The android app developed by the syncthing dev is deprecated, the fork is still fine. While the fork’s dev has no plans to publish to google play, there’s presently no reason to think they will discontinue supporting the fork.

Yeah this.

I don’t keep all my photos in sync though. Only the last few months.

I’m using photoprism to browse photos on my server but I’ve been meaning to look at other options because it’s not that great IMO.

deleted by creator

This is the way.

Vastly superior to local dns.

I don’t really understand what you’re getting at. The answer to OPs question is to use letsencrypt like everyone else.

Ooh.

Thanks.

I’ve been running the fork for a long time but somehow figured it was a soft-fork and maybe not really viable without upstream development from syncthing.

Now @imsodin@infosec.pub 's comments are making a lot more sense.

This whole thing is more or less a non-issue then?

It’s been forever since I looked at resilio so this may be an unfair appraisal but… I seem to remember it’s one of those OSS projects that feels a lot more like free tier commercial software. Do you think that’s the case or nah?

Honestly just a dumb rsync client would be enough for me.

God this is sad.

The parts of tech that are useful and elegant are contracting, while subscriptions and ads just get more obnoxious.

They said somewhere that the play store thing is not the reason, it’s just one of the more recent issues.

What is this alternative of which you speak?

This is the answer.

I use syncthing to sync between devices.

This is me.

In public dns, configure *.home.example.com as an A record pointing to the local IP for my traefik container.

Traefik then manages all certificates. It sets a TXT record with my dns providers API like privatesercice.home.lebowheatcroft.com, requests the cert from letsencrypt, then deletes that TXT record.

Yes the local IP of my server is leaked, but names of services are not.

In my experience syncthing is always a bit like that using the default discovery settings.

I use a hub & spoke set up now. Instead of A, B, and C all connecting to each other directly, they only connect to D. I also input the address for D specifically instead of using discovery servers.

With this set up I’ve never had any drama.

Similar here. I’m an accountant by trade but tech is my strongest hobby.

Because people can discuss whatever they like?

If you don’t like it just down vote it.

My set up is similar to this but I’m using wildcards.

So all my containers are on 10.0.0.0/8, and public dns server resolves *.sub.domain.com to 10.0.0.2, which is a reverse proxy for the containers.

No one is saying it is their job.

Merely that using a TLD like .internal requires some consideration regarding ssl certificates.