Torrent Safely Over a VPN With This Simple One-Click Guide

[@bobsmith-dn1xw]

Hey, it actually works! Thank you so much for this video. My new favourite channel!

[@Jims-Garage]

Thanks, for your support 😊 glad it worked for you.

[@milesprue5496]

after three days of messing around with separate stacks for these apps and following other guides this video finally works. thank you

[@Jims-Garage]

Great to hear!

[@jdcpr]

Finally found how to specify to user a container for the networking. The most important piece of info for me, " network_mode: "service:gluetun"". Thank you, everything automatized now. 👍🏼

[@Jims-Garage]

You're welcome 😁

[@scuzzyhoulihan9853]

Life saver video I was trying to figure out how to access my docker when it was routing via gluetun. I just needed those port mappings and boom. Thank you sir!

[@Jims-Garage]

You're welcome 😁

[@wotnix]

Hi Jim! Some have the ability to point things out in a understandable way. Just plane and simple for the common man. You are one of them! Thank you for the video.

[@Jims-Garage]

Thanks, really appreciate the feedback

[@wotnix]

@@Jims-Garage You're welcome.

[@xanzut]

The gluetun can be separate to single container and use `network_mode:"container:/gluetun"` makes the single gluetun container can be used for every container

[@Jims-Garage]

Thanks, that's useful to know.

[@jims888]

Do we need to add the new container's port to gluetun compose file and then redeploy gluetun?

[@xanzut]

​@@jims888 yes, those step are the same

[@jims888]

@@xanzut Thanks

[@tightning]

Great video as usual, very informative and brilliant step-by-step instructions. Apps without dark mode should be cast into a digital black hole!

[@Jims-Garage]

Thanks! I totally agree with you on the dark mode 😂

[@Evakron]

This was super helpful, thanks so much for the video and the great info on your github. With the great commenting and docs i was able to adjust the yaml pretty quickly and everything worked on the first deploy, which I think is a first for me. Thanks!

[@Jims-Garage]

That's awesome, thank you for the feedback 🙂

[@Evakron]

@@Jims-Garage Long shot question- have you had any experience getting Nord meshnet running in a container to give remote access to local hosts?

[@Jims-Garage]

@@Evakron no, unfortunately not. I'll have a look asap

[@chrisumali9841]

Thanks for the demo and info, have a great day

[@Owner101Acc]

Just a small addition to the compose-file, but correct me if I'm wrong. To prevent gluetun being active too late, the "depends on" should be depending on gluetun being healthy: depends_on: gluetun: condition: service_healthy

[@Jims-Garage]

That could be an improvement, I'm not sure if healthy means it has a valid connection though? I would make sure I use my firewall in front of the container as well.

[@scormega]

I tried this but it seems like depends_on is no longer supported. Did you have any luck?

[@Hombre1968]

Excellent video, keep up the great work!

[@Jims-Garage]

Thanks!

[@hyperprotagonist]

Love to see a proxmox lxc stack setup this way!

[@Jims-Garage]

I will come onto LXCs soon. Might not be the best idea to be downloading torrents on an LXC though due to security (they share the host's Kernel and it's not always guaranteed what you're downloading...)

[@InsaiyanTech]

@@Jims-Garagedoesn’t doing this in unprivileged fix that host issue? Or maybe I got that wrong concept

[@nkoskinen]

Thanks for the concise explanations. I tried deploying the stack and I get an 'error gathering device information while adding custom device /dev/net/tun: not a device node. I've tried creating this folder system already. Apologies if this is basic stuff, this is all very new to me.

[@maroncito]

Great tutorial, works like a charm! Thanks!!

[@Jims-Garage]

You're welcome 😁

[@cjmoss51]

You actually helped me resolve the issue of why mines wasnt working. THANK YOU!!! The wiki of gluetun was 0 help.

[@Jims-Garage]

Glad it helped you 😀

[@mattb7895]

I see this video is a year old, and you've since made a video on LXCs. Are you still running your *arr stack with Docker? From what I understand, a lot of people on Reddit are running each of the *arrs in its own LXC. I'm running an R730XD, so would you go for a Docker Compose deployment, or would you prefer the LXCs? Your videos have been invaluable to my home lab journey, so thank you for everything you've shared. I'm a total noob, but I'm getting there little by little.

[@Jims-Garage]

@@mattb7895 docker VM for the added security. The r730 has a ton of capacity so the minimal gains of an LXC are not worth it IMO

[@CharlesFlippet]

Thanks for the video, it helped me set up my thing real fast. Just a request, see if you can make your video frame a lot smaller from now on please, thank you.

[@Jims-Garage]

Thanks, noted and fixed already in later videos.

