26 minutes ago, betaman said:

Well, this is super easy to configure and essentially offers the same benefit as the VPN enabled dockers. I didn't change containers as mentioned, just disabled the built-in VPN and moved all my dockers over to the tunnel network. Anyone just starting out and wanting to put "all" their containers behind a VPN should use the method in the video. It's way simpler now with the advances in the OS and use of Wireguard.

Whilst the unraid wireguard vpn method is really cool (and i genuinely mean this!) it does have one problem when it comes to bittorrent, no port forwarding (so no incoming port), at least that was how it was last time i looked into it.

7 minutes ago, binhex said:

Whilst the unraid wireguard vpn method is really cool (and i genuinely mean this!) it does have one problem when it comes to bittorrent, no port forwarding (so no incoming port), at least that was how it was last time i looked into it.

So I'm not sure if this is the same thing or not but I think that's why I need a PIA Server that uses port forwarding? If I don't pick one that has it then the bittorrent client either fails or is miserably slow. Make sense?

p.s.

Huge thanks to you and the work you've done over the years. My server dates back to 2009 and I've used your dockers forever!

Edited June 15Jun 15 by betaman

10 minutes ago, betaman said:

So I'm not sure if this is the same thing or not but I think that's why I need a PIA Server that uses port forwarding? If I don't pick one that has it then the bittorrent client either fails or is miserably slow. Make sense?

This makes perfect sense to me, which is why the spaceinvader one video you linked to and the solution shown in that video do NOT provide you with an incoming port, that is my point, so your speeds will be slow if you use that method, it doesnt matter what PIA endpoint you select when using that method, you will not get an incoming port, period.

3 minutes ago, binhex said:

This makes perfect sense to me, which is why the spaceinvader one video you linked to and the solution shown in that video do NOT provide you with an incoming port, that is my point, so your speeds will be slow if you use that method, it doesnt matter what PIA endpoint you select when using that method, you will not get an incoming port, period.

Ok, so it's the upload speed that will be majorly impacted in this case? You're saying this is a WG limitation?

5 minutes ago, betaman said:

Ok, so it's the upload speed that will be majorly impacted in this case?

no, both, less peers means less upload and download speed.

5 minutes ago, betaman said:

You're saying this is a WG limitation?

not at all, wireguard can do it, but the unraid wireguard implementation has no functionality to allocate a dynamic incoming port from the VPN provider allocate a incoming port from the VPN provider, and yes its tricky as each provider does it differently, PIA is actually one of the most complex providers.

Just now, binhex said:

no, both, less peers means less upload and download speed.

not at all, wireguard can do it, but the unraid wireguard implementation has no functionality to allocate a incoming port from the VPN provider, and yes its tricky as each provider does it differently, PIA is actually one of the most complex providers.

Ok, interesting. I didn't see a noticable difference in speeds between my old (this docker) and new (Unraid wireguard setup from video) setups. I'll keep an eye on it and report back.

1 hour ago, binhex said:

Whilst the unraid wireguard vpn method is really cool (and i genuinely mean this!) it does have one problem when it comes to bittorrent, no port forwarding (so no incoming port), at least that was how it was last time i looked into it.

It does port forward just fine. It uses whatever mapping you use for container. So if you try to host a website in the container on port 80, but map it it 2345. It's port 2345 for the wireguard forwarding. Granted, gonna be a pain in the ass for anything dynamic but when you know what you need, it works fine. My main page and repo is hosted that way, including their proxy, as there I don't need ipv6.

14 minutes ago, Mainfrezzer said:

Granted, gonna be a pain in the ass for anything dynamic

Sadly that is a problem for PIA, and protonvpn (i think) also uses dynamic ports, thanks for chipping in though and confirming its fine for static incoming ports, that is good to know!.

On 6/13/2026 at 5:32 PM, wgstarks said:

Looking at your docker run command I see lots of ports listed in VPN_INPUT_PORTS that I'm not seeing a corresponding port mapping for.

See https://github.com/binhex/documentation/blob/master/docker/faq/vpn.md.

Scroll down to Q24.

Turns out it was tailscale that broke it. I've been running tailscale since unraid introduced it and never had a problem so I had no reason to suspect this was the issue. I had to add the tailscale network to the LAN_NETWORK. Holy crap I'm so happy this is fixed. Took me 2 weeks to track this down lol. Anyway, thanks for your help.

7 minutes ago, hyp3r_bor3an said:

I've appealed to both reddit and AI, neither has been helpful. If you have any advice or insight it would be greatly appreciated.

Attach your supervisord log and docker run command to your next post. Be sure to redact any users/passwords.

just went through 7.3.1 update, fyi, looks like tailscale broke something when using bridge on the container and it wont open webgui qbit, disconnecting tailscale on local client and its back, not sure why.... I'll worry about it later I guess. service continues working fine in background ofc.

1 hour ago, Mizerka said:

just went through 7.3.1 update, fyi, looks like tailscale broke something when using bridge on the container and it wont open webgui qbit, disconnecting tailscale on local client and its back, not sure why.... I'll worry about it later I guess. service continues working fine in background ofc.

Same here.

On 6/15/2026 at 12:29 PM, betaman said:

Ok, interesting. I didn't see a noticable difference in speeds between my old (this docker) and new (Unraid wireguard setup from video) setups. I'll keep an eye on it and report back.

Just reporting back as stated above. Been using the wireguard method and still haven't noticed any speed issues torrenting. Note: I only use public trackers so perhaps if I was seeding more it might be more noticeable? Not sure tbh.

I have an issue where both prowlarr and cross-seed are not able to talk to my binhex container resulting in a time out. I've tried curling the webui from some random containers on the same docker network and that times out. Am I missing something, do I need to change anything?

On 6/23/2026 at 7:27 AM, Andiroo2 said:

Same here.

