Install Syncthing on an always-on Linux VPS, give its service account a persistent data directory, pair the VPS with your laptop or other devices, and share a folder using an absolute path on the server. Keep the web interface private, open only the synchronization path required by your network design, and add a separate backup system because synchronization also propagates deletions and corruption.
Need a server to try this on? Antihost offers Linux VPS plans with NVMe storage, full root access and a 14-day free trial.
What a VPS-based Syncthing setup actually does
Syncthing is continuous, device-to-device file synchronization. The VPS is one peer in the group, not a cloud-storage bucket. Every participating device keeps its own synchronized copy, and changes are exchanged between peers whenever they can connect.
As an Amazon Associate I earn from qualifying purchases.
A VPS is useful because it can remain online while your laptop is asleep. It can hold a working copy of a game-save archive, project directory, media folder, or other files and pass changes to devices that reconnect later. The VPS does not become a backup merely because it is remote: a deletion or damaged file can be synchronized to every copy.
The project states: “All device to device traffic is protected by TLS.” A device’s certificate fingerprint is represented as a human-readable Device ID. You use that ID when deciding whether another peer may join.
#1 Best Overall
- BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
- EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
- COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
- LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
- WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.
Plan the deployment before installing
Choose storage that survives reboots
Reserve persistent VPS disk for two different kinds of data: the synchronized folders themselves and Syncthing’s configuration and database. A container that loses its volume, or a VPS disk that is filled by unrelated logs, can stop synchronization even though the process is still running.
- Use a filesystem with enough free space for the largest expected synchronized copy and temporary file growth.
- Keep the Syncthing configuration directory on persistent storage, not an ephemeral container layer.
- Decide whether the synchronized directory belongs to a dedicated non-root account or to a container identity. The identity must be able to read and write every intended file.
- Control the VPS firewall and have a reboot-safe service definition so the process returns after maintenance or an unexpected restart.
Decide the data-flow role
For each shared folder, choose the least permissive role that matches the job. Send-and-receive is the normal two-way mode. Send-only protects a source from changes made by peers. Receive-only makes a destination less likely to send accidental edits back to the source.
| Folder role | Data flow | When it fits | Risk reduced |
|---|---|---|---|
| Send and receive | Changes move both directions | A working folder edited on multiple devices | None beyond normal conflict and deletion handling |
| Send only | This device publishes changes | A source directory that should not be edited on the VPS | Accidental overwrites originating on the receiving peer |
| Receive only | This device accepts changes | A VPS archive or distribution copy | Edits on the VPS being sent back to the source |
Native installation or Docker?
Both approaches can work. Native installation keeps the process close to the host operating system and usually makes ownership and permissions easier to inspect. Docker gives you a repeatable image and an explicit volume boundary, but you must map identities and storage deliberately.
| Decision point | Native package or binary | Docker container |
|---|---|---|
| Filesystem permissions | The host service account directly owns or accesses the target path. | The container’s UID/GID must match permissions on the host-mounted path; the official image defaults to UID/GID 1000. |
| Persistent state | Store the configuration and database in the service account’s persistent home or designated data directory. | Mount a persistent host directory at /var/syncthing, the official image’s persistent volume path. |
| Upgrades | Use the package or binary update method for your Linux distribution and review service changes. | Pull and recreate the image while retaining the host volume; review image and permission changes first. |
| Isolation | Less isolation from the host, with simpler direct filesystem access. | More explicit process isolation, with additional networking and volume configuration. |
| Discovery-sensitive networking | Host networking is naturally visible to the process. | Docker’s default bridge can hide useful local addresses; host networking is recommended when LAN discovery matters. |
Do not copy a sample compose file without checking its storage path, identity, restart policy, GUI binding, and health check. The project’s example uses restart: unless-stopped and checks the local GUI endpoint for health.
Install Syncthing and make it persistent
1. Create the service identity and directories
- Create or select a non-root Linux account for Syncthing. If you use a container, choose the container UID/GID and make the host directories writable by that identity.
- Create one persistent directory for Syncthing’s configuration and database and another for the folder data, unless your layout intentionally combines them.
- Set ownership and permissions so the service identity can traverse the parent directories and read, create, rename, and delete files inside the synchronized path.
- Keep unrelated users out of the configuration directory. It contains identity material and peer information.
