Nostr VPN

Admin-approved mesh VPN over Nostr

Get it on umbrelOS

Versionv4.1.7

CategoryNetworking

Source codePublic

Developed bymmalmi and contributors 1 app

Submitted bymmalmi 1 app

Compatible withumbrelOS 0.5 or later

Nostr VPN turns your Umbrel into a private mesh VPN node for your own devices and trusted groups. Approve signed join-request QRs, manage peers, and route traffic through trusted exit nodes without relying on a hosted VPN provider or a central control server.

To connect a device, choose Join on the device you want to add so it displays its signed QR code or link. On your Umbrel, scan or paste that request, review it, and accept it. The joining device then receives the signed network roster and your devices can reach each other using their private Nostr VPN IPs.

What's new

Version v4.0.67+2 months ago

Changes since v4.0.58:

Keeps VPN traffic flowing over mesh fallback when direct UDP is marked link-dead, while direct probing continues and can recover.
Fixes stale or freshly reconnected UDP paths suppressing better fallback routes after hotspot/NAT changes.
Prevents fallback transit loops after direct-path loss.
Warms established sessions after fresh fallback discovery, reducing stalls after liveness timeouts.

Version v4.0.58+2 months ago

Changes since v4.0.47:

Fixed first-run Umbrel setup so the admin network, local .nvpn name, device invites, and self device appear correctly while the daemon is starting.
Improved direct FIPS connections: mesh/relay is now only fallback transport, while direct UDP keeps retrying in the background.
Fixed network-change cases where stale private addresses or brief hotspot liveness failures could leave peers stuck on mesh/relay.
Improved FIPS status output so nvpn status --json can show fallback transport and direct probing separately.
Improved FIPS rekey, liveness, and failover handling under load and during changing network conditions.
Startup and network-refresh failures now show clearer daemon status instead of stale "Turning VPN on" states.

Version v4.0.47+2 months ago

Changes since v4.0.42:

New installs can find peers more reliably: public bootstrap routing now starts enabled with IPv4, IPv6, UDP, and TCP fallback support.
Fixed a bug where UDP connection errors could make busy nodes waste CPU instead of backing off cleanly.
Improved fairness when many peers connect at once, so overloaded bootstrap or server nodes keep serving peers more evenly.
Turning bootstrap routing off now stays off after config reloads.
Fixed Add Network join request handling, including keeping "Join request sent" visible until the Add Network screen closes.
Improved relay discovery and public routing settings labels so the controls describe what they actually change.
Improved stability for large or saturated meshes, including safer connection cleanup and config reload behavior.
Admin roster updates are now signed and verified before acceptance.
Fixed route refresh error text and added stronger release dependency checks.

Version v4.0.42+2 months ago

This update includes several invite and settings improvements:

Fixed joining by invite on fresh installs so Nostr VPN reuses the starter network instead of creating a duplicate "Network 1"
Automatically selects the joined network after importing an invite
Preserves pasted iOS WireGuard upstream configs during background refreshes
Clarifies public .fips routing settings and separates them from core FIPS peer settings

NekoA self-hosted virtual browser powered by WebRTC

WebCheckAn all-in-one Open Source Intelligence tool for analyzing any website

DTAN ServerNostr-based torrent distribution network

Cloudflare TunnelAccess your Umbrel apps from the Internet using Cloudflare network

WireGuardRun your own free and unlimited WireGuard VPN

LibreSpeedFree and open source speedtest

Nostr VPN

Related