My Paperless-ngx instance is only reachable inside my home network, and switching WireGuard on and off on my phone every time got old. So I forked Paperless Mobile and added an optional built-in WireGuard tunnel:
- Import your WireGuard .conf once (UniFi, Fritz!Box, OPNsense, wg-easy, …)
- Only the app itself uses the tunnel – no system-wide VPN, no separate WireGuard app
- Enter your home Wi-Fi names: at home it connects directly, everywhere else it starts the tunnel automatically and stops it a few minutes after you leave the app
- A diagnostics page shows handshake, DNS, TCP and Paperless checks with a plain-language verdict
- Everything else is plain Paperless Mobile (scanner, inbox, labels, multiple accounts, mTLS, 2FA)
It's open source (GPL-3.0): https://github.com/Jumpmaster2/paperless-mobile I offered it upstream, but the maintainer prefers to keep VPN handling out of the original app, which is fair – so it lives on as a fork with its own package name (installs next to the original).
I'd like to publish it on Google Play, which needs 12 testers for 14 days. If you want to help: 1. Join https://groups.google.com/g/kronenpaperless-tester 2. Opt in: https://play.google.com/apps/testing/de.koeddi.kronenpaperless 3. Install from Google Play
Feedback and bug reports are very welcome (here or in the GitHub issues).
Source: r/Paperlessngx · by /u/MKronen91