Prowlarr VPN/proxy advice
Prowlarr VPN/proxy advice
Been having a frustrating but rewarding time setting up my first server with some advice from you all. Learned a lot and feel like I'm almost there with a lot of it. One thing I've really been struggling with is public indexers on Prowlarr. In the UK I can only access them behind a VPN but Prowlarr can't access the rest of the suite if it goes behind Gluetun.
I feel like I've tried everything, it seems that I likely want to use the indexer proxy built into Prowlarr but I must be doing something wrong as it's always refused or never resolves. I did read something about privoxy which I did try and look into but no success. Considered just leaving the whole thing for usenet but I'd just love to get some public trackers working successfully in the UK. Does anyone have any advice to someone still learning please?
Thanks all!
Edit: Thanks all for your input! I got it workihg by adding httpproxy=on to Gluetun then adding the http proxy deets into the Prowlarr http proxy page.
-
Containers sharing the same network (e.g. gluetun) should be able to see each other's by their hostnames, yet the VPN blocks that by its very nature, so... Check out https://github.com/qdm12/gluetun-wiki/blob/main/setup/inter-containers-networking.md
-
The trash guides say to avoid putting the arrs through VPN so I only put the torrent client through. Is that what you do?
-
I am in the UK TOO, I use docker on a nas and I only have gluetun and qbittorrent using vpn, all my other containers (sonarr, radarr, bazarr, prowlarr) are kt behind vpn. What do you mean prowlarr cannot access the indexers? If you use the setting for the indexer you should be able to try different URLs for it, check if any of them works.
-
-
Gluetun is great, but it does not work with docker swarm. I'm using a container running wireguard and Dante as a SOCKS5 proxy, everything that needs a VPN is on an internal overlay network and routes through the proxy container. Only the proxy container is part of the public network and all external traffic goes through the VPN. I use Traefik as a reverse proxy which is part of both the private and public networks. Meaning I can access the private containers (qbitorrent, prowlarr and sonarr) externally through Traefik but they cannot access anything outside the internal private network unless they route though the proxy container.
It's not perfect but it works xD
-
-
FWIW, all of my *arr, and VPN containers use the same network bridge. Prowlarr and torrent use the VPN service, though having Prowlarr on there is maybe overkill. They're all able to access one another using the bridge gateway + port as the host, e.g.: 172.20.0.1:5050
I mostly used this guide, where he suggests:
I have split out Prowlarr as you may want this running on a VPN connection if your ISP blocks certain indexers. If not copy this section into your compose as well. See my Gluetun guides for more information on adding to a VPN.
One thing I had to make sure of was that the ports for Prowlarr were included in the VPN container setup, rather than the Prowlarr section (b/c it's just connecting to the VPN service):
ports: - 8888:8888/tcp # HTTP proxy - 8388:8388/tcp # Shadowsocks - 8388:8388/udp # Shadowsocks - 8090:8090 # port for qbittorrent - 9696:9696 # For Prowlarr-
I wonder if I need to use a proper compose instead of the Portainer stacks function, so they're all on the same network withing docker.
-
-
If it's anything like Australia, it's just a matter of not using the ISP's DNS servers. eg. Use Quad9, CF, NextDNS, etc.
-
I did try a custom DNS in the Prowlarr compose stack in Portainer but it didn't help unfortunately. Do you do it a different way?
-
There have been a few cases where ports are blocked. For example on many residential port 25 is blocked. If you pay and get a static ip this often gets unblocked. Same with port 10443 on a few residential services. There's probably more but these are issues I've seen.
If you think about how trivial these are to bypass, but also that often aligns to fixing the problem for why they're blocked. Iirc port 10443 was abused by malicious actors when home routers accepted Nat- pnp from say an unpatched qnap. Automatically forwarding inbound traffic on 10443 to the nas which has terrible security flaws and was part of a wide spread botnet. If you changed the Web port, you probably also are maintaining the qnap maybe. Also port 25 can be bypassed by using start-tls authenticated mail on 587 or 465 and therefore aren't relaying outbound mail spam from infected local computers.
Overall fair enough.
-
-
Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I've seen in this thread:
Fewer Letters More Letters CF CloudFlare CGNAT Carrier-Grade NAT DNS Domain Name Service/System HTTP Hypertext Transfer Protocol, the Web NAT Network Address Translation VPN Virtual Private Network
5 acronyms in this thread; the most compressed thread commented on today has 13 acronyms.
[Thread #252 for this sub, first seen 30th Oct 2023, 15:50] [FAQ] [Full list] [Contact] [Source code]
-
It's been a while since I set mine up but I know that most public indexes using a proxy will get blocked by cloudflare at one time or another. Away around that is to use flaresolverr. Not totally sure if that is your problem but it might be a good place to look.
-
I tried flaresolver but still no connecty unfortunately.
-
Thank you, I'll have a look. I think I should be able to use the http proxy with my mullvad but I'm just struggling to find information I can follow. I'll check flaresolver in the meantime.
-