2. Install using the method you selected
For a native deployment, install the package or binary supplied for your Linux distribution, then use the project’s documented automatic-start method. Verify that the service runs as the non-root identity and that its configuration path is persistent.
Rank #2
- WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
- AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
- PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
- ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
- COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed
For Docker, use the official Syncthing image, mount a persistent host directory at /var/syncthing, and map the host folder you intend to synchronize. Set PUID/PGID, or the image’s equivalent identity settings, to values that can write the mounted paths. If the VPS is also expected to participate in LAN discovery, consider host networking instead of the default bridge network.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →3. Enable automatic startup
Automatic startup is not optional for an always-on peer. Enable the native service or configure the container with a restart policy that brings it back after a reboot and after an ordinary process failure. After enabling it, reboot during a maintenance window and confirm that the process returns, the configuration is still present, and the folder resumes synchronization.
Configure addresses and the firewall
Understand the documented defaults
Syncthing commonly uses synchronization port 22000. The web GUI commonly listens on 127.0.0.1:8384. These are defaults, not promises: inspect the current Listen Addresses and GUI settings, especially after changing a container network, installing a distribution package, or importing a configuration.
The firewall rule must match the transport and listen address shown in your installation. Expose only the synchronization path required by your topology. Do not expose the GUI simply because the synchronization port is reachable.
Direct connection versus fallback
A direct connection normally gives the best transfer performance. A public VPS can accept an inbound synchronization connection when its firewall and listen address allow it; a private device behind NAT may instead make an outbound connection. If an inbound path cannot be arranged, allow discovery and relay fallback or place the peers on a private VPN.
Free tools Windows power users keep installed
One-click scans. No signup required.
Rank #3
- Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
- Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
- Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
- ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
- Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)
| Path | Reachability | Performance | Metadata and operational trade-off |
|---|---|---|---|
| Direct peer connection | Requires a usable route, listen address, and firewall/NAT configuration. | Normally faster and more predictable. | More firewall and address maintenance is your responsibility. |
| Relay fallback | Works when peers can reach the relay service but cannot establish a direct path. | Generally slower than direct transfer. | The relay operator can see Device IDs, connecting IP information, and traffic volume; file contents remain end-to-end encrypted. |
| Private VPN | Provides an addressable private path between enrolled devices. | Often close to direct performance, subject to VPN overhead. | Adds VPN key, routing, and availability administration but can keep the GUI and sync path off the public Internet. |
When a device reports a relay-only connection, pairing has succeeded; the remaining problem is reachability. Check firewall rules, NAT, VPN routes, and the configured addresses before investigating file integrity.
Keep the web GUI private
Leave the GUI bound to localhost unless you have a deliberate remote-administration design. On a VPS, the safest routine arrangement is to administer it locally on the server or through a private VPN.
Use authentication and TLS for deliberate remote access
If administrators must reach the GUI from outside the VPS, place it behind a VPN or an authenticated TLS reverse proxy. Syncthing also supports TLS enforcement and user/password authentication in its configuration. Test the complete path from an untrusted network and confirm that unauthenticated requests are rejected.
Never enable the insecureAdminAccess option on an Internet-facing VPS. That option permits external GUI access without authorization.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Protect identity files
Treat the Syncthing configuration directory and TLS keys like credentials. Someone who obtains them can impersonate the device and connect to its peers. Restrict filesystem access, avoid publishing the directory in a container image or backup repository, and keep it on the protected encrypted disk when the VPS uses encrypted storage.
Rank #4
- Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
- Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
- 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
- Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
- USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC
Pair the VPS with your devices
- Install Syncthing on the VPS and on each laptop, desktop, or other client that will participate.
- Open the GUI on one device and display its Device ID. Exchange IDs through a channel you trust; the ID is derived from the device certificate fingerprint.
- Add the other device as a remote device, enter its Device ID exactly, and save. Accept the incoming pairing on the other side.
- Confirm that both GUIs show the devices as connected or attempting to connect. A connected state proves the identities were accepted, not that a folder is shared yet.
- On the initiating device, add a folder with a clear label and share it with the VPS device. On the VPS, accept the share and enter an explicit absolute path inside the persistent data directory.
- Choose send-and-receive, send-only, or receive-only for each side. Make the choice based on where edits are allowed, not on which device is online most often.
- Create a harmless test file, wait for the folder state to become up to date on both peers, and verify the file and its permissions on the VPS.
