qbit + VPN

apps/gluetun-qbittorrent/docker-compose.yml

@@ -11,20 +11,26 @@ services:
       # crash-loop hatasi icin: IPv6'yi bu container icin kapatiyoruz.
       - net.ipv6.conf.all.disable_ipv6=1
     environment:
-      - VPN_SERVICE_PROVIDER=mullvad
+      - VPN_SERVICE_PROVIDER=protonvpn
       - VPN_TYPE=wireguard
       - WIREGUARD_PRIVATE_KEY=${WIREGUARD_PRIVATE_KEY}
       - WIREGUARD_ADDRESSES=${WIREGUARD_ADDRESSES}
-      - SERVER_CITIES=${SERVER_CITIES}
+      - SERVER_COUNTRIES=${SERVER_COUNTRIES}
       - FIREWALL_OUTBOUND_SUBNETS=${FIREWALL_OUTBOUND_SUBNETS:-172.16.0.0/12,192.168.0.0/16,10.0.0.0/8}
       - TZ=${TZ}
+      # ProtonVPN'in NAT-PMP port forwarding'i: Gluetun otomatik port
+      # ister, degistiginde asagidaki komutla qBittorrent'in dinleme
+      # portunu ANINDA gunceller - elle hicbir sey yapman gerekmiyor.
+      - VPN_PORT_FORWARDING=on
+      - VPN_PORT_FORWARDING_PROVIDER=protonvpn
+      - VPN_PORT_FORWARDING_UP_COMMAND=/bin/sh -c 'wget -O- -nv --retry-connrefused --post-data "json={\"listen_port\":{{PORTS}}}" http://127.0.0.1:61235/api/v2/app/setPreferences'
     ports:
-      # qBittorrent WebUI - host:container, ikisi ayni numara (61235)
+      # Sadece WebUI'yi host'a aciyoruz. Torrent peer portu artik ProtonVPN'in
+      # NAT-PMP ile atadigi DINAMIK port - bu, VPN tunelinin (tun0) uzerinden
+      # geliyor, Docker'in host network'unden degil, o yuzden burada ayrica
+      # bir port yayinlamaya gerek yok (Gluetun kendi firewall'unda otomatik
+      # izin veriyor).
       - 61235:61235
-      # qBittorrent torrent peer portu (TCP+UDP), asagidaki
-      # TORRENTING_PORT ile ayni olmak zorunda
-      - 61234:61234
-      - 61234:61234/udp
     volumes:
       - ${APP_DATA_DIR}/data/gluetun:/gluetun
     restart: unless-stopped
@@ -46,6 +52,8 @@ services:
       - PGID=1000
       - TZ=${TZ}
       - WEBUI_PORT=61235
+      # Baslangic degeri - Gluetun VPN_PORT_FORWARDING_UP_COMMAND ile
+      # baglanir baglanmaz gercek atanan portla otomatik degistiriyor.
       - TORRENTING_PORT=61234
     volumes:
       - ${APP_DATA_DIR}/data/config:/config