PLEASE HELP: Using Qbittorrent with Gluetun in Portainer with Synology NAS DS920+ version DSM 7. Unable to view qbittorrent UI after a "successful setup"

[RicTheRed]

Hello,

I did make a reddit post, but will post the contents in here:
https://www.reddit.com/r/docker/comments/10uulz4/please_help_using_qbittorrent_with_glueten_in/

After deploying the stack I get the following log for each qbittorrent and gluetun containers (I have a subscription to Surfshark). I also took preliminary steps to portforward the ports specified in the ports section under the Gluetin yaml section in the Synology firewall. Using my local IP address with port 8080 (i.e https://[nas_ip_address]:8080). I ran the systemd script following these steps:

https://github.com/qdm12/gluetun/wiki/Synology-prerequisites

Still is unable to access the UI. I have been messing around with this all day, and can't seem to find anyone else having a similar problem. This feels like a dumb issue since everything seems to be running successfully. I have followed on many tutorials on how to set this up, and tried all of their variations:

https://drfrankenstein.co.uk/2022/09/26/qbittorrent-with-gluetun-vpn-in-docker-on-a-synology-nas/#:~:text=What%20are%20qBittorrent%20and%20GlueTUN,on%20the%20right%2Dhand%20side.

https://www.youtube.com/watch?v=xbSfaKwyfXE&t=274s

I tried following along this write up, but did not understand my use case with this setup. Also since my devices are under the same subnet:

https://www.reddit.com/r/synology/comments/sluiga/guide_using_vpn_with_docker_containers_on_dsm_7/

Please note: I do successfully run qbittorrent WITHOUT gluetun.

UPDATE: I did find this post which indicates this as a known bug, but does not seem to indicate an adequate solution. Even after mapping the ports, still unable to access the UI

https://www.reddit.com/r/qBittorrent/comments/103soxm/setting_up_qbittorrent_with_gluetun_in_docker_for/

Here is my Docker-Compose.yml file:

version: "3.8"
services:
  gluetun:
    image: qmcgaw/gluetun
    container_name: gluetun
    network_mode: bridge
    # line above must be uncommented to allow external containers to connect. See https://github.com/qdm12/gluetun/wiki/Connect-a-container-to-gluetun#external-container-to-gluetun
    cap_add:
      - NET_ADMIN
    devices:
      - /dev/net/tun:/dev/net/tun
    ports:
      - 8888:8888/tcp # HTTP proxy
      - 8388:8388/tcp # Shadowsocks
      - 8388:8388/udp # Shadowsocks
      - 8080:8080 # qbittorrent
      - 6881:6881
      - 6881:6881/udp
    volumes:
      - [redacted]/gluetun:/gluetun
    environment:
      - VPN_SERVICE_PROVIDER=surfshark
      - VPN_TYPE=openvpn
      - OPENVPN_USER=[redacted]
      - OPENVPN_PASSWORD=[redacted]
      - SERVER_COUNTRIES=Netherlands
      - TZ=US/Eastern

  qbittorrent:
    image: lscr.io/linuxserver/qbittorrent
    container_name: qbittorrent
    network_mode: service:gluetun
    depends_on:
      - gluetun
    environment:
      - PUID=1026
      - PGID=100
      - VERSION=latest
      - TZ=US/Eastern
      - WEBUI_PORT=8080
    volumes:
      - [redacted]/config:/config
      - [redacted]/Downloads:/downloads
    restart: unless-stopped

Log file for Qbittorrent container:

[migrations] started
[migrations] no migrations found
-------------------------------------
          _         ()
         | |  ___   _    __
         | | / __| | |  /  \
         | | \__ \ | | | () |
         |_| |___/ |_|  \__/
Brought to you by linuxserver.io
-------------------------------------
To support LSIO projects visit:
https://www.linuxserver.io/donate/
-------------------------------------
GID/UID
-------------------------------------
User uid:    1026
User gid:    100
-------------------------------------
[custom-init] No custom files found, skipping...
WebUI will be started shortly after internal preparations. Please wait...
[ls.io-init] done.
Catching signal: SIGTERM
Exiting cleanly
******** Information ********
To control qBittorrent, access the WebUI at: http://localhost:8080
The Web UI administrator username is: admin
The Web UI administrator password has not been changed from the default: adminadmin
This is a security risk, please change your password in program preferences.
[migrations] started
[migrations] no migrations found
usermod: no changes
-------------------------------------
          _         ()
         | |  ___   _    __
         | | / __| | |  /  \
         | | \__ \ | | | () |
         |_| |___/ |_|  \__/
Brought to you by linuxserver.io
-------------------------------------
To support LSIO projects visit:
https://www.linuxserver.io/donate/
-------------------------------------
GID/UID
-------------------------------------
User uid:    1026
User gid:    100
-------------------------------------
[custom-init] No custom files found, skipping...
WebUI will be started shortly after internal preparations. Please wait...
[ls.io-init] done.