Use fixed addresses when discovery is not enough
A peer can be configured with a fixed address such as tcp://host:22000. The configuration also accepts the dynamic keyword for local or global discovery, and multiple addresses can be supplied when a peer is reachable through more than one path. Use a fixed address for a VPS whose public endpoint is stable, while retaining an additional path only when you understand how failover should work.
Choose discovery and relay settings consciously
Global discovery helps peers find one another across the Internet, but it can reveal Device IDs and associate addresses with IPs. Local discovery uses LAN broadcast or multicast and is useful when devices share a network.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsRelays are enabled by default as a fallback when direct connections fail. Relay traffic remains end-to-end encrypted, but the relay operator can observe Device IDs, connecting IP information, and traffic volume. Transfers through a relay are generally slower.
- Keep discovery and relays enabled when simplicity and reachability matter more than minimizing third-party metadata.
- Disable global discovery when you do not want a discovery service mapping your Device ID to an address.
- Disable local discovery when LAN broadcast or multicast is inappropriate for your network.
- Disable relaying only after you have supplied static addresses or a private VPN and tested reconnection after a network change.
There is no universal best setting. A private VPN or fixed address reduces dependence on discovery infrastructure but creates routing and maintenance work that Syncthing would otherwise handle for you.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Operate the VPS day to day
Check the states that matter
Use the GUI to watch for disconnected devices, out-of-date folders, permission errors, and relay-only connections. A folder that is up to date on one peer but not another needs investigation before you edit more files.
Best Value
- Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
- Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
- Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
- Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
- Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.
- Disconnected device: inspect the peer’s last-seen time, configured addresses, firewall, and whether the remote service is running.
- Out-of-date folder: check which device has the pending changes and whether the target path is writable.
- Permission error: verify ownership, group membership, directory traversal permissions, and the container UID/GID.
- Relay-only: treat it as a network-path diagnosis, not evidence of corrupted data.
- Unexpected conflicts: stop editing the same files on multiple devices until you understand which copy should win.
Use a repeatable troubleshooting order
- Check local service status and recent logs on the VPS. Confirm the native service or container is running under the expected identity.
- Confirm that the Device ID on each side is correct and that both pairing requests were accepted.
- Confirm the folder is shared with the intended device, the folder path is absolute, and the path exists on the VPS.
- Check the current listen address and port in Syncthing rather than relying on defaults.
- Check the VPS firewall and any cloud-provider firewall for the required synchronization transport.
- If the connection is relay-only, inspect NAT, VPN routing, fixed addresses, and discovery settings.
- Only after connectivity and permissions are correct, inspect file changes, conflicts, and ignore patterns.
Synchronization is not backup
Syncthing maintains synchronized working copies. It does not by itself provide historical recovery from accidental deletion, ransomware, or silent corruption. Add a separate backup or versioning plan with retention that is independent of the synchronized folder.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Keep backups outside the write path used by Syncthing, test restores, and decide how long deleted or changed files should remain recoverable. If the VPS is the convenient always-on copy, do not let that convenience become the only recovery option.
A practical security and maintenance checklist
- Run Syncthing as a non-root account or a deliberately mapped container identity.
- Keep configuration, database, and synchronized data on persistent storage.
- Verify the target directory is writable by the service identity before sharing it.
- Leave the GUI on
127.0.0.1:8384unless a VPN or authenticated TLS reverse proxy protects remote administration. - Do not enable
insecureAdminAccesson a public VPS. - Expose only the synchronization path required by the chosen topology and verify the actual configured port.
- Protect configuration files and TLS keys as credentials.
- Enable automatic startup and test recovery after a reboot.
- Review discovery and relay metadata trade-offs instead of accepting every default blindly.
- Maintain a separate backup or versioning system and perform restore tests.
Which design should you choose?
Choose a native installation when straightforward host permissions, ordinary service management, and the fewest moving parts are your priorities. Choose Docker when repeatable image deployment and an explicit volume boundary are more valuable, and you are prepared to manage UID/GID mapping and networking.
Choose direct connections when transfer speed and predictable throughput matter and you can maintain firewall or VPN routes. Keep relay fallback when the VPS must remain reachable from networks where inbound connections are unreliable. For administration, localhost or a private VPN exposes less attack surface than a public reverse-proxy endpoint; use a reverse proxy only when its authentication and TLS policy are part of your operational design.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