On 6/23/2026 at 6:01 AM, Mizerka said:

just went through 7.3.1 update, fyi, looks like tailscale broke something when using bridge on the container and it wont open webgui qbit, disconnecting tailscale on local client and its back, not sure why.... I'll worry about it later I guess. service continues working fine in background ofc.

I had the same issue. Unsure if it was just coincence or if the newer version of OpenVPN is stricter on old configs, but I just needed to get a new ovpn file and its working now. Worth a shot.

i found that austria.privacy.site is incorrectly reported as not supporting port forwarding. according to PIAs own serverlist, it supports it.

thanks for all your effort btw

https://serverlist.piaservers.net/vpninfo/servers/v6

3 hours ago, zeus3 said:

i found that austria.privacy.site is incorrectly reported as not supporting port forwarding. according to PIAs own serverlist, it supports it.

thanks for all your effort btw

https://serverlist.piaservers.net/vpninfo/servers/v6

same for Andorra

Hello, recently updated my container and now I'm having an issue where sonarr and radarr cant communicate with qbitorrentvpn when VPN_ENABLED = yes. Everything works fine when it is set to no. It was working fine for over a year with the configurations I had set and now all of a sudden it broke. Any help would be awesome.

text error warn system array login

2026-07-10 13:28:44 DCO version: N/A

2026-07-10 13:28:44 Restart pause, 2 second(s)

2026-07-10 13:28:46,643 DEBG 'start-script' stdout output:

2026-07-10 13:28:46 WARNING: --ping should normally be used with --ping-restart or --ping-exit

2026-07-10 13:28:46 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

2026-07-10 13:28:46,643 DEBG 'start-script' stdout output:

2026-07-10 13:28:46 TCP/UDP: Preserving recently used remote address: [AF_INET]104.18.40.93:443

2026-07-10 13:28:46 Socket Buffers: R=[87380->87380] S=[65536->65536]

2026-07-10 13:28:46 Attempting to establish TCP connection with [AF_INET]104.18.40.93:443

2026-07-10 13:28:46,659 DEBG 'start-script' stdout output:

2026-07-10 13:28:46 TCP connection established with [AF_INET]104.18.40.93:443

2026-07-10 13:28:46 TCPv4_CLIENT link local: (not bound)

2026-07-10 13:28:46 TCPv4_CLIENT link remote: [AF_INET]104.18.40.93:443

2026-07-10 13:28:46,672 DEBG 'start-script' stdout output:

2026-07-10 13:28:46 WARNING: Bad encapsulated packet length from peer (18516), which must be > 0 and <= 1800 -- please ensure that --tun-mtu or --link-mtu is equal on both peers -- this condition could also indicate a possible active attack on the TCP link -- [Attempting restart...]

2026-07-10 13:28:46 Connection reset, restarting [0]

2026-07-10 13:28:46,673 DEBG 'start-script' stdout output:

2026-07-10 13:28:46 SIGHUP[soft,connection-reset] received, process restarting

2026-07-10 13:28:46,673 DEBG 'start-script' stdout output:

2026-07-10 13:28:46 DEPRECATED OPTION: --persist-key option ignored. Keys are now always persisted across restarts.

2026-07-10 13:28:46 DEPRECATED OPTION: --fast-io option ignored.

2026-07-10 13:28:46,673 DEBG 'start-script' stdout output:

2026-07-10 13:28:46 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (DEFAULT). OpenVPN ignores --cipher for cipher negotiations.

2026-07-10 13:28:46 Note: '--allow-compression' is not set to 'no', disabling data channel offload.

2026-07-10 13:28:46,673 DEBG 'start-script' stdout output:

2026-07-10 13:28:46 WARNING: file 'credentials.conf' is group or others accessible

2026-07-10 13:28:46 OpenVPN 2.7.5 [git:makepkg/b25bb2a8bda814ed+] x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO] built on Jul 1 2026

2026-07-10 13:28:46 library versions: OpenSSL 3.6.3 9 Jun 2026, LZO 2.10

2026-07-10 13:28:46 DCO version: N/A

2026-07-10 13:28:46 Restart pause, 2 second(s)

2026-07-10 13:28:48,674 DEBG 'start-script' stdout output:

2026-07-10 13:28:48 WARNING: --ping should normally be used with --ping-restart or --ping-exit

2026-07-10 13:28:48 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

2026-07-10 13:28:48,674 DEBG 'start-script' stdout output:

2026-07-10 13:28:48 TCP/UDP: Preserving recently used remote address: [AF_INET]172.64.147.163:443

2026-07-10 13:28:48,674 DEBG 'start-script' stdout output:

2026-07-10 13:28:48 Socket Buffers: R=[87380->87380] S=[65536->65536]

2026-07-10 13:28:48 Attempting to establish TCP connection with [AF_INET]172.64.147.163:443

2026-07-10 13:28:48,688 DEBG 'start-script' stdout output:

2026-07-10 13:28:48 TCP connection established with [AF_INET]172.64.147.163:443

2026-07-10 13:28:48 TCPv4_CLIENT link local: (not bound)

2026-07-10 13:28:48 TCPv4_CLIENT link remote: [AF_INET]172.64.147.163:443

2026-07-10 13:28:48,700 DEBG 'start-script' stdout output:

2026-07-10 13:28:48 WARNING: Bad encapsulated packet length from peer (18516), which must be > 0 and <= 1800 -- please ensure that --tun-mtu or --link-mtu is equal on both peers -- this condition could also indicate a possible active attack on the TCP link -- [Attempting restart...]

2026-07-10 13:28:48 Connection reset, restarting [0]

2026-07-10 13:28:48,700 DEBG 'start-script' stdout output:

2026-07-10 13:28:48 SIGHUP[soft,connection-reset] received, process restarting

2026-07-10 13:28:48,700 DEBG 'start-script' stdout output:

2026-07-10 13:28:48 DEPRECATED OPTION: --persist-key option ignored. Keys are now always persisted across restarts.

2026-07-10 13:28:48,700 DEBG 'start-script' stdout output:

2026-07-10 13:28:48 DEPRECATED OPTION: --fast-io option ignored.

