Thanks for this great docker. I can't wait to get it working.
I'm hoping someone can help. When I enable VPN I get a timeout on the webgui, when I disable the VPN it works. I'm using pia and have put in my preferred server and credentials. UNRAID 6.1.9. Attached are the logs while attempting to start with VPN enabled. The only thing that jumps out at me is the iptable_mangle missing error. Any thoughts?
[info] Env var PUID defined as 99
[info] Env var PGID defined as 100
[info] Permissions already set for /config
Changing shell for nobody.
[info] Starting Supervisor...
2016-05-16 13:17:39,060 CRIT Set uid to user 0
2016-05-16 13:17:39,061 WARN Included extra file "/etc/supervisor/conf.d/rtorrent.conf" during parsing
2016-05-16 13:17:39,069 INFO supervisord started with pid 14
2016-05-16 13:17:40,071 INFO spawned: 'start-script' with pid 17
2016-05-16 13:17:40,074 INFO spawned: 'rtorrent-script' with pid 18
2016-05-16 13:17:40,077 INFO spawned: 'webui-script' with pid 19
2016-05-16 13:17:40,079 INFO spawned: 'privoxy-script' with pid 20
2016-05-16 13:17:40,089 DEBG 'rtorrent-script' stdout output:
[info] rTorrent config file already exists, skipping copy
2016-05-16 13:17:40,097 INFO success: start-script entered RUNNING state, process has stayed up for > than 0 seconds (startsecs)
2016-05-16 13:17:40,097 INFO success: rtorrent-script entered RUNNING state, process has stayed up for > than 0 seconds (startsecs)
2016-05-16 13:17:40,097 INFO success: webui-script entered RUNNING state, process has stayed up for > than 0 seconds (startsecs)
2016-05-16 13:17:40,097 INFO success: privoxy-script entered RUNNING state, process has stayed up for > than 0 seconds (startsecs)
2016-05-16 13:17:40,101 DEBG 'rtorrent-script' stdout output:
[info] Removing any rtorrent session lock files left over from the previous run...
2016-05-16 13:17:40,109 DEBG 'rtorrent-script' stdout output:
[info] VPN is enabled, checking VPN tunnel local ip is valid
2016-05-16 13:17:40,118 DEBG 'privoxy-script' stdout output:
[info] VPN is enabled, checking VPN tunnel local ip is valid
2016-05-16 13:17:40,120 DEBG 'start-script' stdout output:
[info] VPN is enabled, beginning configuration of VPN
2016-05-16 13:17:40,154 DEBG 'start-script' stdout output:
[info] VPN provider defined as pia
[info] VPN config file (ovpn extension) is located at /config/openvpn/openvpn.ovpn
2016-05-16 13:17:40,163 DEBG 'start-script' stdout output:
[info] Env vars defined via docker -e flags for remote host, port and protocol, writing values to ovpn file...
2016-05-16 13:17:40,211 DEBG 'start-script' stdout output:
[info] VPN provider remote gateway defined as ca-toronto.privateinternetaccess.com
[info] VPN provider remote port defined as 1194
[info] VPN provider remote protocol defined as udp
2016-05-16 13:17:40,228 DEBG 'start-script' stdout output:
[info] VPN provider username defined as [removed]
2016-05-16 13:17:40,244 DEBG 'start-script' stdout output:
[info] VPN provider password defined as [removed]
2016-05-16 13:17:40,293 DEBG 'start-script' stdout output:
[info] Default route for container is 172.17.42.1
2016-05-16 13:17:40,332 DEBG 'start-script' stdout output:
[info] Setting permissions recursively on /config/openvpn...
2016-05-16 13:17:40,357 DEBG 'start-script' stdout output:
[info] Adding 192.168.1.0/24 as route via docker eth0
2016-05-16 13:17:40,359 DEBG 'start-script' stdout output:
[info] ip route defined as follows...
--------------------
2016-05-16 13:17:40,361 DEBG 'start-script' stdout output:
default via 172.17.42.1 dev eth0
2016-05-16 13:17:40,365 DEBG 'start-script' stdout output:
172.17.0.0/16 dev eth0 proto kernel scope link src 172.17.0.32
2016-05-16 13:17:40,365 DEBG 'start-script' stdout output:
192.168.1.0/24 via 172.17.42.1 dev eth0
2016-05-16 13:17:40,366 DEBG 'start-script' stdout output:
--------------------
2016-05-16 13:17:40,375 DEBG 'start-script' stdout output:
[info] iptable_mangle module not supported, attempting to load...
