Gluetun and Proton VPN not working

[Finn0001]

Hello! Trying to get Gluetun set up for the first time. I've watched many tutorials and guides and still can't seem to get things working.

My entire arr setup was working flawlessly and everything automated just with no VPN. Now I'm working towards adding the VPN to the equation. When I send a request from Radarr or Sonarr to qBittorrent the torrent is added to qBitt and will just sit there. No peers or trackers and just stays in "Downloading metadata" state. I checked the logs of Gluetun and no errors and appears to be working with an assigned IP.

Here is my docker compose file. Some of it cut out and only showing pieces I think might matter.

services:
  prowlarr:
    image: lscr.io/linuxserver/prowlarr:latest
    container_name: prowlarr
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=America/Chicago
    volumes:
      - /home/server/Desktop/Docker/prowlarr/config:/config
    network_mode: service:gluetun
    restart: unless-stopped
  flaresolverr:
    image: flaresolverr/flaresolverr:latest
    container_name: flaresolverr
    environment:
      - LOG_LEVEL=info
      - LOG_HTML=false
      - CAPTCHA_SOLVER=hcaptcha-solver
    restart: unless-stopped
    network_mode: service:gluetun
  gluetun:
    image: qmcgaw/gluetun:latest
    container_name: gluetun
    devices:
      - /dev/net/tun:/dev/net/tun
    cap_add:
      - NET_ADMIN
    volumes:
      - /home/server/Desktop/Docker/gluetun:/gluetun
    environment:
      - VPN_SERVICE_PROVIDER=protonvpn
      - VPN_TYPE=wireguard
      - WIREGUARD_PRIVATE_KEY=key
      - WIREGUARD_ADDRESSES=10.2.0.2/32
      - SERVER_COUNTRIES=United States
      - FIREWALL_VPN_INPUT_PORTS=6881
      - PORT_FORWARD_ONLY= on
      - VPN_PORT_FORWARDING= on
    healthcheck:
      test: ping -c 1 www.google.com || exit 1
      interval: 60s
      timeout: 20s
      retries: 5
    ports:
      - 8888:8888/tcp
      - 8388:8388/tcp
      - 8388:8388/udp
      - 8080:8080 #qbittorrent
      - 6881:6881
      - 8191:8191 #FlareSolvarr
      - 9696:9696 #Prowlarr
    restart: unless-stopped
    networks:
      - mediaserver_network
  qbittorrent:
    image: linuxserver/qbittorrent:latest
    container_name: qbittorrent
    depends_on:
      - gluetun
    network_mode: service:gluetun
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=America/Chicago
      - WEBUI_PORT=8080
    volumes:
      - /home/server/Desktop/Docker/qbittorrent/config:/config
      - /mnt/media/Downloads:/downloads
    restart: unless-stopped

Here are logs from Gluetun:

========================================
========================================
=============== gluetun ================
========================================
=========== Made with ❤️ by ============
======= https://github.com/qdm12 =======
========================================
========================================

Running version latest built on 2025-01-22T08:30:14.628Z (commit 13532c8)