[@CharlesFlippet]

@@Jims-Garage that's good to know, cheers!

[@cetrockz]

this arr stack with docker is running on vm or lxc container? if vm how to share zpool on proxmox to this arr stack?

[@Jims-Garage]

It's on a VM. You mount your pool to the VM, then map to the container.

[@clairerovic]

I have not drilled in to the docker-compose very far as its Friday night here. I would have thought all the download folders would point to the same location. So if Sonarr/Radarr drops a torrent file then QBit will see it.

[@Jims-Garage]

Good spot, thanks, let me double check :) I sometimes end up tweaking the config afterwards so always refer to the current file in GitHub

[@cyrilpinto418]

This is a wonderful solution and something I’m really interested in; wrt to your comment about storage , I’m running Proxmox and have no issues in setting up a Zfs pool and doing a bond mount via editing the config file. If I go down this route what will the code in volumes: look like? /mnt/media (for example). Also will we still require to port forward in OpnSense? Sorry if these questions sound dumb, but just trying to get a grasp on things.

[@Jims-Garage]

@@cyrilpinto418 yes, the mount will look something like that. Essentially it's wherever you choose to mount it. You do not need to port forward, the VPN connection is a bidirectional tunnel.

[@riccardoshrives5881]

Another banger, Jim! I'm just curious... You mention at 3:51 routing it through traefik. But how would that work? Doesn't that all need to go through the proxy network? I tried my hand at popping over the all the labels and tried deploying but it failed saying that "service prowlarr declares mutually exclusive `network_mode` and `networks`"

[@Jims-Garage]

Thanks. You should be able to use an external Traefik service

[@AngelCerveraClaudio]

@@Jims-GarageA video about how to do it would be great. Also, access by domain instead port would be even better.

[@Jims-Garage]

@@AngelCerveraClaudio I'll try to remember to update it. You should be able to copy and amend the Traefik labels off most of my other videos.

[@Evaldenis007]

For me everything worked when I added networks: - proxy to glueten config in docker-compose file and then at the end of docker-compose networks: proxy: external: true Of course traefik lables must in place and network "proxy" already created

[@johnhiggins2696]

Is there a way to connect to gluetun as a proxy using this method?

[@Jims-Garage]

@@johnhiggins2696 you can proxy any container through gluetun by adding the network part. I don't know of any easy way to route non container traffic but imagine it's possible

[@m.epictures6344]

Hi Jim, love the vids! Are all these docker containers from all your vids OK to put on one VM instance or should they be split into a few VMs?

[@Jims-Garage]

You can run them all on single Docker host. I've tried my best to manage port conflicts but I could have missed something. That should be all you'll ever need to change.

[@m.epictures6344]

@@Jims-Garage nice one thanks

[@demiroth]

Great video! Just noted at the very last segment, when qBittorrent is up and running, the client indicates that you are firewalled (the fire icon on the bottom row). I have a similar setup and is stuck with this final issue, ie download speed is at 0 - do you know any solutions to this problem?

[@Jims-Garage]

@@demiroth make sure your outbound rules allow the VPN and also the VPN allows inbound. I always have the firewall icon and it works fine.

[@businessgoose3725]

Awesome content, thank you!

[@Jims-Garage]

You're welcome 😁

[@Andy15792]

This was super helpful. Missing port mappings and now things are working. Trying to test if things halt if gluton goes down and containers don't leak any traffic without it. Do you know if this works as Kill Switch option that we see in VPN providers client?

[@Jims-Garage]

Should do as it's the only network route. You could also add a firewall rule on top to help.

[@Andy15792]

@@Jims-Garage got it. Do you have a video on firewall? recently discovered your channel and going to go through lot of content from it now. would be great if you can point that out. Thanks!

[@Jims-Garage]

@@Andy15792 yes, look for Sophos XG and OPNSense

[@etech838]

I have also implemented jellyfin in the gluetun compose. I have a question about this. Can other people who use the same VPN server access my Jellyfin? Do all applications have to be in the gluetun VPN or can some be used without a VPN?

[@Jims-Garage]

@@etech838 only if your VPN supports port forwarding, most don't.

[@etech838]

@@Jims-Garage Thank you very much for your quick response. Surfshark doesn't seem to support port forwarding. Can you tell me whether only porwlarr and qbittorrent need the VPN connection or whether sonarr and radarr also need it? I'm not sure about the last two. Thank you in advance.

[@cybr774]

I'm trying to set this up with a wireguard server that I already run on a VPS. Unfortunately it doesn't work when I configure the vpn provider to be custom

[@Osk_97]

At lines 19 and 20 of your docker-compose file: volumes: - /home/ubuntu/docker/arr-stack:/gluetun So did I misunderstand or gluetun container has to have all the other container's volumes inside of itself? Should it be: - /home/ubuntu/docker/arr-stack/gluetun:/gluetun ? Thanks in advance!

