How does the Qbittorrent VPN work?

[ZestyChicken]

I don't really understand how the Qbittorrent docker compose works and was hoping someone could help explain it to a non-IT guy. I have my gluetun working using wireguard/Mullvad but I expose the ports in the docker-compose while you have it commented out. I'm guessing the magic is the "devices: /dev/net/tun" bit but I don't really get how that works. Also, you don't assign Qbit or Gluetun to a network so I'm curious how that all works. The way I have it working is assigning Gluetun to my "proxy" network and Qbit connects through that. I'm just nervous about connecting my vpn to the same bridge network as the rest of my apps. Maybe I shouldn't be....

htpc Beginner glueton snippet:
devices:
- /dev/net/tun
ports:
- "$QBITTORRENT_PORT:8080" # Exposing qBittorrent through Docker Host LAN IP
# # - 8888:8888/tcp # HTTP proxy
# # - 8388:8388/tcp # Shadowsocks
# # - 8388:8388/udp # Shadowsocks