What containers do you put behind a VPN?

It’s very annoying to me that there’s not an easy option to run the whole OS behind a vpn. But that not being the case, which containers do you run behind a VPN?

Edit: Not sure if I’m using the right words. I am mainly referring to vpn like PIA or nordvpn. To mask activity on the apps. Not like tailscale.

I only run my torrent software behind my vpn. The rest is accessible with a vpn using the integrated wireguard.

I don’t understand why folks use Docker VPN’s when unRAID has a sorta built-in function with a plug-in. You setup the plug-in to connect to your Wireguard service and then it gives you another network that containers can use. This way you can use whatever container you want and make sure it only uses VPN traffic.

I use to run Deluge the RRRs as well as SAB behind VPNs, but ever since I switched to a seedbox and syncthing I no longer run any of those behind a VPN. I am using NGINX Proxy Manager for anything facing out on the box with Cloudflare tunnels

I put all my downloaders behind a vpn.

mask activity on the apps

Does your app need it’s activity masked?

Yes: Use a vpn

No: don’t.

I run qbittorrent behind a vpn. I want to run a proxy and put jackett and SearchXNG behind it. But right now it’s just the torrent client.

If you have a firewall, it is easy.

On my firewall with OPNSENSE (free) I set up a wireguard VPN with Mullvad (since I have an active subscription) and then I route the traffic I want from either the VPN or my ISP.

So in this case, I can simply route all the traffic from my Unraid server to Mullvad and the game it is done.

fine pen sloppy fertile toy attempt decide vast adjoining soft

This post was mass deleted and anonymized with Redact

I run qbittorrent with the integrated vpn, then prowler, sonarr, radarr, metube, firefox, nicotine+, deemix and whoogle-search all through unraids built in wireguard tunnels to my paid vpn.

I go raw no vpn, fuck the police

dyonr/passthroughvpn works to run multiple containers through a single container running VPN. Only issue is you cant have multiple services that are setup to use the same port e.g. two instances of radarr behind the same dyonr/passthroughvpn container.

I have all my arrs and download clients on a separate VLAN that goes over my VPN. I also only have Plex exposed externally, the rest I VPN back to my network to access.

My torrent docker (DelugeVPN) sits behind an outbound public VPN

If I did any other…. Downloading of Linux distribution ISOs …. Then I would route them via VPN too, but as it happens I don’t need another way to download Linux ISOs

I then use Tailscale to access services hosted on my server from elsewhere

So right now everything on the primary server, it has no direct internet access. I have a raspberry pi that tunnels between the primary server and the Internet at large.

Why? My primary server right now is a Mac OS abomination, they are really bad at split tunneling, and bad a lot docker. I have too many things that need the VPN. This also includes Kodi which is hard to tether. Debrid services traditionally aren’t viewed as needing a VPN, but RD cares too much about my IP, and I dont want anything outward that my ISP can complain about.

When the server moves over to Linux I’ll likely be running everything out of docker. Right now Jellyfin, qBittorrent and slskd are not. Throw them on a network together and tie them to a wireguard connection with my vpn. Then run Kodi out a VM or something with its own wireguard key. Some things would be nice to be able to run to the internet directly.

Prowlarr and qbit that’s it maybe jackett if I used jt

I think you need to learn what a VPN is and what it does before complaining you can’t(you can) put the whole “OS” behind one.

Why can’t it be done? Because you haven’t found a tutorial to do it for you?

I run delugevpn by binhex. Sab is on ssl. The rest doesnt need anything special.
I run my own DNS on opnsense

Binhex qbittorrentvpn just that. Been using pia close to 5 years now.