[@Jims-Garage]

Thanks, good spot. I think you're right 👍 I'll check later

[@kiranjadhav4125]

Amazing videos and great content. Thank you for everything. You mentioned we can also use the traefik proxy to make use of SSL certs accessing Radarr and Sonarr. How do I use it? Would you be able to upload a code in your Git Hub for the arr-stack using traefik and Local DNS defined in the PiHole? As the proxy network is separate how do we make sure arr-stack uses only the Gluetun network and not the proxy network to download?

[@Evaldenis007]

For me everything worked when I added networks: - proxy to glueten config in docker-compose file and then at the end of docker-compose networks: proxy: external: true Of course traefik lables must in place and network "proxy" already created

[@NFvidoJagg2]

importent gacha network_mode means containers will be localhost to each other instead of by container name. This can be an issue if migrating an existing install to use gluetun

[@wotnix]

Hi James, I' am stuck at Glueton. For now i don't want tot use the Nordvpn Wireguard option and stick with Lynx. I'am confused what i must put in the Glueton fields. Also: Do i need the Nordvpn Linux client? Otherwise i think you can't connect to Nordvpn.

[@Jims-Garage]

Lynx is WireGuard with another name. Use UDP if you don't want to use lynx. It'll be just as quick.

[@aamirm5117]

Will routing a container through a VPN prevent me from accessing the container’s web interface over my normal LAN?

[@Jims-Garage]

Yes, you are able to.

[@wheelz6812]

I have a pretty similar setup but I also decided to bind the interface in qbit's settings (im also running the whole thing in proxmox). I'm wondering how reliable this setup is and if you had any problems with leaking.

[@Jims-Garage]

Pin it behind your firewall to restrict to the VPN IP range, that should help

[@wheelz6812]

@@Jims-Garage Thank you!

[@Dany-em6xi]

Finally I found a clear explanation about how to install everything, thank you so much! I was able to make gluetun works perfecty. However then I follow you other guide to download everything on a NAS that I mount in "/media/share" however, I'm not able to make neither QB nor Sonarr to write on a folder that I named downloaded, can you help on this? Thank you!

[@Jims-Garage]

Have you tested that your SMB is mounted correctly first?

[@Dany-em6xi]

@@Jims-GarageYes, I'm able to read and write from outside the containers with no problem (again thank you for your other guide!) My problem is that QB does not write on the NAS. Should I change this: " - /home/ubuntu/docker/arr-stack/qbittorrent/downloads:/downloads" to this " - /media/share/downloads:/downloads" ? I was trying it but seems not enough, do I need to add other parameters to the containers? 🙏

[@nihoniumog5185]

Hi jim. I have followed your guide step and i have successfully make the qbittorrent. I wonder if i can pass gluetun to other containers such as dockur/windows? It is windows in a container

[@Jims-Garage]

You can, just replicate the part in the container yaml that references Gluetun as the network. That will send all traffic through it.

[@nihoniumog5185]

@@Jims-Garage i’ve tried but encountered some error. Related to kvm network. Im not very good with docker so right now i just give up😅

[@alexsmith6724]

"so if we log into our host and navigate to our docker compose location". Can you explain every part of that? I have no idea how to log into our host, have no idea how or what my docker compose location is, and have no idea what a sedo docker compose -d means. also, what the hell is the point of the docker GUI if you are doing all of this with command prompt? Why even have a GUI ?

[@Jims-Garage]

You want to install Docker on a machine or VM (that's the host, I have a video on it). Once you've done that copy over the docker compose file (this is the configuration file for all of the apps, the containers). You use the command sudo docker compose up -d to launch the containers. You can load the compose into Portainer and do it that way, but I prefer to explain to people exactly what it's doing. Plus, compose is faster as you don't need a gui.

[@alexsmith6724]

@@Jims-Garage I think this is really just useless. Why am I downloading a .yml file? I just don't understand it. I have docker desktop installed. Why is .yml filetype not associated with docker executable file? I just don't get it. Why does this app even exist if we are using command lines and poorly formatted text file configurations. I tried to force docker desktop to open the .yml file by manually associating the file type. That doesn't do anything. It should. Beyond the general issue that I still have no idea what my docker compose location is. All I know is I got docker desktop to run. I had to disable legacy command prompt. I can even have it pull apps. It downloads them somewhere (no desirable clue where that somewhere is), and it gives me zero ability to edit the configuration files.