2026-07-10 13:28:48 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (DEFAULT). OpenVPN ignores --cipher for cipher negotiations.

2026-07-10 13:28:48,700 DEBG 'start-script' stdout output:

2026-07-10 13:28:48 Note: '--allow-compression' is not set to 'no', disabling data channel offload.

2026-07-10 13:28:48,701 DEBG 'start-script' stdout output:

2026-07-10 13:28:48 WARNING: file 'credentials.conf' is group or others accessible

2026-07-10 13:28:48 OpenVPN 2.7.5 [git:makepkg/b25bb2a8bda814ed+] x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO] built on Jul 1 2026

2026-07-10 13:28:48 library versions: OpenSSL 3.6.3 9 Jun 2026, LZO 2.10

2026-07-10 13:28:48 DCO version: N/A

2026-07-10 13:28:48,701 DEBG 'start-script' stdout output:

2026-07-10 13:28:48 Restart pause, 2 second(s)

2026-07-10 13:28:50,701 DEBG 'start-script' stdout output:

2026-07-10 13:28:50 WARNING: --ping should normally be used with --ping-restart or --ping-exit

2026-07-10 13:28:50 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

2026-07-10 13:28:50,701 DEBG 'start-script' stdout output:

2026-07-10 13:28:50 TCP/UDP: Preserving recently used remote address: [AF_INET]86.107.55.233:443

2026-07-10 13:28:50 Socket Buffers: R=[87380->87380] S=[65536->65536]

2026-07-10 13:28:50 Attempting to establish TCP connection with [AF_INET]86.107.55.233:443

Hi, I am running binhex/arch-qbittorrentvpn:4.3.9-2-01 with pia is there any issues in updating to the latest as I have stayed on this version because of file locations changing.

cheers

23 minutes ago, cattledog said:

Hi, I am running binhex/arch-qbittorrentvpn:4.3.9-2-01 with pia is there any issues in updating to the latest as I have stayed on this version because of file locations changing.

cheers

Not sure what you mean by file locations changing but I haven’t had any issues with 5.2.3-1-01.

19 minutes ago, wgstarks said:

Not sure what you mean by file locations changing but I haven’t had any issues with 5.2.3-1-01.

it now not alowing http://192.168.0.155:8080/ to gui?

14 minutes ago, cattledog said:

it now not alowing http://192.168.0.155:8080/ to gui?

Do you have another container using 8080?

1 minute ago, wgstarks said:

Do you have another container using 8080?

No I dont, I also see that sonarr and radarr failing to connect to qbittorrentvpn as well

24 minutes ago, cattledog said:

No I dont, I also see that sonarr and radarr failing to connect to qbittorrentvpn as well

Copy and paste the failed docker run command to your next post.

17 minutes ago, wgstarks said:

Copy and paste the failed docker run command to your next post.

