r/gluetun

Hello, I recently decided I wanted to get into self hosting a media server using Jellyfin. It has largely been successful, however, I have one issue.

I have Jellyfin (native), Sonarr, Radarr, Prowlarr, and qBittorrent (all on docker). I have Mullvad VPN for privacy while torrenting and Tailscale for accessing Jellyfin from other networks.

Enabling Mullvad on my host machine (my laptop running fedora linux) works as expected and hides my IP address as a VPN does. However, this then stops Tailscale from working properly. I looked into this and came to the conclusion that I should use Gluetun to route only qBittorrent through the VPN and nothing else. This works, however, this then reduces my DHT nodes to zero, the number of peers and seeds drops significantly - sometimes to zero, and download speeds are far slower.

I can't find a solution to this online and was wondering if anyone here could help me?

Secondary question: Is all of this necessary? Could I just torrent without a VPN without facing repercussions? I'm in the UK (specifically, England)

Thank you

EDIT:

The relevant sections of my docker config:

services:
  gluetun:
    image: qmcgaw/gluetun
    container_name: gluetun
    cap_add:
      - NET_ADMIN
    devices:
      - /dev/net/tun:/dev/net/tun
    environment:
      #- WIREGUARD_MTU=1280
      - VPN_SERVICE_PROVIDER=mullvad
      - VPN_TYPE=wireguard
      - WIREGUARD_PRIVATE_KEY=[Private key]
      - WIREGUARD_ADDRESSES=[IP addresses]
      - DNS_ADDRESS=[DNS address]
      - SERVER_COUNTRIES=Netherlands
      - SERVER_SELECTION_STRATEGY=lowestms
    ports:
      - "8080:8080"
      - "6081:6081"
      - "6081:6081/udp"
      - "6011:6011"
      - "6011:6011/udp"
      - "6881:6881"
      - "6881:6881/udp"

  qbittorrent:
    image: lscr.io/linuxserver/qbittorrent:latest
    container_name: qbittorrent
    network_mode: "service:gluetun"
    depends_on:
      - gluetun
    volumes:
      - ./qbittorrent:/config
      - /home/[user]/watch/downloads:/watch/downloads
    restart: unless-stopped

So I'm having a hard time getting gluten to run. Pia as wireguard in a docker compose. But my router is a GLI.net Flint 2 and I can assign certain IP addresses to the VPN on it. I don't know what would be the better setup for that. The one on the router I can set to wire guard and it would route all traffic from server out the VPN. Which one would be the better option and why?

I am new to Gluetun (and qBitTorrent via Docker) and am really struggling to access the GUI. I've tried everything that is commented out - and in almost every combination conceivable. The qBit logs state that the server is running at https://localhost:8080 no matter what - and no matter what, https://[NAS IP]:18181 loads nothing (I also tried 8080 each time just cause). The Gluetun container is almost verbatim taken from the wiki, but I feel like I am missing something important in my qBit section. Might be more of a qBit problem, but I know someone here has some insight

ervices:

gluetun:

image: qmcgaw/gluetun:latest

container_name: gluetun

cap_add:

- NET_ADMIN

devices:

- /dev/net/tun:/dev/net/tun

volumes:

- /share/Docker/Glueton:/gluetun

environment:

- VPN_SERVICE_PROVIDER=expressvpn

- OPENVPN_USER=REDACTED

- OPENVPN_PASSWORD=REDACTED

# - FIREWALL_INPUT_PORTS=8080

# - FIREWALL_OUTBOUND_SUBNETS=192.168.0.0/24

restart: unless-stopped

ports:

- 18181:8080

qbittorrent:

image: ghcr.io/hotio/qbittorrent

container_name: qBitTorrent

network_mode: "container:gluetun"

depends_on:

- gluetun

environment:

- PUID=1000

- PGID=1000

- UMASK=002

# - WEBUI_PORT=8080 #also tried 18181

- LIBTORRENT=v1

# - WEBUI_BIND_ADDRESS=0.0.0.0 # also tried statically setting to my NAS IP

# - QBITTORRENT__WEBUI__HOST_HEADER_VALIDATION=false

volumes:

- /share/Docker/qBitTorrent/config:/config

- /share/Docker/qBitTorrent/data:/data

restart: unless-stopped

TIA!

Jokes aside from the clickbait title...

I'm up to collect from volunteers some VPN credentials, if you have some spare ones lying around

New Wiki section explaining why and how your credentials would be handled securely.

TLDR: to use for local debugging rarely, and in CI runs on every git commit to the master branch, around twice daily.