[@anjelas2708]

I have already installed everything else... Is there a way to set up a vpn afterwards because some indexers are blocked by my ISP. Also are there any free options ?

[@Jims-Garage]

Yes, setup the VPN then edit the existing stacks to use that network. I wouldn't trust a free VPN, I don't know of any.

[@dirgosalga]

If I run this on a VPS, is the VPN gonna make it impossible for me to reach the VPS? That's the problem I'm having right now. What I want to achieve is run all the traffic of the torrent client through the VPN, what Sonarr and Radarr do is more or less unimportant, I would imagine.

[@Jims-Garage]

No, simply add a WireGuard container as well and connect to it via that. Check my WireGuard video out.

[@dirgosalga]

​@@Jims-Garage, thanks for the suggestion. In this case, it is not viable option for me. My users are used to having access directly by using FQDN that available over the internet, getting them to install a VPN client would be too much right now.

[@Jims-Garage]

@@dirgosalga you can still expose normally. Gluetun is only sending outbound over the VPN (hence how you can access locally)

[@sreejithngvr]

localhost:8085 showing error can u help? container running without any problem

[@Jims-Garage]

Put the IP instead of localhost.

[@ChaseSmith-g9j]

How do I stop Plex from using the VPN? Remote access doesn't work

[@Jims-Garage]

@@ChaseSmith-g9j don't add it to the gluetun network

[@ChaseSmith-g9j]

@@Jims-Garage Thank you for the quick reply! I only have gluetun and qbit in the stack. I was just assuming that Plex is suing the vpn ip. Could it be another issue?

[@Jims-Garage]

@@ChaseSmith-g9j Plex uses your internet IP address

[@ChaseSmith-g9j]

@@Jims-Garage What do you think is the cause for no remote access

[@Jims-Garage]

@@ChaseSmith-g9j you need a port forward on your firewall pointing to your docker container (e.g. port forward 32400 to your docker IP)

[@petrosposiedon3210]

What did you mean by when you said you can access those services through the ip address of the docker container? Which ip am I supposed to use if I want to aces any of the services I have running under the vpn setup?

[@Jims-Garage]

You'll access the services locally by going to dockerIP:ServicePort

[@NguyenCungHoaHien]

I followed your video and managed to implement the stack on my Ubuntu Server (in Promox) with CasaOS. I checked the details in Portainer and found that gluetun is connecting to different locations each time I started it, so it's good. But I added the tor file to download ubuntu server iso for testing as well as another magnet link, but QT doesn't seem to connect to the internet. One record stays as stalled, and one stucks at Downloading metadata. The sub folders used for the stack are populated correctly on my disk. Any hint?

[@NguyenCungHoaHien]

Never mind, I restarted qT after the whole stack has started and managed to get it work.

[@Jims-Garage]

Awesome, thanks for the response. Sometimes the container order can be a little iffy.

[@NguyenCungHoaHien]

@@Jims-Garage Thanks again mate! This has worked great for me. I've only got 2 minor issues: One is I can't go to the terminal/console of each container in this stack. Portainer keeps saying "Error: Unable to retrieve image details". Secondly, I tried to map a volume from a shared folder on my local NAS to store the downloads here but QBT doesn't seem to be able to read this mapped folder inside the container. I use CIFS volume mount directly on Portainer. Any hints, please?

[@Jims-Garage]

@@NguyenCungHoaHien in Portainer change the drop-down to /bin/sh and see if that works. Not sure why you can't see the mount, it should just be a folder. Likely a permissions problem.

[@somfierce]

I can't access the web UI's of any apps :( is it because I'm trying to use Mullvad and they discontinued port forwarding?

[@Jims-Garage]

This routes traffic out over a VPN, it's not a VPN to connect remotely from. You'd likley want to have WireGuard or something similar if you want to access local services remotely.

[@somfierce]

​@@Jims-Garage I was confused. Couldn't tell the error since the containers kept restarting. I ran the same docker-compose.yml on another machine and it worked with no problems! 👍

[@joeaugier817]

followed this and it works flawlessly, however I cant connect sonarr or radarr to my plex container. Any ideas how I'd do this?

[@Jims-Garage]

Make sure that they're on the same network.

[@joeaugier817]

I couldn't connect sonar or radarr as i'd need to give them and external IP as they're directed through the vpn. However I reconfigured plex to update the library when changes to folder directories were detected so problem solved

[@astavn]

Every time I restart gluetun it changes my Drive names. System is now up to system5. Any idea what’s up with that?

[@XerkoGames]

Hello! Does the volumes have to be paths as the existing dockers or should it create its own?

[@Jims-Garage]

Volumes should be dynamically created.

[@XerkoGames]

@@Jims-Garage Thank you so much! This has been the best tutorial I've found yet and I watched so many. I finally got it working!

