Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsiTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Need a server to try this on? Antihost offers Linux VPS plans with NVMe storage, full root access and a 14-day free trial.
Run Syncthing on the VPS as an always-on peer, install it on each laptop or server that needs the files, pair the devices by exchanging Device IDs, and share a folder. Keep the VPS GUI on localhost or behind a VPN, allow only the synchronization traffic your topology needs, and store Syncthing’s configuration and data on persistent storage. Every participating device keeps its own copy, so add a separate backup or version-history system if you must recover deleted or corrupted files.
What a VPS-based Syncthing setup actually does
Syncthing is continuous, device-to-device file synchronization. A VPS does not become a cloud bucket or a single authoritative copy: it is simply a peer that is normally online. Your laptop, desktop, phone, NAS, and VPS each retain a synchronized copy of the folders you share.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11When a file changes, Syncthing discovers the other device, establishes an encrypted connection, and transfers the changed blocks. If the VPS is offline, clients keep local changes and synchronize when it returns. If two devices edit the same file before they can exchange changes, Syncthing preserves a conflict copy rather than silently choosing one version.
Synchronization is not backup. A deletion, ransomware encryption event, or accidental overwrite can propagate to every peer. Plan snapshots, filesystem versioning, or a separate backup destination for data that must be recoverable.
#1 Best Overall
- Powerful Turbo Fan:CAGIWIRU Electric Air Duster have reached speed up to 130000RPM,Can efficient remove dust and debris.With LED light and Three Adjustable Speed to meet with different cleaning tasks.
- With Attached USB C Fasting Charging cable.Charing 3 hours,Enjoy up to 240 minutes of use on the lowest setting, For third speed can use for 25mins.with four charging options to meet with your needs.
- Wide Application: attached 5 different nozzles,making it suitable for a variety of scenes, such as car,pet, pc, keyboards, and other electronic devices. It also serves for office and home clean duster.
- Handy Design & Portable:Cordless air duster electric nozzle is Light weight and small size, design and comfortable to hold and space saving, convenient to carry around. You can put it in your room or inside the car without taking up space.
- Economical &Reusable: Built durable materials with a long-lasting battery,our CAGIWIRU air duster it's a sustainable alternative to disposable air cans.
Plan the deployment before installing anything
VPS requirements
- A supported Linux distribution with enough persistent disk for the synchronized data, Syncthing’s configuration, and its database.
- A non-root Linux account or container identity that can read and write every folder you intend to synchronize.
- Firewall control, either through the VPS provider, the operating system, or both.
- A service definition that starts Syncthing automatically after a reboot.
- A storage layout that survives container recreation or VPS maintenance. Ephemeral container storage is unsuitable for the Syncthing database or synchronized files.
Choose the data flow
Decide whether the VPS should be a normal editing peer or a deliberately restricted destination. A normal send-and-receive folder is simplest, but it can accept changes from every authorized device. A send-only folder exports changes from the VPS and rejects incoming edits; a receive-only folder accepts changes but does not send local edits. Restricted roles can reduce accidental overwrites when the VPS is an archive target or distribution point.
Choose how the VPS will be reached
Direct device connections normally provide the best transfer speed. A public VPS can accept the synchronization connection directly, or all devices can reach one another through a private VPN. If no direct route is possible, Syncthing can use discovery and relay infrastructure as a fallback. Relays improve reachability but usually transfer more slowly and expose connection metadata to the relay operator.
Native installation or Docker?
| Decision area | Native package or binary | Docker container |
|---|---|---|
| Filesystem permissions | The service account maps directly to host users and groups; ownership is usually easier to inspect. | The container identity must match host ownership. The official image defaults to UID/GID 1000, or you can set equivalent PUID/PGID values. |
| Isolation | Runs as a host service with fewer layers between Syncthing and the filesystem. | Separates the application from the host and makes image-based redeployment repeatable. |
| Persistent state | Keep the configuration and database in the service user’s persistent home or an explicitly configured directory. | Mount a persistent host directory to /var/syncthing; mount each data directory separately if that makes ownership and backups clearer. |
| Upgrades | Use the distribution package or the project’s binary and follow its service restart procedure. | Pull a reviewed image, recreate the container, and retain the persistent volume. |
| Network discovery | Uses the host network naturally. | Host networking is recommended when LAN discovery matters. Docker’s default bridge can hide useful local addresses. |
Do not copy a sample Compose file unchanged. Review its image version, hostname, identity, volume paths, user IDs, restart policy, health check, and network mode first.