2016-05-16 13:17:40,380 DEBG 'start-script' stderr output:
modprobe: FATAL: Module iptable_mangle not found in directory /lib/modules/4.1.18-unRAID
2016-05-16 13:17:40,381 DEBG 'start-script' stdout output:
[warn] iptable_mangle module not supported, you will not be able to connect to rTorrent webui or Privoxy outside of your LAN
2016-05-16 13:17:40,500 DEBG 'start-script' stdout output:
[info] iptables defined as follows...
--------------------
2016-05-16 13:17:40,503 DEBG 'start-script' stdout output:
-P INPUT DROP
-P FORWARD ACCEPT
-P OUTPUT DROP
-A INPUT -i tun0 -j ACCEPT
-A INPUT -s 172.17.0.0/16 -d 172.17.0.0/16 -j ACCEPT
-A INPUT -i eth0 -p udp -m udp --sport 1194 -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --dport 9080 -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --sport 9080 -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --dport 9443 -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --sport 9443 -j ACCEPT
-A INPUT -s 192.168.1.0/24 -i eth0 -p tcp -m tcp --dport 5000 -j ACCEPT
-A INPUT -p udp -m udp --sport 53 -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 0 -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A OUTPUT -o tun0 -j ACCEPT
-A OUTPUT -s 172.17.0.0/16 -d 172.17.0.0/16 -j ACCEPT
-A OUTPUT -o eth0 -p udp -m udp --dport 1194 -j ACCEPT
-A OUTPUT -o eth0 -p tcp -m tcp --dport 9080 -j ACCEPT
-A OUTPUT -o eth0 -p tcp -m tcp --sport 9080 -j ACCEPT
-A OUTPUT -o eth0 -p tcp -m tcp --dport 9443 -j ACCEPT
-A OUTPUT -o eth0 -p tcp -m tcp --sport 9443 -j ACCEPT
-A OUTPUT -d 192.168.1.0/24 -o eth0 -p tcp -m tcp --sport 5000 -j ACCEPT
-A OUTPUT -p udp -m udp --dport 53 -j ACCEPT
-A OUTPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT
-A OUTPUT -o lo -j ACCEPT
2016-05-16 13:17:40,505 DEBG 'start-script' stdout output:
--------------------
2016-05-16 13:17:40,506 DEBG 'start-script' stdout output:
[info] nameservers
2016-05-16 13:17:40,507 DEBG 'start-script' stdout output:
nameserver 8.8.8.8
nameserver 8.8.4.4
2016-05-16 13:17:40,511 DEBG 'start-script' stdout output:
--------------------
[info] Starting OpenVPN...
2016-05-16 13:17:40,530 DEBG 'start-script' stdout output:
Mon May 16 13:17:40 2016 OpenVPN 2.3.9 x86_64-unknown-linux-gnu [sSL (OpenSSL)] [LZO] [EPOLL] [MH] [iPv6] built on Dec 24 2015
2016-05-16 13:17:40,531 DEBG 'start-script' stdout output:
Mon May 16 13:17:40 2016 library versions: OpenSSL 1.0.2f 28 Jan 2016, LZO 2.09
2016-05-16 13:17:40,531 DEBG 'start-script' stdout output:
Mon May 16 13:17:40 2016 WARNING: file 'credentials.conf' is group or others accessible
2016-05-16 13:17:40,621 DEBG 'start-script' stdout output:
Mon May 16 13:17:40 2016 UDPv4 link local: [undef]
Mon May 16 13:17:40 2016 UDPv4 link remote: [AF_INET]172.98.67.61:1194
2016-05-16 13:17:40,722 DEBG 'start-script' stdout output:
Mon May 16 13:17:40 2016 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2016-05-16 13:17:40,892 DEBG 'start-script' stdout output:
Mon May 16 13:17:40 2016 [Private Internet Access] Peer Connection Initiated with [AF_INET]172.98.67.61:1194
2016-05-16 13:17:43,081 DEBG 'start-script' stdout output:
Mon May 16 13:17:43 2016 TUN/TAP device tun0 opened
Mon May 16 13:17:43 2016 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon May 16 13:17:43 2016 /usr/bin/ip link set dev tun0 up mtu 1500
2016-05-16 13:17:43,082 DEBG 'start-script' stdout output:
Mon May 16 13:17:43 2016 /usr/bin/ip addr add dev tun0 local 10.122.1.6 peer 10.122.1.5
2016-05-16 13:17:43,089 DEBG 'start-script' stdout output:
Mon May 16 13:17:43 2016 Initialization Sequence Completed
2016-05-16 13:17:43,127 DEBG 'privoxy-script' stdout output:
[info] Privoxy set to disabled
2016-05-16 13:17:43,127 DEBG fd 24 closed, stopped monitoring <POutputDispatcher at 47038704377080 for <Subprocess at 47038695001120 with name privoxy-script in state RUNNING> (stderr)>
2016-05-16 13:17:43,127 DEBG fd 20 closed, stopped monitoring <POutputDispatcher at 47038704376648 for <Subprocess at 47038695001120 with name privoxy-script in state RUNNING> (stdout)>
2016-05-16 13:17:43,127 INFO exited: privoxy-script (exit status 0; expected)
2016-05-16 13:17:43,127 DEBG received SIGCLD indicating a child quit
2016-05-16 13:17:43,186 DEBG 'rtorrent-script' stdout output:
[info] First run detected, setting rTorrent listening interface 10.122.1.6
2016-05-16 13:17:44,145 DEBG 'rtorrent-script' stdout output:
[info] First run detected, setting rTorrent incoming port 33263
[info] All checks complete, starting rTorrent...