[@Jims-Garage]

@@XerkoGames you're welcome 😁

[@LCaesar23]

Can't access qbittorrent web ui. Tried a million different ways.

[@Jims-Garage]

How are you trying to access it? IP:Port or through a reverse proxy?

[@AndersBergwall]

Wow :) Everything works except one little thing, i am running a QNAP nas and using container station for my "application" all containers are running but i think i have one issue? how do i give access to my "NAS" storage? i think i only can access stuff "inside the containers". ?

[@Jims-Garage]

Mount a share into the container. Might need to create a share first.

[@AndersBergwall]

@@Jims-Garage And this is done from adding it under volumes: part in configuration file?. sorry i am a real beginner in this container/docker stuff :)

[@Jims-Garage]

@@AndersBergwall Correct. Left of the colon : is the host location, right of the colon is where it's mounted inside the container (you typically never change the right hand side)

[@AndersBergwall]

@@Jims-Garage ⭐⭐⭐⭐⭐

[@AndersBergwall]

If you have time for stupid questions then here is one for you :) I have managed to follow this guide and everything is working :) However, when using the qbittorrent download AND i THINK when i use the unrar once completed option, the /tmp folder of my QNAP gets filled.. this space is only 400mb (why?) maybe its something i configured when i first setup the nas (but i dont think so)... so any suggestions? my guess is that unrar stores temporary in the /TMP folder, i tried move /tmp to another drive or location but.. yeah.. not successful (or dont know if i should).

[@Arthzil]

I was hoping to get it running for ProtonVPN free tier. Logs say that Gluetun connected fine, containers are available locally but qbit doesn't download and containers don't see each other :(

[@godara3353]

You can’t torrent with the free tier of protonvpn

[@rodolfoperez4156]

Happen to know if an ovpn can be used and how? Instead of username and password. Thanks

[@Jims-Garage]

Yes, you can github.com/qdm12/gluetun-wiki/blob/main/setup/openvpn-configuration-file.md

[@rodolfoperez4156]

@@Jims-Garage thanks Jim! I'll try this out

[@nachete9752]

Can you do a tutorial for this but for truenas scale?! Thanks!

[@ronsone8373]

any way to run the docker compose automatic on reboot ?

[@Jims-Garage]

Why would you need to? Cron can do this though.

[@ronsone8373]

@@Jims-Garage If my Zimaboard does a reboot (for whatever reason) now I need to manually SSH into the board and run docker compose up... not a big problem but still

[@Jims-Garage]

@@ronsone8373 change the restart policy to always.

[@kurtbrown7504]

Can you show setting this up in k3s

[@Jims-Garage]

Check out my Docker Compose -> Kubernetes migration video and have a go. One thing to consider is that you don't want to download to your longhorn or replicated storage (that will drastically increase wear).

[@wat7842]

nice. looks like its all working (i just have gluetun and QBT running) when i change the "~~~/downloads: /downloads" line in the QBT part to a dir that is a mounted nfs share to my library of torrents QBT is unable to write to it. if i just leave it as : /downloads works fine but the VM is little and i do want to write to the NAS. ive messed with permissions til im blue in the face. if someone sees this and has a clue lemme know! This is the perfect solution to my dumb windows vm with surfshark wasting resources when it just sits and does one thing. i can use that license for something i need a desktop for. thanks!!

[@Jims-Garage]

It's almost certainly a permissions issue. It might be worth running as root to check things first, then reintroducing proper accounts. I'm guessing you've checked the host can access the nfs?

[@wat7842]

@@Jims-GarageI think it was. i spun up a fresh ubuntu server since I had done some tinkering on the first one and went step by step and setup autofs and bingo it was fine. downloads to the share fine. the one last little thing you might know is when using wireguard (surfshark) the portainer logs show it being good as far as i can tell but QBT doesnt see any trackers so nothing downloads (im not a torrent power user) If i use the pertinent gluetun settings for OpenVPN it works just fine. its much faster than the windows VM i was using. Thanks Jim! I subscribed

[@408427]

Can you add radarr

[@Jims-Garage]

Have a try at adding yourself, it's the same as all of the other containers. Jump on Discord if you're stuck.

[@Liam.s]

Is this setup safe? For ip leaks and what not

[@Jims-Garage]

Yes, but worth limiting egress with a firewall rule as well. Limit it to only the VPN IP address space.

[@Liam.s]

@@Jims-Garage thanks! Would running iptables or ufw on the vm I hosted the dockers on be sufficient?

[@Jims-Garage]

@@Liam.s yes, that's helpful.

[@Liam.s]

@@Jims-Garage you’re amazing man! Thank you!

