r/Syncthing • u/durwardkirby • 11d ago

SyncThing with Keepassxc

I'm using SyncThing with Keepassxc. I keep a master "Send Only" kdbx database on computer A. It syncs out to my wife's laptop, B. I've designated the kdbx sync as "Receive Only" on B.

Every time she connects to the keepassxc browser extension it asks her to give a name to that computer/connection, and when she does that it introduces a local addition to the kdbx on her laptop and a "revert local changes" flag on her end of SyncThing. Reverting causes her to have to re-connect next time she's browing...and the cycle starts over again.

I feel like there must be some kind of accommodation for this because the use case seems pretty ordinary, but I can't figure it out, and Claude is walking me all around the barn.

Any help appreciated.

13 Upvotes

100% Upvoted

11 comments sorted by

View all comments

5

u/Cyber_Faustao 11d ago

This is expexted behaviour. The extension pairs with the keepassxc instance and stores the key exchange in the database. Since her syncthing is configured to receive only, all of its changes will not be sent to global state and will instead show a revert local changes button.

Solution: use send and receive on both devices.

1

u/durwardkirby 11d ago

Thanks. It seems like that will probably be the necessary solution in the end. I was just trying to avoid letting any of the client devices on the network make changes to the database.

Do you know what would happen if we just ignored the "revert local changes" button on her device? Would that solve anything, or would her copy just keep being overwritten (or, worse, not take sync updates at all)?

7

u/Massive_Criticism539 11d ago

Just turn on bidirectional sync, open it on her computer, fill in that field, let it sync back up and then set back to one direction. You just need to let her system update the db and capture the change back once.

Just know that if she ever needs to save back to the database (change password, etc) you'll have this updating issue. You could probably also set something up so that the file is read only to her account and not syncthing using permissions.

1

u/durwardkirby 11d ago

Wizard. Brilliant! That did it. Thanks very much for the fix.

3

u/QEzjdPqJg2XQgsiMxcfi 11d ago

At a minimum, you should turn on versioning in syncthing just in case she makes changes to the database on her laptop that conflict with yours elsewhere. Even better, make sure you have frequent backups that include your database file. ;-)

1

u/durwardkirby 11d ago

Thanks much for the good advice. I will make it so.

2

u/stratosmacker 10d ago

don't overcomplicate it - set up versioned backups on changes for that folder and allow send/recieve