2016-05-16 13:17:44,147 DEBG 'rtorrent-script' stdout output:
Script started, file is /home/nobody/typescript
2016-05-16 13:17:44,173 DEBG 'rtorrent-script' stdout output:
Script done, file is /home/nobody/typescript
2016-05-16 13:17:44,339 DEBG 'webui-script' stdout output:
[info] rtorrent started, setting up webui...
[info] Setting PHP timezone to UTC...
2016-05-16 13:17:44,375 DEBG 'webui-script' stdout output:
[info] nginx cert files already exists, skipping copy
[info] nginx security file already exists, skipping copy
[info] nginx config file already exists, skipping copy
2016-05-16 13:17:44,383 DEBG 'webui-script' stdout output:
[info] rutorrent share folder already exists, skipping copy
2016-05-16 13:17:44,388 DEBG 'webui-script' stdout output:
[info] rutorrent plugins folder already exists, skipping copy
2016-05-16 13:17:44,438 DEBG 'webui-script' stdout output:
[info] starting php-fpm...
2016-05-16 13:17:44,491 DEBG 'webui-script' stderr output:
[NOTICE] [pool www] 'user' directive is ignored when FPM is not running as root
2016-05-16 13:17:44,494 DEBG 'webui-script' stderr output:
[NOTICE] [pool www] 'group' directive is ignored when FPM is not running as root
2016-05-16 13:17:44,504 DEBG 'webui-script' stdout output:
[info] starting nginx...
2016-05-16 13:17:44,567 DEBG 'rtorrent-script' stdout output:
[info] Sleeping for 10 mins before rechecking listen interface and port (port checking is for PIA only)
2016-05-16 13:27:47,595 DEBG 'rtorrent-script' stdout output:
[info] Sleeping for 10 mins before rechecking listen interface and port (port checking is for PIA only)
2016-05-16 13:37:48,063 DEBG 'rtorrent-script' stdout output:
[info] Sleeping for 10 mins before rechecking listen interface and port (port checking is for PIA only)
2016-05-16 13:47:49,060 DEBG 'rtorrent-script' stdout output:
[info] Sleeping for 10 mins before rechecking listen interface and port (port checking is for PIA only)
2016-05-16 13:57:49,778 DEBG 'rtorrent-script' stdout output:
[info] Sleeping for 10 mins before rechecking listen interface and port (port checking is for PIA only)
2016-05-16 14:07:52,876 DEBG 'rtorrent-script' stdout output:
[info] Sleeping for 10 mins before rechecking listen interface and port (port checking is for PIA only)
2016-05-16 14:17:53,798 DEBG 'rtorrent-script' stdout output:
[info] Sleeping for 10 mins before rechecking listen interface and port (port checking is for PIA only)
2016-05-16 14:27:54,958 DEBG 'rtorrent-script' stdout output:
[info] Sleeping for 10 mins before rechecking listen interface and port (port checking is for PIA only)
2016-05-16 14:37:55,903 DEBG 'rtorrent-script' stdout output:
[info] Sleeping for 10 mins before rechecking listen interface and port (port checking is for PIA only)
2016-05-16 14:47:57,158 DEBG 'rtorrent-script' stdout output:
[info] Sleeping for 10 mins before rechecking listen interface and port (port checking is for PIA only)
2016-05-16 14:57:58,256 DEBG 'rtorrent-script' stdout output:
[info] Sleeping for 10 mins before rechecking listen interface and port (port checking is for PIA only)
2016-05-16 15:07:59,327 DEBG 'rtorrent-script' stdout output:
[info] Sleeping for 10 mins before rechecking listen interface and port (port checking is for PIA only)
2016-05-16 15:18:01,352 DEBG 'rtorrent-script' stdout output:
[info] Sleeping for 10 mins before rechecking listen interface and port (port checking is for PIA only)