Install Syncthing natively on the VPS
The exact package command depends on your Linux distribution. Use the Syncthing package or binary instructions for that distribution, then run the service under a dedicated non-root account. The sequence below describes the decisions and checks that matter regardless of packaging.
- Create the service identity and directories. Create a user such as
syncthingwithout shell privileges, create a persistent configuration location, and create the target data directory. Assign ownership or group write access so that this identity can create, rename, and delete files. - Install the package or binary. Verify that the executable is available to the service account and that the installed version is supported by your clients.
- Define an automatic service. Use the package’s system service or the project’s documented startup method. Enable it for boot and start it immediately. A typical systemd-based installation uses a per-user service such as
syncthing@username.service, but package names and unit names can differ. - Check local status and logs. Confirm that the process remains running after startup and that it can open its configuration directory and target folder. Resolve permission errors before pairing devices.
- Open the GUI locally. On the VPS itself, browse to the configured local address, commonly
http://127.0.0.1:8384. Treat that address as a default, not a guarantee; inspect the current listen setting.
If you administer the VPS over SSH, use an SSH port-forward rather than exposing the GUI publicly. For example, forward a local browser port to the VPS’s loopback address, then browse to the local end of the tunnel. This keeps the administration endpoint off the Internet.
Run Syncthing with Docker
The official container uses /var/syncthing for persistent application state and defaults to UID/GID 1000. Mount that path to storage that survives container replacement. Mount the synchronized data at a second, explicit path so that the folder path shown in Syncthing is unambiguous.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Rank #2
- Screen Cleaner is Your Screen’s New Bestfriend! - EVEO is proud to present a screen cleaner that’s perfectly suited for your TV. Meet your new screen cleaner, computer screen cleaner, laptop cleaner, iPad cleaner, Macbook,tv cleaner or any other electronic device. Our screen cleaner spray and wipe along with the included plush microfiber cloth, easily removes dust, fingerprints & other smudges on the screen’s surface. Clean effectively for a streak-free screen
- Gentle on your Screens - Our screen cleaner spray and wipes is compatible to be used even for the most sensitive LCD, LED, CRT, and OLED screens in proper use. Be at ease knowing that this product is compatible with all the major brands: LG, SONY, Samsung, Sharp, iPad, iPhone, Android screens, Kindle, PC monitors - we’ve got you covered! Can be used as LCD screen cleaner, tv cleaner, smart tv screen cleaner, and more
- Premium Super Soft Plush Microfiber Cloth - Included in this efficient screen cleaning kit. This screen cleaner spray and wipe has our signature plush microfiber cloth specially designed to comply with screens and monitors and leave them streak-free. Has been shown to effectively absorbs stubborn stains, zero streaks, and no fiber shedding. Always use this together with our screen cleaner for the best results
- Easy-to-Use Screen Cleaner Kit + microfiber cleaning cloth - The EVEO Screen Cleaning Kit will easily be your new favorite tool when it comes to taking care of the things you love most, quick and easy solution for a streak-free screen. Simply screw on the sprayer gun on the screen cleaner bottle. Spray the cleaning liquid onto the microfiber cloth, then wipe the screen until desired cleanliness & shine is achieved.
- Quality Screen Care Kit Worth Purchasing - Enjoy a convenient Screen Cleaner anytime, anywhere you need it. Your satisfaction is our top priority. We stand behind the quality of our products and that’s why, you shouldn’t be worrying at all. We manufacture the Best Screen Cleaner. and can be used for laptop cleaning kit, laptop screen cleaner, tv screen cleaner for smart tv. MacBook screen cleaner, monitor cleaner or screen cleaner spray for electronic devices with microfiber cleaning cloth
services:
syncthing:
image: syncthing/syncthing
container_name: syncthing
hostname: vps-syncthing
environment:
- PUID=1000
- PGID=1000
volumes:
- /srv/syncthing:/var/syncthing
- /srv/sync-data:/data
network_mode: host
restart: unless-stopped
healthcheck:
test: ["CMD-SHELL", "wget --no-verbose --tries=1 --spider http://127.0.0.1:8384"]
interval: 30s
timeout: 10s
retries: 3Adjust the host paths and numeric IDs to your system. Make sure the host directory owner matches the container identity before starting the container. With host networking, Syncthing listens directly on the VPS network interfaces; do not also publish conflicting port mappings. If you use bridge networking instead, map the synchronization ports required by your current Syncthing configuration and follow the project’s firewall guidance. Bridge mode can make local discovery less useful.
- Create the host directories and set their ownership for the configured UID and GID.
- Review the Compose file’s image, paths, identity, network mode, restart policy, and health check.