-A INPUT -s 45.130.141.134/32 -i eth0 -j ACCEPT

-A INPUT -s 45.130.141.159/32 -i eth0 -j ACCEPT

-A INPUT -s 104.18.40.93/32 -i eth0 -j ACCEPT

-A INPUT -s 172.64.147.163/32 -i eth0 -j ACCEPT

-A INPUT -s 104.18.37.206/32 -i eth0 -j ACCEPT

-A INPUT -s 172.64.150.50/32 -i eth0 -j ACCEPT

-A INPUT -s 104.18.159.201/32 -i eth0 -j ACCEPT

-A INPUT -s 104.19.240.167/32 -i eth0 -j ACCEPT

-A INPUT -s 172.17.0.0/16 -d 172.17.0.0/16 -j ACCEPT

-A INPUT -s 45.130.141.198/32 -i eth0 -j ACCEPT

-A INPUT -s 181.214.199.133/32 -i eth0 -j ACCEPT

-A INPUT -s 45.130.141.148/32 -i eth0 -j ACCEPT

-A INPUT -s 45.130.141.134/32 -i eth0 -j ACCEPT

-A INPUT -s 45.130.141.159/32 -i eth0 -j ACCEPT

-A INPUT -s 104.18.40.93/32 -i eth0 -j ACCEPT

-A INPUT -s 172.64.147.163/32 -i eth0 -j ACCEPT

-A INPUT -s 104.18.37.206/32 -i eth0 -j ACCEPT

-A INPUT -s 172.64.150.50/32 -i eth0 -j ACCEPT

-A INPUT -s 104.18.159.201/32 -i eth0 -j ACCEPT

-A INPUT -s 104.19.240.167/32 -i eth0 -j ACCEPT

-A INPUT -i eth0 -p tcp -m tcp --dport 8080 -j ACCEPT

-A INPUT -i eth0 -p udp -m udp --dport 8080 -j ACCEPT

-A INPUT -p icmp -m icmp --icmp-type 0 -j ACCEPT

-A INPUT -i lo -j ACCEPT

-A INPUT -i tun0 -j ACCEPT

-A OUTPUT -d 45.130.141.198/32 -o eth0 -j ACCEPT

-A OUTPUT -d 181.214.199.133/32 -o eth0 -j ACCEPT

-A OUTPUT -d 45.130.141.148/32 -o eth0 -j ACCEPT

-A OUTPUT -d 45.130.141.134/32 -o eth0 -j ACCEPT

-A OUTPUT -d 45.130.141.159/32 -o eth0 -j ACCEPT

-A OUTPUT -d 104.18.40.93/32 -o eth0 -j ACCEPT

-A OUTPUT -d 172.64.147.163/32 -o eth0 -j ACCEPT

-A OUTPUT -d 104.18.37.206/32 -o eth0 -j ACCEPT

-A OUTPUT -d 172.64.150.50/32 -o eth0 -j ACCEPT

-A OUTPUT -d 104.18.159.201/32 -o eth0 -j ACCEPT

-A OUTPUT -d 104.19.240.167/32 -o eth0 -j ACCEPT

-A OUTPUT -s 172.17.0.0/16 -d 172.17.0.0/16 -j ACCEPT

-A OUTPUT -d 45.130.141.198/32 -o eth0 -j ACCEPT

-A OUTPUT -d 181.214.199.133/32 -o eth0 -j ACCEPT

-A OUTPUT -d 45.130.141.148/32 -o eth0 -j ACCEPT

-A OUTPUT -d 45.130.141.134/32 -o eth0 -j ACCEPT

-A OUTPUT -d 45.130.141.159/32 -o eth0 -j ACCEPT

-A OUTPUT -d 104.18.40.93/32 -o eth0 -j ACCEPT

-A OUTPUT -d 172.64.147.163/32 -o eth0 -j ACCEPT

-A OUTPUT -d 104.18.37.206/32 -o eth0 -j ACCEPT

-A OUTPUT -d 172.64.150.50/32 -o eth0 -j ACCEPT

-A OUTPUT -d 104.18.159.201/32 -o eth0 -j ACCEPT

-A OUTPUT -d 104.19.240.167/32 -o eth0 -j ACCEPT

-A OUTPUT -o eth0 -p tcp -m tcp --sport 8080 -j ACCEPT

-A OUTPUT -o eth0 -p udp -m udp --sport 8080 -j ACCEPT

-A OUTPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT

-A OUTPUT -o lo -j ACCEPT

-A OUTPUT -o tun0 -j ACCEPT

2026-07-13 11:28:43,772 DEBG 'start-script' stdout output:

--------------------

2026-07-13 11:28:43,774 DEBG 'start-script' stdout output:

[info] Starting OpenVPN (non daemonised)...

2026-07-13 11:28:43,791 DEBG 'start-script' stdout output:

2026-07-13 11:28:43 DEPRECATED OPTION: --persist-key option ignored. Keys are now always persisted across restarts.

2026-07-13 11:28:43,793 DEBG 'start-script' stdout output:

2026-07-13 11:28:43 DEPRECATED OPTION: --cipher set to 'aes-128-cbc' but missing in --data-ciphers (DEFAULT). OpenVPN ignores --cipher for cipher negotiations.

2026-07-13 11:28:43,793 DEBG 'start-script' stdout output:

2026-07-13 11:28:43 WARNING: file 'credentials.conf' is group or others accessible

2026-07-13 11:28:43 OpenVPN 2.7.5 [git:makepkg/b25bb2a8bda814ed+] x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO] built on Jul 1 2026

2026-07-13 11:28:43 library versions: OpenSSL 3.6.3 9 Jun 2026, LZO 2.10

2026-07-13 11:28:43,793 DEBG 'start-script' stdout output:

2026-07-13 11:28:43 DCO version: N/A

2026-07-13 11:28:43,794 DEBG 'start-script' stdout output:

2026-07-13 11:28:43 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

2026-07-13 11:28:43,795 DEBG 'start-script' stdout output:

2026-07-13 11:28:43 TCP/UDP: Preserving recently used remote address: [AF_INET]104.19.240.167:1198

2026-07-13 11:28:43 UDPv4 link local: (not bound)

2026-07-13 11:28:43 UDPv4 link remote: [AF_INET]104.19.240.167:1198

2026-07-13 11:29:43,512 DEBG 'start-script' stdout output:

2026-07-13 11:29:43 [UNDEF] Inactivity timeout (--ping-restart), restarting

2026-07-13 11:29:43,513 DEBG 'start-script' stdout output:

2026-07-13 11:29:43 SIGHUP[soft,ping-restart] received, process restarting

2026-07-13 11:29:43,514 DEBG 'start-script' stdout output:

2026-07-13 11:29:43 DEPRECATED OPTION: --persist-key option ignored. Keys are now always persisted across restarts.

2026-07-13 11:29:43,514 DEBG 'start-script' stdout output:

2026-07-13 11:29:43 DEPRECATED OPTION: --cipher set to 'aes-128-cbc' but missing in --data-ciphers (DEFAULT). OpenVPN ignores --cipher for cipher negotiations.

2026-07-13 11:29:43,514 DEBG 'start-script' stdout output:

2026-07-13 11:29:43 WARNING: file 'credentials.conf' is group or others accessible

2026-07-13 11:29:43 OpenVPN 2.7.5 [git:makepkg/b25bb2a8bda814ed+] x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO] built on Jul 1 2026

2026-07-13 11:29:43 library versions: OpenSSL 3.6.3 9 Jun 2026, LZO 2.10

2026-07-13 11:29:43 DCO version: N/A

2026-07-13 11:29:45,515 DEBG 'start-script' stdout output:

2026-07-13 11:29:45 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

2026-07-13 11:29:45,516 DEBG 'start-script' stdout output:

2026-07-13 11:29:45 TCP/UDP: Preserving recently used remote address: [AF_INET]104.18.37.206:1198

2026-07-13 11:29:45 UDPv4 link local: (not bound)

2026-07-13 11:29:45 UDPv4 link remote: [AF_INET]104.18.37.206:1198

2026-07-13 11:30:45,027 DEBG 'start-script' stdout output:

2026-07-13 11:30:45 [UNDEF] Inactivity timeout (--ping-restart), restarting

2026-07-13 11:30:45,028 DEBG 'start-script' stdout output:

2026-07-13 11:30:45 SIGHUP[soft,ping-restart] received, process restarting

2026-07-13 11:30:45,029 DEBG 'start-script' stdout output:

2026-07-13 11:30:45 DEPRECATED OPTION: --persist-key option ignored. Keys are now always persisted across restarts.

2026-07-13 11:30:45,029 DEBG 'start-script' stdout output:

2026-07-13 11:30:45 DEPRECATED OPTION: --cipher set to 'aes-128-cbc' but missing in --data-ciphers (DEFAULT). OpenVPN ignores --cipher for cipher negotiations.

