Thanks, for your support 😊 glad it worked for you.

Great to hear!

You're welcome 😁

You're welcome 😁

Thanks, really appreciate the feedback

@@Jims-Garage You're welcome.

Glad to hear it, thank you

That's awesome, thank you for the feedback 🙂

@@Jims-Garage Long shot question- have you had any experience getting Nord meshnet running in a container to give remote access to local hosts?

@@Evakron no, unfortunately not. I'll have a look asap

Thanks!

You're welcome 😁

Thanks! I totally agree with you on the dark mode 😂

You're welcome 😁

You can run them all on single Docker host. I've tried my best to manage port conflicts but I could have missed something. That should be all you'll ever need to change.

@@Jims-Garage nice one thanks

Thanks, that's useful to know.

Do we need to add the new container's port to gluetun compose file and then redeploy gluetun?

​@@jims888 yes, those step are the same

@@xanzut Thanks

That could be an improvement, I'm not sure if healthy means it has a valid connection though? I would make sure I use my firewall in front of the container as well.

I tried this but it seems like depends_on is no longer supported. Did you have any luck?

@@cyrilpinto418 yes, the mount will look something like that. Essentially it's wherever you choose to mount it. You do not need to port forward, the VPN connection is a bidirectional tunnel.

Good spot, thanks, let me double check :) I sometimes end up tweaking the config afterwards so always refer to the current file in GitHub

I will come onto LXCs soon. Might not be the best idea to be downloading torrents on an LXC though due to security (they share the host's Kernel and it's not always guaranteed what you're downloading...)

@@Jims-Garagedoesn’t doing this in unprivileged fix that host issue? Or maybe I got that wrong concept

For me everything worked when I added networks: - proxy to glueten config in docker-compose file and then at the end of docker-compose networks: proxy: external: true Of course traefik lables must in place and network "proxy" already created

Correct 😁

Have you tested that your SMB is mounted correctly first?

@@Jims-GarageYes, I'm able to read and write from outside the containers with no problem (again thank you for your other guide!) My problem is that QB does not write on the NAS. Should I change this: " - /home/ubuntu/docker/arr-stack/qbittorrent/downloads:/downloads" to this " - /media/share/downloads:/downloads" ? I was trying it but seems not enough, do I need to add other parameters to the containers? 🙏

You'll access the services locally by going to dockerIP:ServicePort

Thanks. You should be able to use an external Traefik service

@@Jims-GarageA video about how to do it would be great. Also, access by domain instead port would be even better.

@@AngelCerveraClaudio I'll try to remember to update it. You should be able to copy and amend the Traefik labels off most of my other videos.

For me everything worked when I added networks: - proxy to glueten config in docker-compose file and then at the end of docker-compose networks: proxy: external: true Of course traefik lables must in place and network "proxy" already created

Glad it helped you 😀

Thanks, noted and fixed already in later videos.

@@Jims-Garage that's good to know, cheers!

Lynx is WireGuard with another name. Use UDP if you don't want to use lynx. It'll be just as quick.

@@demiroth make sure your outbound rules allow the VPN and also the VPN allows inbound. I always have the firewall icon and it works fine.

Should do as it's the only network route. You could also add a firewall rule on top to help.

@@Jims-Garage got it. Do you have a video on firewall? recently discovered your channel and going to go through lot of content from it now. would be great if you can point that out. Thanks!

@@Andy15792 yes, look for Sophos XG and OPNSense

Having it in a VM as opposed to an LXC is a worthwhile security buffer IMO. Should be possible in an LXC though.

@@Jims-Garage Thanks Jim. I followed Don's guide to get an openwrt router lxc set up and running a VPN client....but now my test sonarr lxc is on a different network when using that as my bridge haha. The complexity of mounting NFS shares to my TrueNAS is making my brain hurt. Maybe I'll just leave the arr stack in docker on a Ubuntu server VM with gluetun. It's nice and contained and I don't really have system resource limitations.

You would need to mount a network share to the host machine, then amend the volume mount to use the share.

Port forwarding shouldn't be necessary as the VPN will do that their end and send the traffic back down the tunnel. I would check gluetun logs to ensure that it has connected.

I think you can change the ports either with environment variables or just in the config.

Pin it behind your firewall to restrict to the VPN IP range, that should help

@@Jims-Garage Thank you!