- Start the service with your container runtime and inspect its logs.
- Open the GUI through a local SSH tunnel or a private management network.
- After confirming the volume is mounted, create or share folders only under the intended persistent path.
A container that starts successfully but has an empty configuration after recreation has lost its persistent /var/syncthing mount. Stop and correct the mount before adding devices.
Secure the Syncthing web interface
Leave the GUI bound to localhost unless you have a deliberate remote-administration design. The commonly documented default is 127.0.0.1:8384. Verify the listen address in Syncthing’s current configuration, especially after changing container networking.
Local-only administration
Use an SSH tunnel from your workstation to the VPS. This is the smallest attack surface because no public listener is needed for the GUI. Limit SSH access separately with keys, a firewall, and your normal host-hardening policy.
Recommended Free Tools
VPN administration
Bind the GUI to the VPN interface or keep it on loopback and reach it through the VPN host. Restrict the VPN to trusted administrators and avoid making the management address reachable from the public Internet.
Reverse-proxy administration
If a reverse proxy is unavoidable, terminate HTTPS there, require authentication, and restrict the proxy’s source addresses. Enable Syncthing’s own TLS and user/password controls as appropriate for the chosen design. Never enable the insecureAdminAccess option on an Internet-facing VPS; it permits external access without authorization.
Rank #3
- 【Large size】：Measuring 800 x 300 mm/ 31. 5×12 inches, which is wider and taller than others. Large mouse pad can perfectly fit your keyboard and mouse of any size, and there is also ample space for peripherals such as phones, tablets, etc.
- 【LED backlight mouse pad】：Blade Hawks RGB mouse pad provides 7 static modes and 7 dynamic modes will give you the options you are looking for. Power-off memory function remembers the last lighting mode you selected. The super glow fiber Chroma will give you a colorful gaming setup that you want.
- 【Anti-slip rubber base】：Made from Natural rubber, this gaming mousepad will firmly grip your desktop, allowing you to enjoy the ultimate precision in the games you are most passionate about. It also comes with a texture that enhances this ability even further.
- 【Smooth and waterproof surface】: Micro-textured cloth surface, for extremely precise mouse control and a smooth movement. When liquid splashes on the gaming mouse pad, it forms water droplets and slides down. Will not delay your work or gameplay.
- 【Plug and play】: This mouse and keyboard pad is powered by USB, plug and play, no driver required. One button control light modes. Press one time to change the lighting mode, press twice to change the brightness, press and hold about 3 seconds turn ON/OFF.
Protect the Syncthing configuration directory and TLS keys like credentials. Possession of those files can allow an attacker to impersonate the device and connect to its peers. If the VPS uses encrypted storage, keep the configuration directory on the protected disk as well.
Syncthing’s security documentation states: “All device to device traffic is protected by TLS.” The certificate fingerprint is represented to users as the human-readable Device ID, which is why a Device ID should be exchanged through a trusted channel before accepting a new peer.
Free tools Windows power users keep installed
One-click scans. No signup required.
Pair the VPS with your other devices
- Install Syncthing on every participant. Install it on the VPS and on each laptop, desktop, server, or NAS that needs a copy.
- Copy the VPS Device ID. In the VPS GUI, display the Device ID and transfer it to the client through a channel you trust. Do the same in the opposite direction if both devices need to initiate connections.
- Add the remote device. On each side, open the device-management screen, add the other Device ID, and give it a recognizable name. Accept the pending device on the other side.
- Confirm the pairing. Both GUIs should show the other device as known rather than pending. A paired device is not automatically allowed to access every folder.
- Add a folder on the initiating device. Give it a clear label and choose the local absolute path. Share that folder with the VPS device.
- Accept the folder on the VPS. Select an explicit absolute path such as
/srv/sync-data/projectsor, in the container example,/data/projects. Check the folder type before confirming. - Perform a small test. Create a harmless text file, wait for the status to become up to date on both devices, then edit and delete it. This confirms write access and the intended direction of changes.
For a peer that can be reached through more than one route, Syncthing accepts multiple addresses, including fixed addresses such as tcp://host:22000 and the dynamic keyword for local or global discovery. Keep an address list only as broad as your topology requires.
Choose the right folder role
| Folder type | VPS behavior | Use it when | Main risk |
|---|---|---|---|
| Send and receive | Sends local changes and accepts changes from peers. | The VPS is a full working peer or shared server. | Edits, deletions, or corruption can flow in either direction. |
| Send only | Exports VPS changes but does not accept incoming modifications. | The VPS publishes a canonical output to clients. | Client changes are not incorporated into the VPS copy. |
| Receive only | Accepts peer changes but does not send local edits. | The VPS is a collection or ingestion target. | Local changes are not distributed and may be reported as unexpected. |
Folder roles are not a backup policy. A receive-only folder can still receive a deletion from its source, and a send-only source can still lose its local files. Combine the role with snapshots or an independent backup.