Thanks!

ps: just in case it's unclear I'm the gluetun maintainer

So a few days ago I ran out of ethernet ports on my router so I bought an unmanaged switch to plug all my ethernet connections into. Well doing that broke my gluetun container seemingly forever. I've been to hell and back with this container and it refuses to get rid of the stale network namespace and work properly again. At this point I'm willing to pay someone who's well versed with gluetun to hop on a discord call with me and help me get this thing to work again because it's been incredibly infuriating trying to get it resolved.

https://preview.redd.it/plvr41qsaczg1.png?width=1218&format=png&auto=webp&s=2e81768457ebd0d3e130b8d450fd527abe714342

Does anyone here use AirVPN with Gluetun? How’s your download speed?

I’m getting annoyed because my speeds are really inconsistent. I have a 10Gb fiber connection, but the VPN performance has been pretty bad.

Can anyone recommend a better VPN service?

Hey all! I Was wondering if anyone successfully got qbittorrent to announce ipv6 to the trackers?
I have gluetun set up for IPv6 and docker as well. It even has an IPv6 address on the tun0 link and qbittorrent also sees the IPv6 address. The trackers don't seem to sense that I have that available though so I was wondering if my config may need a bit of tinkering.

I have QBittorrent set up so that it uses all addresses on the tun0 link. Is there something I'm missing?

.env: ProtonVPN Support told me to have this setting

PROTONVPN_IPV6=on

Gluetun additional entry:

sysctls:
- net.ipv6.conf.all.disable_ipv6=0

Docker daemon.json

{

"ipv6": true,

"fixed-cidr-v6": "fd00:db81:8524::/48",

"experimental": true,

"ip6tables": true

}

So I've been running PIA and Gluetun now for months using openvpn.

This morning I had to update other programs in the same stack in portainer so I did a full refresh of everything in there. Now gluetun won't connect.

I get the error

ERROR [openvpn] Unrecognized option or missing or extra parameter(s) in /etc/openvpn/target.ovpn:8: handshake-window (2.6.20)

I have no target.ovpn file in /etc/openvpn and can't find evidence of it ever being there. Nothing I can find in tutorials mention this file.

I updated the servers:

docker run --rm -v /docker/gluetun/:/gluetun qmcgaw/gluetun format-servers -private-internet-access

My yaml:

gluetun:
  image: qmcgaw/gluetun
  container_name: gluetun
  cap_add:
    - NET_ADMIN
  devices:
    - /dev/net/tun:/dev/net/tun
  ports:
    - 8090:8090 # QBittorrent Web UI
    - 6882:6882 # QBittorrent Ports
    - 6882:6882/udp # QBittorrent Ports
    - 8888:8888/tcp # HTTP proxy
    - 8388:8388/tcp # Shadowsocks
    - 8388:8388/udp # Shadowsocks
  volumes:
    - /docker/gluetun:/gluetun
  environment:
    # See https://github.com/qdm12/gluetun-wiki/tree/main/setup#setup
    - VPN_SERVICE_PROVIDER=private internet access
    - VPN_TYPE=openvpn
    # OpenVPN:
    - OPENVPN_USER=<user>
    - OPENVPN_PASSWORD=<password>
    - SERVER_REGIONS=US California

My question is the title.

Docker file JIC I'm doing something wrong.

services:
gluetun:
cap_add:
- NET_ADMIN
container_name: gluetun
devices:
- /dev/net/tun:/dev/net/tun
environment:
- VPN_SERVICE_PROVIDER=private internet access
- OPENVPN_USER=USER
- OPENVPN_PASSWORD=PASS
- SERVER_REGIONS=Switzerland
- PORT_FORWARD_ONLY=true
- VPN_PORT_FORWARDING=on
- >-
VPN_PORT_FORWARDING_UP_COMMAND=/bin/sh -c 'wget -O- --retry-connrefused
--post-data "json={\"listen_port\":{{PORTS}}}"
http://127.0.0.1:30024/api/v2/app/setPreferences 2>&1'
- OPENVPN_PROTOCOL=udp
- FIREWALL_VPN_INPUT_PORTS=6881
image: qmcgaw/gluetun
ports:
- '30024:30024'
- 6881:6881/tcp
- 6881:6881/udp
restart: unless-stopped
volumes:
- /mnt/Tank/Apps/Gluetun:/gluetun
qbittorrent:
container_name: qbittorrent
depends_on:
- gluetun
environment:
- PUID=568
- PGID=568
- TZ=America/Detroit
- WEBUI_PORT=30024
image: lscr.io/linuxserver/qbittorrent:latest
network_mode: service:gluetun
restart: unless-stopped
volumes:
- /mnt/Tank/Apps/qBittorrent:/config
- /mnt/Tank/Data/Torrents:/data/torrents
version: '3'