[@Jims-Garage]

@@Liam.s you're welcome. Hop on Discord if you haven't already (and hit the sub please 😉)

[@CarlDoesStuff]

Title says one click. Shows no one click step. what did i miss?

[@Jims-Garage]

Configure your compose, hit return

[@bibekparajuli6565]

was struggling with this for hours. Your guide was so clear, thank you very much....

[@Jims-Garage]

Glad to hear it, thank you

[@goodcitizen4587]

To deploy this on proxmox, what's a good way to run docker? A ubuntu vm?

[@goodcitizen4587]

ttech has it 'proxmox ve helper-scripts' > Docker LXC

[@Jims-Garage]

Yes, I have a docker installation video earlier on.

[@xiLike2Doitx]

Can this be modified to run on kubernetes?

[@Jims-Garage]

Yea, this could run in Kubernetes. Trickier but doable.

[@floriantthebault521]

​@@Jims-Garage That would be really swell to have some tips on that front.

[@faraguti]

Is there a way to add a kill switch on this template? If my vpn disconnects or stop working, qbittorrent stops. Does that make sense?

[@Jims-Garage]

I would use your firewall. Restrict outbound traffic specially to an IP address associated with the VPN.

[@evanjury8478]

I have gluetun and qbittorrent up and running with no apparent errors but when i add a test torrent file i'm getting no download speeds/connection. I have given chatGPT the logs for gluetun and qbittorrent and he says its mint but gave this as a step to try. "Verify that port forwarding is correctly set up for the ports used by qBittorrent (8085 for the WebUI, and 6881 for TCP and UDP). Without proper port forwarding, incoming connections might be blocked, affecting torrent downloading." Could this be the problem? Is it safe to set up that port fowarding in my router?

[@Jims-Garage]

Port forwarding shouldn't be necessary as the VPN will do that their end and send the traffic back down the tunnel. I would check gluetun logs to ensure that it has connected.

[@Urbancombat423]

Great video, but I just put gluetun in a container alone because I like that more, so I had to use "container:/gluetun" in the network_mode and also remove the depends-on. I was wondering what would happen if gluetun goes down, I guess the connection of qbittorrent must stop because of network_mode: "container:/gluetun" right?

[@Jims-Garage]

Correct 😁

[@deanshaw3844]

Newbie here. Been following your videos intently, and things seem to be working. Proxmox unprivileged LXC with GPU passthru, mounting my NAS as /mnt/nas, and running jellyfin server with GPU transcoding. Currently working thru setting up your ARR-Stack. Have it up and running, and can download to the docker-compose default volume paths in your yaml file, but I can not get qbittorent to download to the NAS. from shell, I can cd to my shared NAS folders, and they seem to be working fine, but when spinning up the docker-compose file, and then downloading in qbittorrent using the path /mnt/nas/download/qBittorent I get instant error. If I change the docker-compose back to the default path you specified in the ARR-Stack, it works. My NAS is TrueNAS Scale.

[@Jims-Garage]

@@deanshaw3844 thanks! It's difficult to diagnose without logs etc but it's very likely to be an incorrect mount location or permission issue

[@deanshaw3844]

Thanks for the reply. I worked thru 3 of your guides, culminating with the ARR-Stack. When spinning it up, I got errors about Network Tun, directory not existing. Discovered the network node was not available on unpriv lxc, so found some instructions from another youtuber to add these commands into my lxc.conf file. lxc.cgroup2.devices.allow: c 10:200 rwm lxc.mount.entry: /dev/net dev/net none bind create=dir When I added the above lines below the lines added in your gpu passthru video, the lxc would not boot. I compared his commands to yours, and discovered that the command 'optional' was not there, so I added that command in between bind and create, which made it like the following: lxc.mount.entry: /dev/net dev/net none bind,optional,create=dir After adding 'optional' I found the lxc booted correctly once more, and the net folder was passed thru to the lxc, and tun was available for use. Then I was able to spin up your docker compose file for the ARR-Stack With the defualt /home paths, qBittorrent works fine, but if I change the path in the docker compose yaml to the path I can type from shell and access my nas shares, I get instant error. the path I used was - /mnt/nas/Download/qBittorent not sure if that is correct syntax? From proxmox shell, if I type ls /mnt/nas I see all my shares on the nas. I can create folders, add files.delete files etc. Only thing I think I did different, is other youtuber suggested not using 'root' with lxc, so advised to adduser, and then add that user to sudo group. I think when I installed docker and portainer following your guide, that I installed it using that user name and not looged in as root. Not sure if that makes a difference. I seem to be able to access the mounted NAS shares when logged in as root or the added user.

