Gluetun with Proton VPN with qBittorrent with Docker

[DancingPotatoes]

Hello, total beginner here.

I'm trying to set up ProtonVPN, Gluetun, and qBittorrent with a properly forwarded port, but I can't figure it out. Since Proton assigns a random port, is there a compose file or guide that explains how to set this up?

I found some guides, but they seem outdated, and I'm not sure how to adapt them to the latest setup.

Also, as a side question—do Prowlarr, Sonarr, and Radarr need to run through Gluetun as well, or do they just communicate with qBittorrent? I'm a bit confused about how this works.

Any help would be greatly appreciated!

[tfp1]

Here's a docker-compose.yml that's 90% of the way there. Look to update all the variables ($wgPublicKey) with your values.

For servarr services, you can run them through gluetun as well. All ports need to be added to the gluetun container. If those services are not running in the same docker-compose.yml, change network_mode: "service:gluetun" to network_mode: "container:gluetun" assuming you name the gluetun container gluetun.

Gluetun will write the port you receive from protonvpn to a file and the gluetun-qbittorrent-port-manager container will read that file then write to qBittorrent for you every 60s.

In qbittorrent, make sure you check Bypass authentication for clients on localhost, then you don't need to worry about passing auth into the port manager container.

services:
  gluetun:
    image: qmcgaw/gluetun:v3.39.0 # Pinned to this version to avoid issues in v3.40+ specific to protonvpn
    container_name: gluetun
    restart: always
    stdin_open: true
    tty: true
    cap_add:
      - NET_ADMIN
    devices:
      - /dev/net/tun:/dev/net/tun
    ports:
      - 8778:8888/tcp  # HTTP proxy
      - 8001:8000/tcp  # GT Control Server
      - 8080:8080      # QB
      - 6881:6881      # QB
      - 6881:6881/udp  # QB
    volumes:
      - $ledger/gluetun:/gluetun
    environment:
      - VPN_SERVICE_PROVIDER=protonvpn
      - VPN_PORT_FORWARDING=on
      - VPN_PORT_FORWARDING_PROVIDER=protonvpn
      - VPN_PORT_FORWARDING_STATUS_FILE=/gluetun/forwarded_port
      - TZ=UTC/UTC
      - UPDATER_PERIOD=24h
      - FIREWALL_OUTBOUND_SUBNETS=192.168.1.0/24,10.0.0.0/16,172.21.0.0/16
      - DOT_PROVIDERS=cloudflare,google
      - PUBLICIP_API=ip2location
### Wireguard Settings
      - VPN_TYPE=wireguard
      - WIREGUARD_PUBLIC_KEY=$wgPublicKey
      - WIREGUARD_PRIVATE_KEY=$wgPrivateKey
      - WIREGUARD_ENDPOINT_IP=$endpointIP
      - WIREGUARD_ADDRESSES=$wgAddresses
      - DNS_ADDRESS=$dnsAddress
      - LOG_LEVEL=debug
  qbittorrent:
    image: lscr.io/linuxserver/qbittorrent:latest
    network_mode: "service:gluetun" #only allowed to use the gluetun network
    container_name: gt-qb
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=UTC/UTC
      - WEBUI_PORT=8080
    volumes:
      - $ledger/gluetun:/gluetun
      - $ledger/qbittorent/config:/config
      - $content/media:/media
      - $content/qbittorent/active:/active
    restart: unless-stopped

  gluetun-qbittorrent-port-manager:
    image: patrickaclark/gluetun-qbittorrent-port-manager:latest
    restart: unless-stopped
    container_name: gt-port-manager
    network_mode: "service:gluetun"
    environment:
      - QBITTORRENT_SERVER=localhost  # IP Address of qbittorrent
      - QBITTORRENT_PORT=8080
      - PORT_FORWARDED=/tmp/gluetun/forwarded_port
      - HTTP_S=http  # Select 'http' or 'https' depending on if you use certificates.
      - GLUETUN_HOST=localhost  # IP or FQDN of gluetun control server
      - GLUETUN_PORT=8000  # port of gluetun control server
      - RECHECK_TIME=60  # number of seconds between checks to gluetun server for port
      - TZ=America/Chicago
    healthcheck:
      test: ["CMD", "curl", "-H", "Authorization: $controlServerAuthKey", "-s", "http://localhost:8000/v1/openvpn/status", "|", "grep", "-q", '{"status":"running"}']
      interval: 30s
      timeout: 10s
      start_period: 60s
      retries: 3

[Samaze123]

Yes I am using tun0

[tfp1]

I suspect there's an issue with the port forward settings you're getting from Proton.

1. Confirm you're using a server that allows port forwarding with the P2P tag
2. Ensure you have the environment variable VPN_PORT_FORWARDING=on
3. Ensure you have VPN_SERVICE_PROVIDER=protonvpn
4. In some cases, if you're using protonvpn's wireguard, you have have to use VPN_SERVICE_PROVIDER=custom instead

ProtonVPN and Gluetun are not the easiest to set up. The documentation isn't great and you have to fiddle with it back and forth to make things work as expected

[Samaze123]

Do you know where I can see if the server I'm using allows port forwarding with the P2P tag ?

[tfp1]

In this example:

• AR#23 is a Plus server (meaning you must pay Proton to use this one)
• AR#25 is a Plus server and it's a P2P server, meaning it allows port forwarding the left/right arrows is the indicator

When you generate your config file, at https://account.protonvpn.com/downloads, ensure you select a server with that P2P marker

[Samaze123]

I checked and I'm using a server with P2P enabled. When the issue will come back I'll try to use VPN_SERVICE_PROVIDER=custom