2026-07-13 11:30:45,030 DEBG 'start-script' stdout output:

2026-07-13 11:30:45 WARNING: file 'credentials.conf' is group or others accessible

2026-07-13 11:30:45 OpenVPN 2.7.5 [git:makepkg/b25bb2a8bda814ed+] x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO] built on Jul 1 2026

2026-07-13 11:30:45 library versions: OpenSSL 3.6.3 9 Jun 2026, LZO 2.10

2026-07-13 11:30:45 DCO version: N/A

2026-07-13 11:30:46,030 INFO reaped unknown pid 70 (terminated by SIGTERM)

2026-07-13 11:30:46,031 WARN received SIGTERM indicating exit request

2026-07-13 11:30:46,032 DEBG killing watchdog-script (pid 445) with signal SIGTERM

2026-07-13 11:30:46,032 INFO waiting for start-script, watchdog-script to die

2026-07-13 11:30:46,033 DEBG fd 12 closed, stopped monitoring <POutputDispatcher at 22926627839248 for <Subprocess at 22926627833168 with name watchdog-script in state STOPPING> (stdout)>

2026-07-13 11:30:46,033 DEBG fd 16 closed, stopped monitoring <POutputDispatcher at 22926627791552 for <Subprocess at 22926627833168 with name watchdog-script in state STOPPING> (stderr)>

2026-07-13 11:30:46,033 WARN stopped: watchdog-script (exit status 143)

2026-07-13 11:30:46,034 DEBG received SIGCHLD indicating a child quit

2026-07-13 11:30:46,034 DEBG killing start-script (pid 444) with signal SIGTERM

2026-07-13 11:30:47,030 DEBG 'start-script' stdout output:

2026-07-13 11:30:47 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

2026-07-13 11:30:47,031 DEBG fd 9 closed, stopped monitoring <POutputDispatcher at 22926627919520 for <Subprocess at 22926629108912 with name start-script in state STOPPING> (stdout)>

2026-07-13 11:30:47,031 DEBG fd 11 closed, stopped monitoring <POutputDispatcher at 22926627838288 for <Subprocess at 22926629108912 with name start-script in state STOPPING> (stderr)>

2026-07-13 11:30:47,032 WARN stopped: start-script (terminated by SIGTERM)

2026-07-13 11:30:47,032 DEBG received SIGCHLD indicating a child quit

Created by...

___. .__ .__

\_ |__ |__| ____ | |__ ____ ___ ___

| __ \| |/ \| | \_/ __ \\ \/ /

| \_\ \ | | \ Y \ ___/ > <

|___ /__|___| /___| /\___ >__/\_ \

\/ \/ \/ \/ \/

https://hub.docker.com/u/binhex/

2026-07-13 11:30:53.174082 [info] Host is running unRAID

2026-07-13 11:30:53.200781 [info] System information: Linux f0d4c5f7b9a8 6.18.38-Unraid #1 SMP PREEMPT_DYNAMIC Mon Jul 6 15:22:03 PDT 2026 x86_64 GNU/Linux

2026-07-13 11:30:53.228826 [info] Image architecture: 'amd64'

2026-07-13 11:30:53.255162 [info] Application name: 'qbittorrentvpn'

2026-07-13 11:30:53.282779 [info] Base image release tag: '2026062801'

2026-07-13 11:30:53.309600 [info] Application image release tag: '5.2.3-1-01'

2026-07-13 11:30:53.338867 [info] PUID defined as '99'

2026-07-13 11:30:53.370851 [info] Executing usermod for PUID '99'...

2026-07-13 11:30:53.819324 [info] usermod completed successfully

2026-07-13 11:30:53.849492 [info] PGID defined as '100'

2026-07-13 11:30:53.881427 [info] Executing groupmod for PGID '100'...

2026-07-13 11:30:54.517547 [info] groupmod completed successfully

2026-07-13 11:30:54.546297 [info] UMASK defined as '000'

2026-07-13 11:30:54.577055 [info] Permissions file '/config/perms.txt' exists, skipping setting ownership and permissions on '/config' and '/data'

2026-07-13 11:30:54.612258 [info] Deleting files in /tmp (non recursive)...

2026-07-13 11:30:54.649548 [info] VPN_ENABLED defined as 'yes'

2026-07-13 11:30:54.684819 [info] VPN_CLIENT defined as 'openvpn'

2026-07-13 11:30:54.715792 [info] VPN_PROV defined as 'pia'

2026-07-13 11:30:54.761630 [info] OpenVPN config file (ovpn extension) is located at /config/openvpn/vpn.ovpn

2026-07-13 11:30:54.820789 [info] VPN remote server(s) defined as 'aus-melbourne.privacy.network,'

2026-07-13 11:30:54.848305 [info] VPN remote port(s) defined as '1198,'

2026-07-13 11:30:54.877181 [info] VPN remote protcol(s) defined as 'udp,'

2026-07-13 11:30:54.907553 [info] VPN_DEVICE_TYPE defined as 'tun0'

2026-07-13 11:30:54.937197 [info] VPN_OPTIONS not defined (via -e VPN_OPTIONS)

2026-07-13 11:30:54.968081 [info] NAME_SERVERS defined as '84.200.69.80,37.235.1.174,1.1.1.1,37.235.1.177,84.200.70.40,1.0.0.1'

2026-07-13 11:30:55.006176 [info] iptables backend selected: nft

2026-07-13 11:30:55.691535 [info] LAN_NETWORK defined as '192.168.0.0/24'

2026-07-13 11:30:55.731605 [info] LAN_NETWORK exported as '192.168.0.0/24'

2026-07-13 11:30:55.763083 [info] VPN_USER defined as 'p6851159'

2026-07-13 11:30:55.795507 [info] VPN_PASS defined as '5ftL2BLLvz'

2026-07-13 11:30:55.828440 [info] STRICT_PORT_FORWARD defined as 'yes'

2026-07-13 11:30:55.865093 [info] VPN_INPUT_PORTS not defined (via -e VPN_INPUT_PORTS), skipping allow for custom incoming ports

2026-07-13 11:30:55.898848 [info] VPN_OUTPUT_PORTS not defined (via -e VPN_OUTPUT_PORTS), skipping allow for custom outgoing ports

2026-07-13 11:30:55.931322 [info] ENABLE_STARTUP_SCRIPTS defined as 'no'

2026-07-13 11:30:55.962878 [info] ENABLE_SOCKS defined as 'no'

2026-07-13 11:30:55.993010 [info] ENABLE_PRIVOXY defined as 'no'

2026-07-13 11:30:56.023179 [info] WEBUI_PORT defined as '8080'

2026-07-13 11:30:56.064765 [info] Starting Supervisor...

