it? Closing puuty kicked me out of the server with no way to SSH again. I have to reinstall my snapshot. What can I do?

[@AwesomeOpenSource]

That’s odd. How long did you wait? Also, did you try CTRL+C to stop it from running? As for logging back in, if mistborn is running you need the admin config on your client. So, yes you may need to start from a snapshots

[@jojohnes5863]

@@AwesomeOpenSource Thanks for the fast feedback. I will try the next days

[@micky1067]

Hi... great video. I liek to install it in a Proxmox Ubuntu Container. But I become a message: E: Unable to locate package linux-headers-5.4.124-1-pve E: Couldn't find any package by glob 'linux-headers-5.4.124-1-pve' I can not install it. Do I use a VM in Proxmox for this ? I think so.

[@AwesomeOpenSource]

This may be looking for a Kernel version that you don't have in your container VM. You may need to get that kernel version, or you may have to wait until that version becomes available for ProxMox as a container if you're using LXC.

[@hemkumar8391]

Is it possible to run in centos 8

[@hemkumar8391]

or ubantu 20.10

[@AwesomeOpenSource]

@@hemkumar8391 Not sure how his scrpt installs. I think on his site (linked in description) you can see which versions of Linux it will work with. Mostly it's just a bash script that installs and sets everything up.

[@agentcooper4627]

This project is dead. The latest version has a bug in pihole and the developer wont fix it.

[@AwesomeOpenSource]

Sorry to hear that. You could build your own setup with Netmaker I imagine.

[@rinkumishra2259]

It is great. I have query that I want to do split-tunnel config. so I edited allowed IPs setting in conf file. Now I want to access nextcloud. please help in getting the IP address and port number to access nextcloud. because in this config, nextcloud.mistborn will not work

[@AwesomeOpenSource]

I would say you'll get better answers over at the gitlab site, from the maintainer himself on how to do this.

[@moetocafe]

alas, doesn't look to be in active development anymore

[@AwesomeOpenSource]

It was a personal project (based on my interactions with the developer several years ago when I found it), and he may have simply gotten it to where it needed to be for his own needs.

[@moetocafe]

@@AwesomeOpenSource looked like a promising project. Sad to see it abandoned...

[@jojohnes5863]

After