Log for gluetun container:

|       ├── Run OpenVPN as: root
|       └── Verbosity level: 1
├── DNS settings:
|   ├── DNS server address to use: 127.0.0.1
|   ├── Keep existing nameserver(s): no
|   └── DNS over TLS settings:
|       ├── Enabled: yes
|       ├── Update period: every 24h0m0s
|       ├── Unbound settings:
|       |   ├── Authoritative servers:
|       |   |   └── cloudflare
|       |   ├── Caching: yes
|       |   ├── IPv6: no
|       |   ├── Verbosity level: 1
|       |   ├── Verbosity details level: 0
|       |   ├── Validation log level: 0
|       |   ├── System user: root
|       |   └── Allowed networks:
|       |       ├── 0.0.0.0/0
|       |       └── ::/0
|       └── DNS filtering settings:
|           ├── Block malicious: yes
|           ├── Block ads: no
|           ├── Block surveillance: no
|           └── Blocked IP networks:
|               ├── 127.0.0.1/8
|               ├── 10.0.0.0/8
|               ├── 172.16.0.0/12
|               ├── 192.168.0.0/16
|               ├── 169.254.0.0/16
|               ├── ::1/128
|               ├── fc00::/7
|               ├── fe80::/10
|               ├── ::ffff:7f00:1/104
|               ├── ::ffff:a00:0/104
|               ├── ::ffff:a9fe:0/112
|               ├── ::ffff:ac10:0/108
|               └── ::ffff:c0a8:0/112
├── Firewall settings:
|   └── Enabled: yes
├── Log settings:
|   └── Log level: INFO
├── Health settings:
|   ├── Server listening address: 127.0.0.1:9999
|   ├── Target address: cloudflare.com:443
|   ├── Read header timeout: 100ms
|   ├── Read timeout: 500ms
|   └── VPN wait durations:
|       ├── Initial duration: 6s
|       └── Additional duration: 5s
├── Shadowsocks server settings:
|   └── Enabled: no
├── HTTP proxy settings:
|   └── Enabled: no
├── Control server settings:
|   ├── Listening address: :8000
|   └── Logging: yes
├── OS Alpine settings:
|   ├── Process UID: 1000
|   ├── Process GID: 1000
|   └── Timezone: US/Eastern
├── Public IP settings:
|   ├── Fetching: every 12h0m0s
|   └── IP file path: /tmp/gluetun/ip
└── Version settings:
    └── Enabled: yes
2023-02-05T20:33:24-05:00 INFO [routing] default route found: interface eth0, gateway 172.17.0.1 and assigned IP 172.17.0.2
2023-02-05T20:33:24-05:00 INFO [routing] adding route for 0.0.0.0/0
2023-02-05T20:33:24-05:00 INFO [firewall] setting allowed subnets...
2023-02-05T20:33:24-05:00 INFO [routing] default route found: interface eth0, gateway 172.17.0.1 and assigned IP 172.17.0.2
2023-02-05T20:33:24-05:00 INFO [dns over tls] using plaintext DNS at address 1.1.1.1
2023-02-05T20:33:24-05:00 INFO [http server] http server listening on [::]:8000
2023-02-05T20:33:24-05:00 INFO [healthcheck] listening on 127.0.0.1:9999
2023-02-05T20:33:24-05:00 INFO [firewall] allowing VPN connection...
2023-02-05T20:33:24-05:00 INFO [openvpn] OpenVPN 2.5.6 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Apr 17 2022
2023-02-05T20:33:24-05:00 INFO [openvpn] library versions: OpenSSL 1.1.1s  1 Nov 2022, LZO 2.10
2023-02-05T20:33:24-05:00 INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]212.102.35.214:1194
2023-02-05T20:33:24-05:00 INFO [openvpn] UDP link local: (not bound)
2023-02-05T20:33:24-05:00 INFO [openvpn] UDP link remote: [AF_INET]212.102.35.214:1194
2023-02-05T20:33:24-05:00 INFO [openvpn] [nl-ams-v081.prod.surfshark.com] Peer Connection Initiated with [AF_INET]212.102.35.214:1194
2023-02-05T20:33:25-05:00 ERROR [openvpn] Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:7: block-outside-dns (2.5.6)
2023-02-05T20:33:25-05:00 INFO [openvpn] TUN/TAP device tun0 opened
2023-02-05T20:33:25-05:00 INFO [openvpn] /sbin/ip link set dev tun0 up mtu 1500
2023-02-05T20:33:25-05:00 INFO [openvpn] /sbin/ip link set dev tun0 up
2023-02-05T20:33:25-05:00 INFO [openvpn] /sbin/ip addr add dev tun0 10.8.8.26/24
2023-02-05T20:33:25-05:00 INFO [openvpn] UID set to nonrootuser
2023-02-05T20:33:25-05:00 INFO [openvpn] Initialization Sequence Completed
2023-02-05T20:33:25-05:00 INFO [dns over tls] downloading DNS over TLS cryptographic files
2023-02-05T20:33:26-05:00 INFO [healthcheck] healthy!
2023-02-05T20:33:28-05:00 INFO [dns over tls] downloading hostnames and IP block lists
2023-02-05T20:33:31-05:00 INFO [healthcheck] unhealthy: cannot dial: dial tcp4: lookup cloudflare.com on 8.8.4.4:53: read udp 127.0.0.1:52990->127.0.0.1:53: read: connection refused(see https://github.com/qdm12/gluetun/wiki/Healthcheck)
2023-02-05T20:33:36-05:00 INFO [dns over tls] init module 0: validator
2023-02-05T20:33:36-05:00 INFO [dns over tls] init module 1: iterator
2023-02-05T20:33:36-05:00 INFO [dns over tls] start of service (unbound 1.15.0).
2023-02-05T20:33:37-05:00 INFO [dns over tls] generate keytag query _ta-4a5c-4f66. NULL IN
2023-02-05T20:33:37-05:00 INFO [dns over tls] generate keytag query _ta-4a5c-4f66. NULL IN
2023-02-05T20:33:37-05:00 INFO [dns over tls] ready
2023-02-05T20:33:37-05:00 INFO [healthcheck] healthy!
2023-02-05T20:33:38-05:00 INFO [vpn] You are running on the bleeding edge of latest!
2023-02-05T20:33:38-05:00 INFO [ip getter] Public IP address is 212.102.35.215 (Netherlands, North Holland, Amsterdam)