🔧 Need help? ☕ Discussion? https://github.com/qdm12/gluetun/discussions/new/choose
🐛 Bug? ✨ New feature? https://github.com/qdm12/gluetun/issues/new/choose
💻 Email? quentin.mcgaw@gmail.com
💰 Help me? https://www.paypal.me/qmcgaw https://github.com/sponsors/qdm12
2025-05-04T02:57:26Z INFO [routing] default route found: interface eth0, gateway 172.25.0.1, assigned IP 172.25.0.4 and family v4
2025-05-04T02:57:26Z INFO [routing] local ethernet link found: eth0
2025-05-04T02:57:26Z INFO [routing] local ipnet found: 172.25.0.0/16
2025-05-04T02:57:26Z INFO [firewall] enabling...
2025-05-04T02:57:26Z INFO [firewall] enabled successfully
2025-05-04T02:57:26Z INFO [storage] merging by most recent 20776 hardcoded servers and 20776 servers read from /gluetun/servers.json
2025-05-04T02:57:27Z INFO Alpine version: 3.20.5
2025-05-04T02:57:27Z INFO OpenVPN 2.5 version: 2.5.10
2025-05-04T02:57:27Z INFO OpenVPN 2.6 version: 2.6.11
2025-05-04T02:57:27Z INFO IPtables version: v1.8.10
2025-05-04T02:57:27Z INFO Settings summary:
├── VPN settings:
|   ├── VPN provider settings:
|   |   ├── Name: protonvpn
|   |   ├── Server selection settings:
|   |   |   ├── VPN type: wireguard
|   |   |   ├── Countries: united states
|   |   |   ├── Port forwarding only servers: yes
|   |   |   └── Wireguard selection settings:
|   |   └── Automatic port forwarding settings:
|   |       ├── Redirection listening port: disabled
|   |       ├── Use port forwarding code for current provider
|   |       └── Forwarded port file path: /tmp/gluetun/forwarded_port
|   └── Wireguard settings:
|       ├── Private key: cCL...2Y=
|       ├── Interface addresses:
|       |   └── 10.2.0.2/32
|       ├── Allowed IPs:
|       |   ├── 0.0.0.0/0
|       |   └── ::/0
|       └── Network interface: tun0
|           └── MTU: 1320
├── DNS settings:
|   ├── Keep existing nameserver(s): no
|   ├── DNS server address to use: 127.0.0.1
|   └── DNS over TLS settings:
|       ├── Enabled: yes
|       ├── Update period: every 24h0m0s
|       ├── Upstream resolvers:
|       |   └── cloudflare
|       ├── Caching: yes
|       ├── IPv6: no
|       └── DNS filtering settings:
|           ├── Block malicious: yes
|           ├── Block ads: no
|           ├── Block surveillance: no
|           └── Blocked IP networks:
|               ├── 127.0.0.1/8
|               ├── 10.0.0.0/8
|               ├── 172.16.0.0/12
|               ├── 192.168.0.0/16
|               ├── 169.254.0.0/16
|               ├── ::1/128
|               ├── fc00::/7
|               ├── fe80::/10
|               ├── ::ffff:127.0.0.1/104
|               ├── ::ffff:10.0.0.0/104
|               ├── ::ffff:169.254.0.0/112
|               ├── ::ffff:172.16.0.0/108
|               └── ::ffff:192.168.0.0/112
├── Firewall settings:
|   ├── Enabled: yes
|   └── VPN input ports:
|       └── 6881
├── Log settings:
|   └── Log level: info
├── Health settings:
|   ├── Server listening address: 127.0.0.1:9999
|   ├── Target address: cloudflare.com:443
|   ├── Duration to wait after success: 5s
|   ├── Read header timeout: 100ms
|   ├── Read timeout: 500ms
|   └── VPN wait durations:
|       ├── Initial duration: 6s
|       └── Additional duration: 5s
├── Shadowsocks server settings:
|   └── Enabled: no
├── HTTP proxy settings:
|   └── Enabled: no
├── Control server settings:
|   ├── Listening address: :8000
|   ├── Logging: yes
|   └── Authentication file path: /gluetun/auth/config.toml
├── Storage settings:
|   └── Filepath: /gluetun/servers.json
├── OS Alpine settings:
|   ├── Process UID: 1000
|   └── Process GID: 1000
├── Public IP settings:
|   ├── IP file path: /tmp/gluetun/ip
|   ├── Public IP data base API: ipinfo
|   └── Public IP data backup APIs:
|       ├── ifconfigco
|       ├── ip2location
|       └── cloudflare
└── Version settings:
    └── Enabled: yes
2025-05-04T02:57:27Z INFO [routing] default route found: interface eth0, gateway 172.25.0.1, assigned IP 172.25.0.4 and family v4
2025-05-04T02:57:27Z INFO [routing] adding route for 0.0.0.0/0
2025-05-04T02:57:27Z INFO [firewall] setting allowed subnets...
2025-05-04T02:57:27Z INFO [routing] default route found: interface eth0, gateway 172.25.0.1, assigned IP 172.25.0.4 and family v4
2025-05-04T02:57:27Z INFO [dns] using plaintext DNS at address 1.1.1.1
2025-05-04T02:57:27Z INFO [http server] http server listening on [::]:8000
2025-05-04T02:57:27Z INFO [healthcheck] listening on 127.0.0.1:9999
2025-05-04T02:57:27Z INFO [firewall] allowing VPN connection...
2025-05-04T02:57:27Z INFO [wireguard] Using available kernelspace implementation
2025-05-04T02:57:27Z INFO [wireguard] Connecting to 146.70.183.18:51820
2025-05-04T02:57:27Z INFO [wireguard] Wireguard setup is complete. Note Wireguard is a silent protocol and it may or may not work, without giving any error message. Typically i/o timeout errors indicate the Wireguard connection is not working.
2025-05-04T02:57:27Z INFO [firewall] setting allowed input port 6881 through interface tun0...
2025-05-04T02:57:27Z INFO [dns] downloading hostnames and IP block lists
2025-05-04T02:57:32Z INFO [healthcheck] healthy!
2025-05-04T02:57:33Z INFO [dns] DNS server listening on [::]:53
2025-05-04T02:57:34Z INFO [dns] ready
2025-05-04T02:57:34Z INFO [ip getter] Public IP address is 146.70.183.28 (United States, Florida, Miami - source: ipinfo)
2025-05-04T02:57:35Z INFO [vpn] You are running 1 commit behind the most recent latest
2025-05-04T02:57:35Z INFO [port forwarding] starting
2025-05-04T02:57:36Z INFO [port forwarding] gateway external IPv4 address is 146.70.183.28
2025-05-04T02:57:36Z INFO [port forwarding] port forwarded is 56933
2025-05-04T02:57:36Z INFO [firewall] setting allowed input port 56933 through interface tun0...
2025-05-04T02:57:36Z INFO [port forwarding] writing port file /tmp/gluetun/forwarded_port
2025-05-04T17:24:20Z INFO [healthcheck] healthy!
2025-05-04T19:59:13Z INFO [healthcheck] healthy!
2025-05-04T19:59:18Z INFO [healthcheck] healthy!
2025-05-05T02:57:27Z INFO [dns] downloading hostnames and IP block lists
2025-05-05T02:57:28Z INFO [dns] stopping
2025-05-05T02:57:28Z INFO [dns] using plaintext DNS at address 1.1.1.1
2025-05-05T02:57:28Z INFO [dns] starting
2025-05-05T02:57:28Z INFO [dns] downloading hostnames and IP block lists
2025-05-05T02:57:29Z INFO [dns] DNS server listening on [::]:53
2025-05-05T02:57:29Z INFO [dns] ready