Configure ports, addresses, discovery, and relays
Synchronization traffic
Port 22000 is the commonly documented synchronization default. Confirm the active listen address and transport in the GUI or configuration before writing firewall rules. A container, VPN, or custom configuration may use a different interface or port.
GUI traffic
Port 8384 is commonly used by the web GUI, normally on 127.0.0.1. It should not be opened on the public interface merely because synchronization is public.
Rank #4
- 【Softer and More Comfortable】Vaydeer wrist rest has unique diamond pattern, which is the combination of softness and aesthetics. The materials of wrist rest are improved into higher quality memory foam and covered with silky smooth lycra. The computer wrist rest makes you as comfortable and cushiony as like rest your wrists on clouds.
- 【Ergonomic Wrist Saver】The wrist rests for keyboard and mouse comes with a 17.32×3.15×0.83 inch keyboard wrist pad and a 5.94×3.15×0.83 inch mouse wrist support. Based on ergonomic design, the unique concave shape is the perfect fit for your wrist joints. The wrist rest pad fits most computer keyboards and laptops, improve hand and wrist posture, release your wrist and arm stress.
- 【Non-Slip Rubber Bottom】Featuring an anti-skid silicone base on the bottom, this wrist keyboard support stays firmly in place on your desk, preventing the padding from sliding around, ensuring stable and consistent wrist support during extended computer sessions.
- 【Better Experience & Pain Relief】Our keyboard arm rest is beneficial to alleviate the soreness caused by direct contact and friction between your arm and a hard desk surface, reducing the risk of wrist fatigue or carpal tunnel. The soft texture of memory foam can evenly distribute the pressure around your wrists and provide good support with just enough give.
- 【Helpful in Multiple Scenarios】Whether you're working, studying, writing, typing, gaming, this keyboard and mouse rest combo is an essential accessory to add comfort and support to your hands and wrists. It’s also a great gift for men, women, family, friend, coworker, gamer, teacher, etc.
Firewall strategy
- Allow the synchronization listener only from the networks or peers that should reach it when your topology permits source filtering.
- Keep the GUI loopback-only, or limit it to a VPN or authenticated reverse proxy.
- Review both the VPS provider firewall and the host firewall; allowing one while blocking the other still prevents connections.
- Use the project’s current firewall guide for discovery-related rules instead of copying an old port list.
Direct paths, discovery, and relays
Local discovery uses LAN broadcast or multicast. Global discovery helps peers find one another across networks, but it can reveal Device IDs and associate addresses with IPs. Relays are enabled by default as a fallback when direct connections fail. Relay traffic remains end-to-end encrypted, but a relay operator can see Device IDs, connecting IP information, and traffic volume; relay transfers are generally slower.
If metadata control is more important than convenience, disable global discovery, local discovery, or relaying and use fixed addresses or a private VPN. That reduces third-party visibility but creates maintenance work: you must keep addresses reachable and update them when network topology changes.
A relay-only connection proves that pairing and folder authorization are working, while direct reachability is not. Investigate firewall rules, NAT, VPN routes, and listen addresses before treating the symptom as data corruption.
Make the VPS reboot-safe
Automatic startup is essential for an always-on peer. Enable the native service or set the container restart policy to unless-stopped. After enabling it, reboot the VPS during a maintenance window and verify that the process starts, the persistent configuration is present, and the folder returns to an up-to-date state.
Keep Syncthing’s database and configuration on persistent storage. In Docker, that means retaining the host directory mounted at /var/syncthing. In a native installation, it means retaining the service user’s configuration directory and any explicitly configured database path. Include those locations in your backup plan, while protecting their contents as sensitive credentials.
Operate and monitor the installation
Use the GUI regularly as an operational dashboard rather than waiting for a user report. Check for disconnected devices, folders that remain out of date, permission failures, unexpected conflict files, and connections that are always relay-only.
Best Value
- 【No Drill Mounted】Cable management tray can be assembled in as little as 3 minutes or less-simply. Side clips easily clampe the edge of desk, pass through the holes on the sides, and secure excess cables with baskets. Desk cable management supports inward or outward installation to meet your needs in different scenarios, and provides you with great convenience when collecting and organizing wires.