[qdm12]

This should work i think, that's odd.
Try maybe with a custom bridged docker network, and attach gluetun to it? Maybe the default bridge network doesn't work for properly. Let me know if you need help doing that. Keep in mind I'm currently moving homes so I'm very much laggy for the next 2 weeks.

[RicTheRed]

Brilliant....that was exactly it.
fyi, documenting my updates on this reddit post
https://www.reddit.com/r/docker/comments/10uulz4/please_help_using_qbittorrent_with_glueten_in/?utm_source=share&utm_medium=android_app&utm_name=androidcss&utm_term=1&utm_content=share_button

[adityatb]

It seems the reddit post was taken down. Would you be able to post your yaml that creates a custom bridged docker network?

[RicTheRed]

@adityatb Hope this helps

Had to add this section the below yaml file. I have updated my yaml file, but don't have my server on at the moment. It's been a while since I had to look back to it. I think I since then created a custom bridge network instead of the default "bridge". Should work either way

services:
  gluetun:
    image: qmcgaw/gluetun
    container_name: gluetun
    network_mode: bridge
    hostname: gluetun

---

---

Here is my Docker-Compose.yml file:

version: "3.8"
services:
  gluetun:
    image: qmcgaw/gluetun
    container_name: gluetun
    network_mode: bridge
    # line above must be uncommented to allow external containers to connect. See https://github.com/qdm12/gluetun/wiki/Connect-a-container-to-gluetun#external-container-to-gluetun
    cap_add:
      - NET_ADMIN
    devices:
      - /dev/net/tun:/dev/net/tun
    ports:
      - 8888:8888/tcp # HTTP proxy
      - 8388:8388/tcp # Shadowsocks
      - 8388:8388/udp # Shadowsocks
      - 8080:8080 # qbittorrent
      - 6881:6881
      - 6881:6881/udp
    volumes:
      - [redacted]/gluetun:/gluetun
    environment:
      - VPN_SERVICE_PROVIDER=surfshark
      - VPN_TYPE=openvpn
      - OPENVPN_USER=[redacted]
      - OPENVPN_PASSWORD=[redacted]
      - SERVER_COUNTRIES=Netherlands
      - TZ=US/Eastern

  qbittorrent:
    image: lscr.io/linuxserver/qbittorrent
    container_name: qbittorrent
    network_mode: service:gluetun
    depends_on:
      - gluetun
    environment:
      - PUID=1026
      - PGID=100
      - VERSION=latest
      - TZ=US/Eastern
      - WEBUI_PORT=8080
    volumes:
      - [redacted]/config:/config
      - [redacted]/Downloads:/downloads
    restart: unless-stopped