[@deanshaw3844]

The other youtuber has a stack he calls the Ultimate Docker Media Server. (UDMS) I started following his vide, but apart from installing ubuntu lxc, nothing else is his vids I could get working. Then after finding your channel, I followed 3 of your tutorials, and got all three working, which is kind of a miracle for this newbie. Previously I was using the truecharts catalog inside TrueNAS scale, and was using qBittorent with gluetun. Then when truecharts support was pulled in latest Truenas update, I setup the native Truenas scale qbittorrent, and tried to link it to gluetun unsuccessfully. Then I happed across your docker guides, and jellyfin and gpu passthru, and NAs shares on lxc. It seemed a great alternative to once having it all work in TrueNAS Scale, without having to know much of anything. (it just worked) (grin) I got pretty close tho, thanks to you!, but must have done something stupid. I have read tho that qBittorent has some kind of issue accessing NAS shares, so thought that was interesting. Thanks again for your wonderful videos.

[@deanshaw3844]

Sorry about all the typos in above replies. (bit tired) I missed out an 'r' in qbittorrent.

[@deanshaw3844]

Got it working!. the default PUID and GUID were 1000. I changed them both to 10000. I changed the path to /mnt/nas/Download/qBitorrent:/downloads Then in qBittorent set the download path to /downloads I can see the downloaded files from linux side, and it has created another folder in qBittorent called download. However, from Windows, when I go to the SMB share, the folder and files are invisible, but the original SMB share of same name is there, and empty. Guess I have to change some permissions inside TrueNAS now? Making progress tho. I apologize for all the postings.

[@SwaggerMeister72]

Followed all this and it's definitely working, but I'm not well versed in arrstacks. How would I direct things to download to a network share folder?

[@Jims-Garage]

You would need to mount a network share to the host machine, then amend the volume mount to use the share.

[@noormohammedshikalgar]

Hello, i have one problem here, if any one can help it would be life saver for me i just copied the docker-compose from the above video, and followed the steps now i can add download client but cant add sonarr to prowler why ?

[@Jims-Garage]

You should be able to add any container behind gluetun.

[@b1gdan]

does anyone have time to do a discord chat and walk me through how to do this on my NAS? Pleassssseeee

[@Jims-Garage]

Create a thread in discord, I imagine you'll have some help

[@gaidin]

I love this stack so much, and adding panels to my homepage dashboard for it all is awesome. However I've moved everything else over to LXCs for simplicity (inc backups) and this is the last one I am intimidated to try. Anyone else out there got gluetun running in an LXC and used it to route the arr stack through?

[@Jims-Garage]

Having it in a VM as opposed to an LXC is a worthwhile security buffer IMO. Should be possible in an LXC though.

[@gaidin]

@@Jims-Garage Thanks Jim. I followed Don's guide to get an openwrt router lxc set up and running a VPN client....but now my test sonarr lxc is on a different network when using that as my bridge haha. The complexity of mounting NFS shares to my TrueNAS is making my brain hurt. Maybe I'll just leave the arr stack in docker on a Ubuntu server VM with gluetun. It's nice and contained and I don't really have system resource limitations.

[@kevinhughes9801]

Brill stuff thanks

[@Jims-Garage]

Glad you enjoyed it

[@petrosposiedon3210]

Maybe you can help me out. I’m using omv to run the docker compose file, I finally managed to up the docker file you example with a few minor tweaks to include different services and remove jackett. When i check the status in Portainer everything is healthy except gluetun. The logs state a timeout error. Idk what to do next I’m using TorGuard btw as my vpn provider.

[@Jims-Garage]

Do you have any logs from the gluetun container? Could be as simple as wrong credentials

[@petrosposiedon3210]

@@Jims-Garagewell I think it somehow resolved itself. After repeatedly taking it down and then going back to check if anything was copied incorrectly and bringing it back up it would still do the same thing. Until I left it alone and gluetun would keep retrying the connection. After about several retries I guess it finally made the connection and it gives me a healthy status. I know it gives off the warning as well that timeouts are a sign that wireguard might not be working correctly but when the logs shows the ip address, it’s using the one given from my vpn somewhere in Canada. (I’m not in Canada)

[@Johnectar]

Great video, when I use the standard localip:port for portainer this works as per usual. When I change this port to the qbittorrent port. There is no longer anything working. Have I got something wrong. Is there a new ip address?

[@Jims-Garage]

It should be using the IP address of the virtual machine

[@Johnectar]

@@Jims-Garage I managed to fix it. It turned out that qbittorrent uses localip: port instead of https. Probably a silly thing I overlooked. Thanks for the video though. Although there are lots of useful docs out there having a video of someone doing it is really helpful reference.