qBittorrent:

Peer ID: "-qB5040-"
HTTP User-Agent: "qBittorrent/5.0.4"
Distributed Hash Table (DHT) support: ON
Local Peer Discovery support: ON
Peer Exchange (PeX) support: ON
Anonymous mode: OFF
Encryption support: ON
Successfully listening on IP. IP: "127.0.0.1". Port: "TCP/6881"
Successfully listening on IP. IP: "127.0.0.1". Port: "UTP/6881"
Successfully listening on IP. IP: "172.25.0.4". Port: "TCP/6881"
Successfully listening on IP. IP: "172.25.0.4". Port: "UTP/6881"
Successfully listening on IP. IP: "::1". Port: "TCP/6881"
Successfully listening on IP. IP: "::1". Port: "UTP/6881"
IP geolocation database loaded. Type: DBIP-Country-Lite. Build time: Mon Mar 31 20:21:37 2025.
Couldn't download IP geolocation database file. Reason: The operation was canceled

Prowlarr

[Warn] ApplicationService: NzbDrone.Core.Applications.ApplicationService server is currently unavailable. Http request timed out

[v1.35.1.5034] System.Net.WebException: Http request timed out
   at NzbDrone.Common.Http.Dispatchers.ManagedHttpDispatcher.GetResponseAsync(HttpRequest request, CookieContainer cookies) in ./Prowlarr.Common/Http/Dispatchers/ManagedHttpDispatcher.cs:line 170
   at NzbDrone.Common.Http.HttpClient.ExecuteRequestAsync(HttpRequest request, CookieContainer cookieContainer) in ./Prowlarr.Common/Http/HttpClient.cs:line 171
   at NzbDrone.Common.Http.HttpClient.ExecuteAsync(HttpRequest request) in ./Prowlarr.Common/Http/HttpClient.cs:line 70
   at NzbDrone.Common.Http.HttpClient.Execute(HttpRequest request) in ./Prowlarr.Common/Http/HttpClient.cs:line 137
   at NzbDrone.Core.Applications.Sonarr.SonarrV3Proxy.Execute[TResource](HttpRequest request) in ./Prowlarr.Core/Applications/Sonarr/SonarrV3Proxy.cs:line 215
   at NzbDrone.Core.Applications.Sonarr.SonarrV3Proxy.GetIndexers(SonarrSettings settings) in ./Prowlarr.Core/Applications/Sonarr/SonarrV3Proxy.cs:line 49
   at NzbDrone.Core.Applications.Sonarr.Sonarr.GetIndexerMappings() in ./Prowlarr.Core/Applications/Sonarr/Sonarr.cs:line 97
   at NzbDrone.Core.Applications.ApplicationService.<>c.<SyncIndexers>b__14_1(IApplication a) in ./Prowlarr.Core/Applications/ApplicationService.cs:line 137
   at NzbDrone.Core.Applications.ApplicationService.ExecuteAction[TResult](Func`2 applicationAction, IApplication application) in ./Prowlarr.Core/Applications/ApplicationService.cs:line 287

[Sacco-Halopro]

If you need proxy IPs, you can contact me at any time and I will offer you a very favorable price

[FCSO-byte]

Did you ever get this to work I think i am in the same boat as you?