Best way to get a torrent client with vpn protection?

VPN
1

I’ve been pulling my hair out for a day now trying to setup a torrent client with a vpn. My goal is to setup the arr suite and just let them do their thing. So far I have them mostly setup, I just need the download client for overseer. I can’t find a guide that actually explains what all the settings I need are.

I’ve messed around with the binhex qbittorrentvpn image but I have no idea what I’m doing. Is there an indepth guide somewhere on how to boot up one of these images onto truenas scale? There’s a config file in the github but I have no idea what to do with it, or where to find the info to populate it.

    -v <path for data files>:/data \
    -v <path for config files>:/config \-v <path for data files>:/data \
    -v <path for config files>:/config \

    -e STRICT_PORT_FORWARD=<yes|no> \
    -e USERSPACE_WIREGUARD=<yes|no> \
    -e ENABLE_SOCKS=<yes|no> \
    -e SOCKS_USER=<socks username> \
    -e SOCKS_PASS=<socks password> \
    -e LAN_NETWORK=<lan ipv4 network>/<cidr notation> \
    -e NAME_SERVERS=<name server ip(s)> \
    -e VPN_INPUT_PORTS=<port number(s)> \
    -e VPN_OUTPUT_PORTS=<port number(s)> \
    -e DEBUG=<true|false> \
    -e WEBUI_PORT=<port for web interfance> \
    -e UMASK=<umask for created files> \
    -e PUID=<uid for user> \
    -e PGID=<gid for user> \-e STRICT_PORT_FORWARD=<yes|no> \
    -e USERSPACE_WIREGUARD=<yes|no> \
    -e ENABLE_SOCKS=<yes|no> \
    -e SOCKS_USER=<socks username> \
    -e SOCKS_PASS=<socks password> \
    -e LAN_NETWORK=<lan ipv4 network>/<cidr notation> \
    -e NAME_SERVERS=<name server ip(s)> \
    -e VPN_INPUT_PORTS=<port number(s)> \
    -e VPN_OUTPUT_PORTS=<port number(s)> \
    -e DEBUG=<true|false> \
    -e WEBUI_PORT=<port for web interfance> \
    -e UMASK=<umask for created files> \
    -e PUID=<uid for user> \
    -e PGID=<gid for user> \

Is there somewhere that can help me understand this? Or I’d be happy with not even understanding it, as long as it runs…

Or, best yet, an even better, simpler way to do this (besides running a vpn on my router, it’s a pos provided by my ISP that can’t do that)

2

I have a separate Ubuntu vm running qbittorrent-nox along with openvpn, sonarr and radarr.

I use nordvpn config file to connect openvpn to the nordvpn server. In qbittorrent settings I choose the tunnel interface as the network device.

This may not be the most efficient setup, I’m basically a rookie, but it works exceptionally well. Basically 100% uptime and if the openvpn/nordvpn connection fails the tunnel adapter doesn’t work so qbittorrent won’t connect to any torrents

3

This is my “app” on EE.

hotio docs here.
I did have to supply my wire guard config as a file in the /config dir.

name: qbit-public

services:
  qbit-public:
    container_name: qbit-public
    hostname: qbit-public
    image: ghcr.io/hotio/qbittorrent:latest
    restart: unless-stopped
    cap_add:
      - NET_ADMIN
    environment:
      TZ: America/Chicago
      PUID: 568
      PGID: 568
      UMASK: '002'
      VPN_ENABLED: 'true'
      VPN_CONF: wg0
      VPN_PROVIDER: generic
      VPN_LAN_NETWORK: 100.64.0.0/10
      VPN_AUTO_PORT_FORWARD: 'false'
      VPN_KEEP_LOCAL_DNS: 'false'
      VPN_FIREWALL_TYPE: auto
      VPN_HEALTHCHECK_ENABLED: 'true'
      PRIVOXY_ENABLED: 'false'
      UNBOUND_ENABLED: 'false'
    ports:
      - name: web-ui
        protocol: tcp
        host_ip: 100.100.1.5
        published: 8001
        target: 8080
    tmpfs:
      - /tmp
    volumes:
      - type: bind
        source: /mnt/apps/config/qbit/public
        target: /config
      - type: bind
        source: /mnt/data/torrent/public
        target: /data
    labels:
      com.centurylinklabs.watchtower.enable: 'true'
      traefik.http.routers.qbit.rule: Host(`qbit.domain com`)
    networks:
      - ix-traefik_backend

networks:
  ix-traefik_backend:
    external: true
4

If you’re on 24.10 you can follow https://forums.truenas.com/t/guide-how-to-install-qbittorrent-or-any-app-with-vpn-on-truenas-electric-eel/12677

5

Check out this wiki: https://wiki.serversatho.me/en/qBittorrent

And the discord channel: https://serversatho.me

6

This guide helped me out a lot: https://www.youtube.com/watch?v=SQEqsaKN-Go&t=403s

7

get qBittorrentvpn is has the von build-in, im using it with wireguard just to put the crediental file in the right folder

https://youtu.be/WVM3Wgb290g?si=hz3DnCXXXanx1_zJ

8

If you are using docker, take a look at gluetun. You use gluetun to create vpn connection to your vpn provider and to tunnel everything trough that container. Docker has special network modes that makes this thin extremely easy. All you have to do is create docker compose file with gluetun and just add services to it and expose local ports so ypu can access it.

I think its better than running vpn on router and using custom routing etc…

9

https://github.com/binhex/arch-qbittorrentvpn

Been using this, was able to find a yaml compose template in the issues page and adapt it to my vpn settings and folder locations. Works flawlessly. Has a built in control to shut down the app if the vpn gets disconnected so you don’t have any leaks.

No need to have a separate vpn app and link them unless you have other apps that need to go through your vpn (I don’t)

10

I just use a socks5 proxy (nordvpn) in qbittorrent and the arr suite. As others may point out it’s not as secure as a proper VPN connection but does the job and had no stick from my ISP.

11

Honestly, you don’t need to configure a full arrr suite app setup unless you want full download and management automation. I prefer a manual approach: spin up a Windows virtual machine in Truenas (use the virtio driver set and guest tools during Windows install so Windows knows how to peacefully live in a Linux vm, available here: https://github.com/virtio-win/virtio-win-pkg-scripts/blob/master/README.md ). Bridge your network so the vm can talk to the Truenas network shares. Use Remote Desktop client on your desktop / laptop to remote into the vm over RDP. Install vpn and torrent software of choice on the Windows vm (I prefer AirVPN and Tixati). Browse the torrent sites, click on desired magnet links, and download the files. Simple. Clean. Quick. Secure. I may get around to automating an arrr suite eventually, but for now I much prefer to manually browse and click links for my torrent files.

12

This one worked great, thank you!

13

That seems more complicated to me. Before I would do that I would just have a windows pc setup VPN and map a drive to the media folder on Truenas to DL into.

14

I didn’t have any experience with Dockge when I started so it was fun learning something new.