# Umbrel 1.4.2 Hybrid Clearnet mode with VPS - not working

**URL:** <https://community.umbrel.com/t/umbrel-1-4-2-hybrid-clearnet-mode-with-vps-not-working/23937>\
**Category:** Support and Troubleshooting\
**Created:** [September 20, 2025, 4:50pm UTC](https://community.umbrel.com/t/umbrel-1-4-2-hybrid-clearnet-mode-with-vps-not-working/23937 "2025-09-20T16:50:59Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![jcody10](https://avatars.discourse-cdn.com/v4/letter/j/a698b9/32.png) [@jcody10](https://community.umbrel.com/u/jcody10)\
**Post date:** [September 20, 2025, 4:50pm UTC](https://community.umbrel.com/t/umbrel-1-4-2-hybrid-clearnet-mode-with-vps-not-working/23937/1 "2025-09-20T16:50:59Z")

</div>

Hi all,

I’m trying to set up my Umbrel to use Clearnet.

I set up a VPS (Digital ocean droplet) and successfully have handshake and data going through the tunnel.

Port 9735 is showing open with a port checker when lightning node is running.

My Umbrel Lightning Node is showing a Clearnet address. When I try to open a channel I get this error message:

“Unable to connect to peer  
rpc error: code = Unknown desc = dial proxy failed: dial tcp XXXXXXXXXX:9735: connect: connection refused”  
It also failed in ThunderHub.

These are my settings – personal IP addresses and keys redacted with Xs.

**lnd.conf files settings**  
[Application Options]  
externalip=xxxxxxx:9735  
nat=false  
listen=0.0.0.0:9735

[tor]  
tor.active=true  
tor.v3=true  
tor.skip-proxy-for-clearnet-targets=1  
tor.streamisolation=false

**umbrel wireguard node config  
wg0.conf**  
[Interface]  
PrivateKey = XXXXXXXXXXX  
Address = 10.8.0.2/24  
DNS = 67.207.67.2 67.207.67.3

[Peer]  
PublicKey = XXXXXXXXXXXXXXXX  
AllowedIPs = 0.0.0.0/0 # Route all traffic through VPN  
Endpoint = XXXXXXXXXX:51820  
PersistentKeepalive = 25

**VPS wireguard node config  
wg0.conf**  
[Interface]  
Address = 10.8.0.1/24  
SaveConfig = true  
PostUp = ufw route allow in on wg0 out on eth0  
PostUp = iptables -t nat -I POSTROUTING -o eth0 -j MASQUERADE  
PreDown = ufw route delete allow in on wg0 out on eth0  
PreDown = iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE  
ListenPort = 51820  
PrivateKey = XXXXXX

[Peer]  
PublicKey = XXXXXXXXXXX  
AllowedIPs = 10.8.0.2/32  
Endpoint = XXXXXXXXX:52035

Thoughts? What else to try? If I give up on the VPS and got the DNS route will it be better?

Thanks!