I use vopono to run (only) Jackett through a VPN connection too.

It feels great when it all works together.

On my NAS I run a Mullvad/WireGuard container with a kill switch, and Jackett, qBittorrent, etc. share its network stack. Being able to do so with a single Docker Compose option (`network_mode: container:vpn`) is a killer feature.

So I download everything I can't legally access here, and don't have to worry about my IP leaking. Then on my TV I open Kodi and enjoy.

Cheaper than Netflix+Prime+Hulu+Disney+Apple+HBO and pretty low maintenance.

I'd love a writeup or a guide.

Best I can do is share my Compose files :)

https://gist.github.com/1player/dbdafdd197e1623f5831108fc0cc...

It's pretty simple overall: gluetun is the VPN container, qBittorrent runs inside of it and downloads torrents, Jackett is a torrent search aggregator, Sonarr&Radarr use Jackett+qBittorrent to download movies and TV shows when they release, Bazarr adds subtitles after the fact.

Everything goes into a media directory, which my NAS shares via SMB. Only effort required is paying my VPN subscription and updating the Docker images once in a while.

Which line has the Killswitch?

Gluetun has an integrated killswitch: https://github.com/qdm12/gluetun

I used to use https://github.com/dperson/openvpn-client which has a killswitch option as well.

By kill-switch I mean iptables rules that don't let anything out if there's no VPN interface up. So you don't run the risk of leaking torrent stuff through your plain-text connection if the VPN goes down.