Glad you enjoyed it

I would run this on Docker in a Proxmox VM. You can then mount a NAS network share into the Docker Torrent container, best of both worlds IMO.

@@Jims-Garage oh ok so your running everything on in this series that evolves docker through proxmox then doing network shares that’s just where I was lost following the series now I can start this journey just waiting on a motherboard then I can start the firewall stuff first. Then go into the nas then all the trafic network stuff.

Do you have any logs from the gluetun container? Could be as simple as wrong credentials

@@Jims-Garagewell I think it somehow resolved itself. After repeatedly taking it down and then going back to check if anything was copied incorrectly and bringing it back up it would still do the same thing. Until I left it alone and gluetun would keep retrying the connection. After about several retries I guess it finally made the connection and it gives me a healthy status. I know it gives off the warning as well that timeouts are a sign that wireguard might not be working correctly but when the logs shows the ip address, it’s using the one given from my vpn somewhere in Canada. (I’m not in Canada)

I would use your firewall. Restrict outbound traffic specially to an IP address associated with the VPN.

You should be able to add any container behind gluetun.

No, openvpn is free to download and use. I recommend using UDP over WireGuard for NordVPN (or use nordlynx)

@@Jims-GarageIf I were to use nordlynx how should I change the docker compose info?

@@rexhavoc376 I don't know if gluetun supports it. You'll need to check their documentation.

@@Jims-GarageAlright. How do I know what my openvpn_user and openvpn_password is? Do I need to set up openvpn in another container first? Thanks again for all your help

@@rexhavoc376 log in to your NordVPN account and find the credentials for manual config

You can, just replicate the part in the container yaml that references Gluetun as the network. That will send all traffic through it.

@@Jims-Garage i’ve tried but encountered some error. Related to kvm network. Im not very good with docker so right now i just give up😅

Volumes should be dynamically created.

@@Jims-Garage Thank you so much! This has been the best tutorial I've found yet and I watched so many. I finally got it working!

@@XerkoGames you're welcome 😁

It should be using the IP address of the virtual machine

@@Jims-Garage I managed to fix it. It turned out that qbittorrent uses localip: port instead of https. Probably a silly thing I overlooked. Thanks for the video though. Although there are lots of useful docs out there having a video of someone doing it is really helpful reference.

You can’t torrent with the free tier of protonvpn

All my config files are on my GitHub, check the link in the description.

@@Jims-Garage nice one, found it thanks

Yes, you are able to.

Make sure that they're on the same network.

I couldn't connect sonar or radarr as i'd need to give them and external IP as they're directed through the vpn. However I reconfigured plex to update the library when changes to folder directories were detected so problem solved

This routes traffic out over a VPN, it's not a VPN to connect remotely from. You'd likley want to have WireGuard or something similar if you want to access local services remotely.

​@@Jims-Garage I was confused. Couldn't tell the error since the containers kept restarting. I ran the same docker-compose.yml on another machine and it worked with no problems! 👍

It's almost certainly a permissions issue. It might be worth running as root to check things first, then reintroducing proper accounts. I'm guessing you've checked the host can access the nfs?

@@Jims-GarageI think it was. i spun up a fresh ubuntu server since I had done some tinkering on the first one and went step by step and setup autofs and bingo it was fine. downloads to the share fine. the one last little thing you might know is when using wireguard (surfshark) the portainer logs show it being good as far as i can tell but QBT doesnt see any trackers so nothing downloads (im not a torrent power user) If i use the pertinent gluetun settings for OpenVPN it works just fine. its much faster than the windows VM i was using. Thanks Jim! I subscribed

Put the IP instead of localhost.

Mount a share into the container. Might need to create a share first.

@@Jims-Garage And this is done from adding it under volumes: part in configuration file?. sorry i am a real beginner in this container/docker stuff :)

@@AndersBergwall Correct. Left of the colon : is the host location, right of the colon is where it's mounted inside the container (you typically never change the right hand side)

@@Jims-Garage ⭐⭐⭐⭐⭐

If you have time for stupid questions then here is one for you :) I have managed to follow this guide and everything is working :) However, when using the qbittorrent download AND i THINK when i use the unrar once completed option, the /tmp folder of my QNAP gets filled.. this space is only 400mb (why?) maybe its something i configured when i first setup the nas (but i dont think so)... so any suggestions? my guess is that unrar stores temporary in the /TMP folder, i tried move /tmp to another drive or location but.. yeah.. not successful (or dont know if i should).

ttech has it 'proxmox ve helper-scripts' > Docker LXC

Yes, I have a docker installation video earlier on.

localhost:port

@@xVarga i have a similar problem and i've typed every IP i got... portainer says 127... IPs while my localnet is 192.168... i feel like i'm missing an easy step. haha

@@blakestandal8294 for me it is 192.168.x.x:8085 this is one of the ports of gluetun, it is for wireguard, just try all of them. Idk what else to say unfortunately.

