Nostr VPN

Nostr VPN is a Tailscale-style private mesh VPN built around a FIPS-backed data plane. It includes the nvpn CLI/daemon, a shared native app core, and native shells for desktop and mobile platforms.

Nostr VPN turns your Umbrel into a private mesh VPN node for your own devices and trusted groups. Create invite-only networks, approve join requests, share QR invites, manage peers, and route traffic through trusted exit nodes without relying on a hosted VPN provider or a central control server.

To connect a device, open Nostr VPN on your Umbrel and create an invite. Then import that invite in the Nostr VPN app or CLI on the device you want to connect. Once you accept the join request on your Umbrel, your devices can reach each other using their private Nostr VPN IPs.

What works today:

• Generates Nostr identity keys automatically
• Shares networks through invites and roster/admin sync
• Stores multiple named networks with one active network at a time
• Brings up FIPS private mesh tunnels for private network traffic
• Routes private traffic directly when possible and through FIPS neighbors when direct UDP is blocked
• Supports MagicDNS, route advertisement, exit-node selection, and WireGuard upstream egress
• Exposes native desktop apps, JSON status, network diagnostics, doctor bundles, desktop updates, and Linux-focused Docker e2e coverage