- 【Rubber Pad Protects Desk】Wire organizer under desk built-in soft rubber pads on the clamp protect your desk from scratches, so you will not damage your furniture or office.
- 【Sturdy and Beautiful】Cord management under desk is made of high-quality carbon steel and holds about 15 lbs. The wire basket has 2 holes on each side of the tray to enable your cables to pass freely. Cable baskets are suitable for desk thickness use from 0.4" to 2.4".
- 【Space Saving & Keep Organized】Desk cable management tray holds all your power cords, outlet strips, USB hubs and computer transformers hidden from your feet, and the data cables will not enter the vacuum cleaner to keep your desk clean and tidy. Desk wire organizer is also suitable for use in the kitchen and outdoors.
- 【Reduce Safety Risks】Cable tray under desk keeps all plugs away from your kids, no more worry about tripping. Using 2 holes wire tray saves extra space, helps you easily cabling and wire protection. The mesh design is not easy to accumulate dust, but avoids safety accidents caused by messy wires.
- Disk space: Leave headroom for temporary files, database growth, and conflict copies.
- Ownership: Confirm that the service identity can traverse parent directories, not just write the final folder.
- Container mounts: Verify that the path shown in the GUI is the mounted path, not an unpersisted path inside the container.
- Configuration protection: Restrict access to the configuration and TLS key files.
- Version changes: Back up configuration before upgrades and review release notes for networking or database changes.
Troubleshoot in a fixed order
The VPS service is not running
- Check the native service status or container status.
- Read the service or container logs for configuration, database, and permission errors.
- Confirm that the configuration directory exists and is writable by the service identity.
- Restart only after correcting the reported cause, then verify that the process stays running.
The devices never pair
- Compare the complete Device IDs character by character.
- Accept the pending device on both sides.
- Confirm that the VPS listen address is active and that the intended synchronization port is allowed through every firewall.
- If using fixed addresses, verify the hostname, port, and protocol. If using discovery, confirm that discovery is enabled where required.
The folder is paired but does not sync
- Confirm that the folder was shared with the correct Device ID and accepted on the VPS.
- Check that both sides point to the intended absolute paths.
- Test ownership and write access as the actual service or container identity.
- Check for an out-of-date or paused folder state and read the GUI error text before changing settings.
The connection is relay-only
Pairing is working, but a direct route is not. Check the VPS firewall, provider firewall, NAT behavior, VPN routes, and listen addresses. You may keep the relay fallback for reachability, accept its lower performance and metadata exposure, or redesign the network with a reachable address or private VPN.
Files disappeared or changed unexpectedly
Stop making broad changes until you identify the originating device and folder role. Review conflict files and device history, then restore from an independent backup or snapshot if necessary. Do not assume that another synchronized peer is an untouched backup.
Use a separate backup and recovery plan
Syncthing keeps peers consistent; it does not provide point-in-time recovery by itself. For important data, schedule snapshots or backups outside the synchronized folder’s change path. Keep at least one backup destination that is not continuously writable by the same credentials, and periodically test restoring a file to a temporary location.
Back up the VPS’s Syncthing configuration when you need to preserve device identity and folder definitions, but treat that backup as sensitive. Restoring it can restore the VPS identity and access relationships, so protect it with the same care as private keys.
A practical deployment checklist
- Persistent VPS disk sized for data, configuration, database, temporary files, and recovery headroom.
- Dedicated non-root service account or correctly mapped container UID/GID.
- Automatic startup enabled and tested after reboot.
- GUI kept on localhost, a VPN, or an authenticated TLS reverse proxy.
- Synchronization listener and discovery rules matched to the actual topology and current configuration.
- Device IDs exchanged through a trusted channel and accepted on both sides.
- Absolute folder paths verified on every device.
- Folder roles selected deliberately to control overwrite direction.
- Independent backup, snapshot, or versioning plan tested with a real restore.
Frequently Asked Questions
Can I expose Syncthing’s GUI directly on the VPS public IP?
It is safer to leave the GUI on localhost and reach it through SSH or a VPN. If a reverse proxy is required, use HTTPS and authentication, restrict who can connect, and never enable insecureAdminAccess on an Internet-facing host.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →What does a relay connection mean?
The devices are paired and authorized, but they could not establish a direct route. Syncthing is using a relay fallback. Transfers remain end-to-end encrypted, but relays are generally slower and expose Device IDs, connecting IP information, and traffic volume to the relay operator.
Is a VPS synchronized folder a backup?
No. Deletions, corruption, and ransomware changes can propagate to every peer. Use independent snapshots, versioning, or backups and test recovery separately.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