[@InsaiyanTech]

so should i setup docker on my proxmox or should i add this to my trueness since its doing all my vpn traffic and my torrenting? or can you run 2 dockers? have this setup on both?

[@Jims-Garage]

I would run this on Docker in a Proxmox VM. You can then mount a NAS network share into the Docker Torrent container, best of both worlds IMO.

[@InsaiyanTech]

@@Jims-Garage oh ok so your running everything on in this series that evolves docker through proxmox then doing network shares that’s just where I was lost following the series now I can start this journey just waiting on a motherboard then I can start the firewall stuff first. Then go into the nas then all the trafic network stuff.

[@norbertthefish]

don't suppose there is a blog post on this with the yml included? i know I'm asking a lot

[@Jims-Garage]

All my config files are on my GitHub, check the link in the description.

[@norbertthefish]

@@Jims-Garage nice one, found it thanks

[@paulcurran5563]

4:46 did I miss the bit about how to get Nord VPN wireguard credentials?

[@Jims-Garage]

It's in the comments on files on GitHub

[@paulcurran5563]

Thanks for replying, but I think I need a whole video on this I've been at it for 2 days and still no joy 😂

[@golvellius6855]

Webui for qbittorrent doesn't work, all containers are healthy and working as intended. Do I am missing something?

[@BabyJesusBro]

I was able to follow every step until the very end, and for some reason I cannot enter admin admin for the user and password, I don’t understand where you are, are you in ubuntu? I thought we were doing this in the server, how is there a gui?

[@BabyJesusBro]

when I go into my qbittorent.log file, I see "WebAPI login failure" 10 times, and after 5 times the reason changes from invalid credentials to IP has been banned

[@Jims-Garage]

The end part is the qbittorrent gui, use your credentials specified or leave blank for the default (I think)

[@BabyJesusBro]

@@Jims-Garage but where do i need to access this from? Within the ubuntu machine or on my host machine? Does it not matter? Also how do I link my qbittorent to my surfshark that is within the container, to only work when it’s on? If this is too much trouble to answer, any guidance towards a community that could assist would be greatly appreciated!!!

[@Jims-Garage]

@@BabyJesusBro you access it through any machine's web browser (e.g. gaming PC) as long as it has access (if it's on the same network you're fine). I don't use surf shark but I believe that gluetun supports it, their documentation will help you out. Consider joining my discord and creating a help thread, there's loads of great people on there.

[@HendersonHood]

What if I don't want to use a VPN: how would the docker-compose file change?

[@ninji4182]

you missed the part where to obtain the wireguard key

[@Jims-Garage]

It isn't officially supported but this script should help you. gist.github.com/bluewalk/7b3db071c488c82c604baf76a42eaad3

[@ninji4182]

@@Jims-Garage would you happen to be able to do a setup for VPN Unlimited?

[@rexhavoc376]

I've found this super easy to follow along, with only one question. Do I need to create an OpenVPN account? I have NordVPN and can't get wireguard to work. Thanks for the awesome content!

[@Jims-Garage]

No, openvpn is free to download and use. I recommend using UDP over WireGuard for NordVPN (or use nordlynx)

[@rexhavoc376]

@@Jims-GarageIf I were to use nordlynx how should I change the docker compose info?

[@Jims-Garage]

@@rexhavoc376 I don't know if gluetun supports it. You'll need to check their documentation.

[@rexhavoc376]

@@Jims-GarageAlright. How do I know what my openvpn_user and openvpn_password is? Do I need to set up openvpn in another container first? Thanks again for all your help

[@Jims-Garage]

@@rexhavoc376 log in to your NordVPN account and find the credentials for manual config

[@zajmer]

Help! banging several days! using same setup - working gluetun and e.g. qbittorrent - how can i access webgui after switching it to use gluetun network? normally eg. 192.168.1.25:8181 would work. it is ip of my qnap locall adress running docker. I'm reaching it all over my home network. But when it is connected to gluetun network with exopsed there same port - what adres ip have i use? thanks!!

[@xVarga]

localhost:port

[@blakestandal8294]

@@xVarga i have a similar problem and i've typed every IP i got... portainer says 127... IPs while my localnet is 192.168... i feel like i'm missing an easy step. haha

[@xVarga]

@@blakestandal8294 for me it is 192.168.x.x:8085 this is one of the ports of gluetun, it is for wireguard, just try all of them. Idk what else to say unfortunately.

[@biggusdickusss9377]

Hi Jim, i saw the similar method on other youtubers video too. Since this method requires you to remove port mapping for the jackett/qb etc, do they only use defaults? No way to change it?

[@Jims-Garage]

I think you can change the ports either with environment variables or just in the config.