2026-07-13 11:30:56,219 INFO Included extra file "/etc/supervisor/conf.d/qbittorrent.conf" during parsing

2026-07-13 11:30:56,220 INFO Set uid to user 0 succeeded

2026-07-13 11:30:56,224 INFO RPC interface 'supervisor' initialized

2026-07-13 11:30:56,225 INFO supervisord started with pid 7

2026-07-13 11:30:57,228 INFO spawned: 'start-script' with pid 444

2026-07-13 11:30:57,231 INFO spawned: 'watchdog-script' with pid 445

2026-07-13 11:30:57,231 INFO reaped unknown pid 8 (exit status 0)

2026-07-13 11:30:57,235 DEBG 'start-script' stdout output:

[info] VPN is enabled, beginning configuration of VPN

2026-07-13 11:30:57,235 INFO success: start-script entered RUNNING state, process has stayed up for > than 0 seconds (startsecs)

2026-07-13 11:30:57,235 INFO success: watchdog-script entered RUNNING state, process has stayed up for > than 0 seconds (startsecs)

2026-07-13 11:30:57,517 DEBG 'start-script' stdout output:

[info] Adding 192.168.0.0/24 as route via adapter eth0

2026-07-13 11:30:57,518 DEBG 'start-script' stdout output:

[info] ip route defined as follows...

--------------------

2026-07-13 11:30:57,521 DEBG 'start-script' stdout output:

default via 172.17.0.1 dev eth0

172.17.0.0/16 dev eth0 proto kernel scope link src 172.17.0.3

192.168.0.0/24 via 172.17.0.1 dev eth0

local 127.0.0.0/8 dev lo table local proto kernel scope host src 127.0.0.1

local 127.0.0.1 dev lo table local proto kernel scope host src 127.0.0.1

broadcast 127.255.255.255 dev lo table local proto kernel scope link src 127.0.0.1

local 172.17.0.3 dev eth0 table local proto kernel scope host src 172.17.0.3

broadcast 172.17.255.255 dev eth0 table local proto kernel scope link src 172.17.0.3

local ::1 dev lo table local proto kernel metric 0 pref medium

2026-07-13 11:30:57,521 DEBG 'start-script' stdout output:

--------------------

2026-07-13 11:30:57,523 DEBG 'start-script' stdout output:

[info] iptable_mangle support detected, adding fwmark for tables

2026-07-13 11:30:57,718 DEBG 'start-script' stdout output:

[info] iptables defined as follows...

--------------------

2026-07-13 11:30:57,721 DEBG 'start-script' stdout output:

-P INPUT DROP

-P FORWARD DROP

-P OUTPUT DROP

-A INPUT -s 181.214.199.133/32 -i eth0 -j ACCEPT

-A INPUT -s 45.130.141.198/32 -i eth0 -j ACCEPT

-A INPUT -s 45.130.141.134/32 -i eth0 -j ACCEPT

-A INPUT -s 45.130.141.159/32 -i eth0 -j ACCEPT

-A INPUT -s 45.130.141.148/32 -i eth0 -j ACCEPT

-A INPUT -s 104.18.40.93/32 -i eth0 -j ACCEPT

-A INPUT -s 172.64.147.163/32 -i eth0 -j ACCEPT

-A INPUT -s 104.18.37.206/32 -i eth0 -j ACCEPT

-A INPUT -s 172.64.150.50/32 -i eth0 -j ACCEPT

-A INPUT -s 104.18.159.201/32 -i eth0 -j ACCEPT

-A INPUT -s 104.19.240.167/32 -i eth0 -j ACCEPT

-A INPUT -s 172.17.0.0/16 -d 172.17.0.0/16 -j ACCEPT

-A INPUT -s 181.214.199.133/32 -i eth0 -j ACCEPT

-A INPUT -s 45.130.141.198/32 -i eth0 -j ACCEPT

-A INPUT -s 45.130.141.134/32 -i eth0 -j ACCEPT

-A INPUT -s 45.130.141.159/32 -i eth0 -j ACCEPT

-A INPUT -s 45.130.141.148/32 -i eth0 -j ACCEPT

-A INPUT -s 104.18.40.93/32 -i eth0 -j ACCEPT

-A INPUT -s 172.64.147.163/32 -i eth0 -j ACCEPT

-A INPUT -s 104.18.37.206/32 -i eth0 -j ACCEPT

-A INPUT -s 172.64.150.50/32 -i eth0 -j ACCEPT

-A INPUT -s 104.18.159.201/32 -i eth0 -j ACCEPT

-A INPUT -s 104.19.240.167/32 -i eth0 -j ACCEPT

-A INPUT -i eth0 -p tcp -m tcp --dport 8080 -j ACCEPT

-A INPUT -i eth0 -p udp -m udp --dport 8080 -j ACCEPT

-A INPUT -p icmp -m icmp --icmp-type 0 -j ACCEPT

-A INPUT -i lo -j ACCEPT

-A INPUT -i tun0 -j ACCEPT

-A OUTPUT -d 181.214.199.133/32 -o eth0 -j ACCEPT

-A OUTPUT -d 45.130.141.198/32 -o eth0 -j ACCEPT

-A OUTPUT -d 45.130.141.134/32 -o eth0 -j ACCEPT

-A OUTPUT -d 45.130.141.159/32 -o eth0 -j ACCEPT

-A OUTPUT -d 45.130.141.148/32 -o eth0 -j ACCEPT

-A OUTPUT -d 104.18.40.93/32 -o eth0 -j ACCEPT

-A OUTPUT -d 172.64.147.163/32 -o eth0 -j ACCEPT

-A OUTPUT -d 104.18.37.206/32 -o eth0 -j ACCEPT

-A OUTPUT -d 172.64.150.50/32 -o eth0 -j ACCEPT

-A OUTPUT -d 104.18.159.201/32 -o eth0 -j ACCEPT

-A OUTPUT -d 104.19.240.167/32 -o eth0 -j ACCEPT

-A OUTPUT -s 172.17.0.0/16 -d 172.17.0.0/16 -j ACCEPT

-A OUTPUT -d 181.214.199.133/32 -o eth0 -j ACCEPT

-A OUTPUT -d 45.130.141.198/32 -o eth0 -j ACCEPT

-A OUTPUT -d 45.130.141.134/32 -o eth0 -j ACCEPT

-A OUTPUT -d 45.130.141.159/32 -o eth0 -j ACCEPT

-A OUTPUT -d 45.130.141.148/32 -o eth0 -j ACCEPT

-A OUTPUT -d 104.18.40.93/32 -o eth0 -j ACCEPT

-A OUTPUT -d 172.64.147.163/32 -o eth0 -j ACCEPT

-A OUTPUT -d 104.18.37.206/32 -o eth0 -j ACCEPT

-A OUTPUT -d 172.64.150.50/32 -o eth0 -j ACCEPT

-A OUTPUT -d 104.18.159.201/32 -o eth0 -j ACCEPT

-A OUTPUT -d 104.19.240.167/32 -o eth0 -j ACCEPT

-A OUTPUT -o eth0 -p tcp -m tcp --sport 8080 -j ACCEPT

-A OUTPUT -o eth0 -p udp -m udp --sport 8080 -j ACCEPT

-A OUTPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT

-A OUTPUT -o lo -j ACCEPT

-A OUTPUT -o tun0 -j ACCEPT

2026-07-13 11:30:57,722 DEBG 'start-script' stdout output:

--------------------

2026-07-13 11:30:57,723 DEBG 'start-script' stdout output:

[info] Starting OpenVPN (non daemonised)...

2026-07-13 11:30:57,742 DEBG 'start-script' stdout output:

2026-07-13 11:30:57 DEPRECATED OPTION: --persist-key option ignored. Keys are now always persisted across restarts.

2026-07-13 11:30:57,743 DEBG 'start-script' stdout output:

2026-07-13 11:30:57 DEPRECATED OPTION: --cipher set to 'aes-128-cbc' but missing in --data-ciphers (DEFAULT). OpenVPN ignores --cipher for cipher negotiations.

2026-07-13 11:30:57,743 DEBG 'start-script' stdout output:

2026-07-13 11:30:57 WARNING: file 'credentials.conf' is group or others accessible

2026-07-13 11:30:57 OpenVPN 2.7.5 [git:makepkg/b25bb2a8bda814ed+] x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO] built on Jul 1 2026

2026-07-13 11:30:57,743 DEBG 'start-script' stdout output:

2026-07-13 11:30:57 library versions: OpenSSL 3.6.3 9 Jun 2026, LZO 2.10

2026-07-13 11:30:57 DCO version: N/A

2026-07-13 11:30:57,744 DEBG 'start-script' stdout output:

2026-07-13 11:30:57 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

2026-07-13 11:30:57,745 DEBG 'start-script' stdout output:

2026-07-13 11:30:57 TCP/UDP: Preserving recently used remote address: [AF_INET]104.18.40.93:1198

2026-07-13 11:30:57,745 DEBG 'start-script' stdout output:

2026-07-13 11:30:57 UDPv4 link local: (not bound)

2026-07-13 11:30:57 UDPv4 link remote: [AF_INET]104.18.40.93:1198

2026-07-13 11:31:57,027 DEBG 'start-script' stdout output:

2026-07-13 11:31:57 [UNDEF] Inactivity timeout (--ping-restart), restarting

2026-07-13 11:31:57,027 DEBG 'start-script' stdout output:

2026-07-13 11:31:57 SIGHUP[soft,ping-restart] received, process restarting

2026-07-13 11:31:57,028 DEBG 'start-script' stdout output:

2026-07-13 11:31:57 DEPRECATED OPTION: --persist-key option ignored. Keys are now always persisted across restarts.

2026-07-13 11:31:57,028 DEBG 'start-script' stdout output:

2026-07-13 11:31:57 DEPRECATED OPTION: --cipher set to 'aes-128-cbc' but missing in --data-ciphers (DEFAULT). OpenVPN ignores --cipher for cipher negotiations.

2026-07-13 11:31:57,029 DEBG 'start-script' stdout output:

2026-07-13 11:31:57 WARNING: file 'credentials.conf' is group or others accessible

2026-07-13 11:31:57,029 DEBG 'start-script' stdout output:

2026-07-13 11:31:57 OpenVPN 2.7.5 [git:makepkg/b25bb2a8bda814ed+] x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO] built on Jul 1 2026

2026-07-13 11:31:57 library versions: OpenSSL 3.6.3 9 Jun 2026, LZO 2.10

2026-07-13 11:31:57 DCO version: N/A

2026-07-13 11:31:59,029 DEBG 'start-script' stdout output:

2026-07-13 11:31:59 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

2026-07-13 11:31:59,030 DEBG 'start-script' stdout output:

2026-07-13 11:31:59 TCP/UDP: Preserving recently used remote address: [AF_INET]45.130.141.148:1198

2026-07-13 11:31:59 UDPv4 link local: (not bound)

2026-07-13 11:31:59 UDPv4 link remote: [AF_INET]45.130.141.148:1198

2026-07-13 11:32:01,882 DEBG 'start-script' stdout output:

2026-07-13 11:32:01 [Server-12440-0a] Peer Connection Initiated with [AF_INET]45.130.141.148:1198

2026-07-13 11:32:01,919 DEBG 'start-script' stdout output:

2026-07-13 11:32:01 TUN/TAP device tun0 opened

2026-07-13 11:32:01 tun/tap device [tun0] opened

2026-07-13 11:32:01 net_iface_mtu_set: mtu 1500 for tun0

2026-07-13 11:32:01,920 DEBG 'start-script' stdout output:

2026-07-13 11:32:01 net_iface_up: set tun0 up

2026-07-13 11:32:01 net_addr_v4_add: 10.84.192.167/18 dev tun0

2026-07-13 11:32:01 /root/openvpnup.sh tun0 1500 0 10.84.192.167 255.255.192.0 init

2026-07-13 11:32:01,924 DEBG 'start-script' stdout output:

2026-07-13 11:32:01 Initialization Sequence Completed

2026-07-13 11:32:04,864 DEBG 'start-script' stdout output:

[info] Successfully retrieved external IP address 45.130.141.155 from URL 'http://checkip.amazonaws.com'

2026-07-13 11:32:04,865 DEBG 'start-script' stdout output:

[info] Script started to assign incoming port for 'pia'

2026-07-13 11:32:04,865 DEBG 'start-script' stdout output:

[info] Port forwarding is enabled

[info] Checking endpoint 'aus-melbourne.privacy.network' is port forward enabled...

2026-07-13 11:32:05,876 DEBG 'start-script' stdout output:

[info] PIA endpoint 'aus-melbourne.privacy.network' is NOT in the list of endpoints that support port forwarding shown below:-

2026-07-13 11:32:06,565 DEBG 'start-script' stdout output:

[info] List of PIA endpoints that support port forwarding:-

2026-07-13 11:32:06,565 DEBG 'start-script' stdout output:

[info] bahamas.privacy.network

[info] ca-montreal.privacy.network

[info] yerevan.privacy.network

[info] montenegro.privacy.network

[info] venezuela.privacy.network

[info] np-nepal-pf.privacy.network

[info] panama.privacy.network

[info] pe-peru-pf.privacy.network

[info] mongolia.privacy.network

[info] in.privacy.network

[info] hk.privacy.network

[info] ca-toronto.privacy.network

[info] monaco.privacy.network

[info] kazakhstan.privacy.network

[info] vietnam.privacy.network

[info] man.privacy.network

[info] liechtenstein.privacy.network

[info] srilanka.privacy.network

[info] malta.privacy.network

[info] bangladesh.privacy.network

[info] uk-2.privacy.network

[info] bo-bolivia-pf.privacy.network

[info] ec-ecuador-pf.privacy.network

[info] macau.privacy.network

[info] morocco.privacy.network

[info] ba.privacy.network

[info] gt-guatemala-pf.privacy.network

[info] ca-vancouver.privacy.network

[info] uy-uruguay-pf.privacy.network

[info] cambodia.privacy.network

[info] de-germany-so.privacy.network

[info] sanjose.privacy.network

[info] nl-netherlands-so.privacy.network

[info] ua.privacy.network

[info] cyprus.privacy.network

[info] nl-amsterdam.privacy.network

[info] albania.pvt.site

[info] algeria.pvt.site

[info] andorra.pvt.site

[info] argentina.pvt.site

[info] austria.pvt.site

[info] au-adelaide.pvt.site

[info] au-brisbane.pvt.site

[info] au-melbourne.pvt.site

[info] au-perth.pvt.site

[info] au-sydney.pvt.site

[info] belgium.pvt.site

[info] brazil.pvt.site

[info] bulgaria.pvt.site

[info] ca-ontario.pvt.site

[info] chile.pvt.site

[info] china.pvt.site

[info] colombia.pvt.site

[info] croatia.pvt.site

2026-07-13 11:32:06,565 DEBG 'start-script' stdout output:

[info] czech-republic.pvt.site

[info] de-berlin.pvt.site

[info] de-frankfurt.pvt.site

[info] denmark.pvt.site

[info] egypt.pvt.site

[info] es-madrid.pvt.site

[info] es-valencia.pvt.site

[info] estonia.pvt.site

[info] fi-helsinki.pvt.site

[info] france.pvt.site

[info] georgia.pvt.site

[info] greece.pvt.site

[info] greenland.pvt.site

[info] hungary.pvt.site

[info] iceland.pvt.site

[info] indonesia.pvt.site

[info] ireland.pvt.site

[info] israel.pvt.site

[info] it-milano.pvt.site

[info] jp-tokyo.pvt.site

[info] latvia.pvt.site

[info] lithuania.pvt.site

[info] luxembourg.pvt.site

[info] malaysia.pvt.site

[info] mexico.pvt.site

[info] moldova.pvt.site

[info] new-zealand.pvt.site

[info] nigeria.pvt.site

[info] north-macedonia.pvt.site

[info] norway.pvt.site

[info] philippines.pvt.site

[info] poland.pvt.site

2026-07-13 11:32:06,565 DEBG 'start-script' stdout output:

[info] portugal.pvt.site

[info] qatar.pvt.site

[info] romania.pvt.site

[info] saudi-arabia.pvt.site

[info] se-stockholm.pvt.site

[info] serbia.pvt.site

[info] singapore.pvt.site

[info] slovakia.pvt.site

[info] slovenia.pvt.site

[info] south-africa.pvt.site

[info] south-korea.pvt.site

[info] switzerland.pvt.site

[info] taiwan.pvt.site

[info] turkey.pvt.site

[info] uk-london.pvt.site

[info] uk-manchester.pvt.site

[info] uk-southampton.pvt.site

[info] united-arab-emirates.pvt.site

2026-07-13 11:32:06,566 DEBG 'start-script' stdout output:

[info] Script finished to assign incoming port