It’s very annoying to me that there’s not an easy option to run the whole OS behind a vpn. But that not being the case, which containers do you run behind a VPN?
Edit: Not sure if I’m using the right words. I am mainly referring to vpn like PIA or nordvpn. To mask activity on the apps. Not like tailscale.
I don’t understand why folks use Docker VPN’s when unRAID has a sorta built-in function with a plug-in. You setup the plug-in to connect to your Wireguard service and then it gives you another network that containers can use. This way you can use whatever container you want and make sure it only uses VPN traffic.
I use to run Deluge the RRRs as well as SAB behind VPNs, but ever since I switched to a seedbox and syncthing I no longer run any of those behind a VPN. I am using NGINX Proxy Manager for anything facing out on the box with Cloudflare tunnels
On my firewall with OPNSENSE (free) I set up a wireguard VPN with Mullvad (since I have an active subscription) and then I route the traffic I want from either the VPN or my ISP.
So in this case, I can simply route all the traffic from my Unraid server to Mullvad and the game it is done.
I run qbittorrent with the integrated vpn, then prowler, sonarr, radarr, metube, firefox, nicotine+, deemix and whoogle-search all through unraids built in wireguard tunnels to my paid vpn.
dyonr/passthroughvpn works to run multiple containers through a single container running VPN. Only issue is you cant have multiple services that are setup to use the same port e.g. two instances of radarr behind the same dyonr/passthroughvpn container.
I have all my arrs and download clients on a separate VLAN that goes over my VPN. I also only have Plex exposed externally, the rest I VPN back to my network to access.
My torrent docker (DelugeVPN) sits behind an outbound public VPN
If I did any other…. Downloading of Linux distribution ISOs …. Then I would route them via VPN too, but as it happens I don’t need another way to download Linux ISOs
I then use Tailscale to access services hosted on my server from elsewhere
So right now everything on the primary server, it has no direct internet access. I have a raspberry pi that tunnels between the primary server and the Internet at large.
Why? My primary server right now is a Mac OS abomination, they are really bad at split tunneling, and bad a lot docker. I have too many things that need the VPN. This also includes Kodi which is hard to tether. Debrid services traditionally aren’t viewed as needing a VPN, but RD cares too much about my IP, and I dont want anything outward that my ISP can complain about.
When the server moves over to Linux I’ll likely be running everything out of docker. Right now Jellyfin, qBittorrent and slskd are not. Throw them on a network together and tie them to a wireguard connection with my vpn. Then run Kodi out a VM or something with its own wireguard key. Some things would be nice to be able to run to the internet directly.