No, simply add a WireGuard container as well and connect to it via that. Check my WireGuard video out.

​@@Jims-Garage, thanks for the suggestion. In this case, it is not viable option for me. My users are used to having access directly by using FQDN that available over the internet, getting them to install a VPN client would be too much right now.

@@dirgosalga you can still expose normally. Gluetun is only sending outbound over the VPN (hence how you can access locally)

It's in the comments on files on GitHub

Thanks for replying, but I think I need a whole video on this I've been at it for 2 days and still no joy 😂

Yes, you can github.com/qdm12/gluetun-wiki/blob/main/setup/openvpn-configuration-file.md

@@Jims-Garage thanks Jim! I'll try this out

Create a thread in discord, I imagine you'll have some help

when I go into my qbittorent.log file, I see "WebAPI login failure" 10 times, and after 5 times the reason changes from invalid credentials to IP has been banned

The end part is the qbittorrent gui, use your credentials specified or leave blank for the default (I think)

@@Jims-Garage but where do i need to access this from? Within the ubuntu machine or on my host machine? Does it not matter? Also how do I link my qbittorent to my surfshark that is within the container, to only work when it’s on? If this is too much trouble to answer, any guidance towards a community that could assist would be greatly appreciated!!!

@@BabyJesusBro you access it through any machine's web browser (e.g. gaming PC) as long as it has access (if it's on the same network you're fine). I don't use surf shark but I believe that gluetun supports it, their documentation will help you out. Consider joining my discord and creating a help thread, there's loads of great people on there.

Check out my Docker Compose -> Kubernetes migration video and have a go. One thing to consider is that you don't want to download to your longhorn or replicated storage (that will drastically increase wear).

Why would you need to? Cron can do this though.

@@Jims-Garage If my Zimaboard does a reboot (for whatever reason) now I need to manually SSH into the board and run docker compose up... not a big problem but still

@@ronsone8373 change the restart policy to always.

Yea, this could run in Kubernetes. Trickier but doable.

​@@Jims-Garage That would be really swell to have some tips on that front.

How are you trying to access it? IP:Port or through a reverse proxy?

It isn't officially supported but this script should help you. gist.github.com/bluewalk/7b3db071c488c82c604baf76a42eaad3

@@Jims-Garage would you happen to be able to do a setup for VPN Unlimited?

Have a try at adding yourself, it's the same as all of the other containers. Jump on Discord if you're stuck.

You want to install Docker on a machine or VM (that's the host, I have a video on it). Once you've done that copy over the docker compose file (this is the configuration file for all of the apps, the containers). You use the command sudo docker compose up -d to launch the containers. You can load the compose into Portainer and do it that way, but I prefer to explain to people exactly what it's doing. Plus, compose is faster as you don't need a gui.

@@Jims-Garage I think this is really just useless. Why am I downloading a .yml file? I just don't understand it. I have docker desktop installed. Why is .yml filetype not associated with docker executable file? I just don't get it. Why does this app even exist if we are using command lines and poorly formatted text file configurations. I tried to force docker desktop to open the .yml file by manually associating the file type. That doesn't do anything. It should. Beyond the general issue that I still have no idea what my docker compose location is. All I know is I got docker desktop to run. I had to disable legacy command prompt. I can even have it pull apps. It downloads them somewhere (no desirable clue where that somewhere is), and it gives me zero ability to edit the configuration files.

Yes, but worth limiting egress with a firewall rule as well. Limit it to only the VPN IP address space.

@@Jims-Garage thanks! Would running iptables or ufw on the vm I hosted the dockers on be sufficient?

@@Liam.s yes, that's helpful.

@@Jims-Garage you’re amazing man! Thank you!

@@Liam.s you're welcome. Hop on Discord if you haven't already (and hit the sub please 😉)

Configure your compose, hit return