can any one help me my sparkbox is keep getting down and my sufshark vpn is getting down
12 replies
Chris wrote:
The change went in: WIREGUARDMTU is now 1280. But the VPN app still did not pass its health check within the restart's wait, which is what the last line means. So the VPN is still not connected, and Sonarr, Radarr, Prowlarr, qBittorrent, SABnzbd and Byparr stay stopped. Please do not run sudo sparkbox up yet, since it will likely hit the same wait. Give it a couple of minutes, then run this read-only command: sudo sparkbox status Paste only the sb-gluetun line from its output. Please leave the VPN login and the other VPN settings as they are. If that line says (healthy), run sudo sparkbox up once so the stopped apps can start. If it still says unhealthy, the next step is one step lower on the packet size, WIREGUARDMTU 1220, and we will walk you through that once we have seen the line.
Chris wrote:
Sorry the box keeps going down, that is frustrating, especially with the VPN involved. To narrow it down, three quick questions: 1. What is SparkBox running on: a Linux PC or server, a NAS, or Windows with WSL? 2. When you say it is getting down, which apps show as stopped, or which can you not open? 3. Did it start after you pasted or changed anything in the VPN settings? If you can, run these two read-only commands on the box and paste the output here: sudo sparkbox status sudo sparkbox doctor Before you post, remove any passwords, keys or tokens from the output. Please do not change the VPN settings or restart anything until we have seen it. If the VPN was set up by pasting a WireGuard private key, that is one known cause of this, and the status output will show whether the VPN is the problem.
PMC25 wrote:
is in my windows PC root@PMCHD01:~ sudo sparkbox status sudo sparkbox doctor / | | | | ) \ \| ' \ / | '| |/ / \ / \ \/ / ) | |) | (| | | | <| |) | () < |/| ./ \,|| ||\\/ \//\\ || SparkBox v1.6.977 - Self-Hosted Privacy Stack Created by Tom Spark | youtube.com/@TomSparkReviews Network profile: private Module Status: ○ adguard (disabled) - AdGuard Home ○ antivirus (disabled) - Antivirus ○ audiobookshelf (disabled) - Audiobookshelf ○ authelia (disabled) - Authelia ○ backup (disabled) - Backups ○ bedrock (disabled) - Minecraft Bedrock Server ○ bookstack (disabled) - BookStack ○ budget (disabled) - Actual Budget ○ changedetection (disabled) - Changedetection.io ○ cloud (disabled) - Cloud Storage ○ cloudflared (disabled) - Cloudflare Tunnel ○ coolercontrol (disabled) - CoolerControl ● core (enabled) - Core Infrastructure ● dashboard (enabled) - TomSparkBox Dashboard ○ ebooks (disabled) - Ebooks & Comics ○ emby (disabled) - Emby ○ ersatztv (disabled) - ErsatzTV ○ factorio (disabled) - Factorio Server ○ files (disabled) - File Browser ○ freshrss (disabled) - FreshRSS ○ frigate (disabled) - Frigate NVR ○ games (disabled) - Game Servers ○ ghost (disabled) - Ghost ○ gitea (disabled) - Gitea ○ gotify (disabled) - Gotify ○ hearth (disabled) - Hearth Chat ○ homeassistant (disabled) - Home Assistant ○ immich (disabled) - Immich ○ jellyfin (disabled) - Jellyfin ○ jellystat (disabled) - Jellystat ○ kiwix (disabled) - Kiwix ○ linkding (disabled) - Linkding ○ localai (disabled) - Local AI ○ matrix (disabled) - Matrix Chat ○ mealie (disabled) - Mealie ● media (enabled) - Media Center ○ metrics (disabled) - Metrics & Dashboards ○ monitoring (disabled) - Monitoring ○ n8n (disabled) - n8n ○ navidrome (disabled) - Navidrome ○ paperless (disabled) - Paperless-ngx ○ photoprism (disabled) - PhotoPrism ○ pihole (disabled) - Pi-hole ○ pinchflat (disabled) - Pinchflat ○ plex (disabled) - Plex ○ searxng (disabled) - SearXNG ○ shelfarr (disabled) - Shelfarr ○ speedtest (disabled) - Speedtest Tracker ○ stablediffusion (disabled) - Stable Diffusion ○ stirling-pdf (disabled) - Stirling PDF ○ syncthing (disabled) - Syncthing ○ tailscale (disabled) - Tailscale ○ tdarr (disabled) - Tdarr ○ terraria (disabled) - Terraria Server ○ tomsparkcal (disabled) - TomSparkCal ○ tunarr (disabled) - Tunarr ○ unpackerr (disabled) - Unpackerr ○ valheim (disabled) - Valheim Server ○ vaultwarden (disabled) - Vaultwarden ○ vpn (disabled) - Remote Access VPN ○ webapp (disabled) - Web App ○ wizarr (disabled) - Wizarr ○ wordpress (disabled) - WordPress ○ zomboid (disabled) - Project Zomboid Server Container Status: NAMES STATUS PORTS sb-qbittorrent Created sb-sabnzbd Created sb-sonarr Created sb-radarr Created sb-prowlarr Created sb-byparr Created sb-jellyfin-media Up 3 minutes (healthy) 0.0.0.0:8096-8096/tcp, [::]:8096-8096/tcp sb-bazarr Up 3 minutes (healthy) 0.0.0.0:6767-6767/tcp, [::]:6767-6767/tcp sb-seerr Up 3 minutes (healthy) 0.0.0.0:5055-5055/tcp, [::]:5055-5055/tcp sb-deunhealth Up 3 minutes (healthy) sb-gluetun Up 3 minutes (unhealthy) 8000/tcp, 0.0.0.0:7878-7878/tcp, [::]:7878-7878/tcp, 0.0.0.0:8686-8686/tcp, [::]:8686-8686/tcp, 8388/tcp, 0.0.0.0:8789-8789/tcp, [::]:8789-8789/tcp, 0.0.0.0:8989-8989/tcp, [::]:8989-8989/tcp, 8888/tcp, 8388/udp, 0.0.0.0:8089-8080/tcp, [::]:8089-8080/tcp, 0.0.0.0:8186-8081/tcp, [::]:8186-8081/tcp, 0.0.0.0:8181-9696/tcp, [::]:8181-9696/tcp sb-dashboard Up About an hour (healthy) 0.0.0.0:8443-8443/tcp sb-npm Up About an hour (healthy) 0.0.0.0:80-81-80-81/tcp, [::]:80-81-80-81/tcp, 0.0.0.0:443-443/tcp, [::]:443-443/tcp sb-portainer Up About an hour 8000/tcp, 9443/tcp, 0.0.0.0:9000-9000/tcp sb-homepage Up About an hour (healthy) 0.0.0.0:3000-3000/tcp, [::]:3000-3000/tcp [WARN] These apps are NOT running: qbittorrent sabnzbd sonarr radarr prowlarr byparr [WARN] Bring them back: sudo sparkbox up [WARN] Still down after that: sudo sparkbox doctor / | | | | ) \ \| ' \ / | '| |/ / \ / \ \/ / ) | |) | (| | | | <| |) | () < |/| ./ \,|| ||\\/ \//\\ || SparkBox v1.6.977 - Self-Hosted Privacy Stack Created by Tom Spark | youtube.com/@TomSparkReviews Network profile: private SparkBox Doctor Running diagnostics... [Install location] [OK] SparkBox is installed at: /opt/sparkbox [OK] Settings file (.env): /opt/sparkbox/.env [OK] Media library folder (MEDIAROOT): /opt/sparkbox/data/media [Docker] [OK] Docker daemon is accessible [OK] Docker version: 29.9.1 (engine) [OK] Docker Compose: 5.1.3 [Docker Socket] [OK] Docker socket exists at /var/run/docker.sock [OK] Docker socket is readable [User IDs] [INFO] Current user: root (UID=0, GID=0) [OK] PUID=1000 (containers run as UID 1000) [OK] PGID=1000 (containers run as GID 1000) [Container Egress] [OK] Apps can reach webhook.tomsparkbox.com over sbproxy (their real network) [OK] Docker's default bridge can reach tomsparkbox.com (dashboard Update button) [Port Conflicts] [OK] Port 80: in use (Docker -- likely SparkBox) [OK] Port 443: in use by SparkBox (sb-npm) [OK] Port 8443: in use by SparkBox (sb-dashboard) [OK] Port 9000: in use by SparkBox (sb-portainer) [Dashboard Login] [OK] Dashboard can sign you in (session folder writable, admin password set) [Portainer Auth] [OK] Portainer admin login verified (HTTP 200) [VPN Tunnel] [ERROR] Gluetun is unhealthy — VPN tunnel is not established VPN not connected, so Sonarr, Radarr, Prowlarr, qBittorrent, SABnzbd and Byparr can't open — their pages say "can't reach this page" until the VPN connects. They start by themselves once it does; fix the VPN below. Last error(s) from gluetun: 2026-10-18T21:46:46-04:00 WARN [vpn] restarting VPN because it failed to pass the healthcheck: startup check: all check tries failed: parallel attempt 1/2 failed: running TLS handshake: context deadline exceeded, parallel attempt 2/2 failed: running TLS handshake: context deadline exceeded 2026-10-18T21:46:52-04:00 WARN [vpn] restarting VPN because it failed to pass the healthcheck: startup check: all check tries failed: parallel attempt 1/2 failed: running TLS handshake: context deadline exceeded, parallel attempt 2/2 failed: running TLS handshake: context deadline exceeded 2026-10-18T21:46:59-04:00 WARN [vpn] restarting VPN because it failed to pass the healthcheck: startup check: all check tries failed: parallel attempt 1/2 failed: running TLS handshake: context deadline exceeded, parallel attempt 2/2 failed: running TLS handshake: context deadline exceeded Your VPN's saved server list hasn't been refreshed in 299 days. Providers change their servers' keys, and an old list gives a tunnel that connects and carries nothing. Refresh it first (it restarts the VPN for you): sudo sparkbox refresh-vpn-servers Still cycling a few minutes later? Then try the steps below. Your VPN builds its tunnel but then restarts every few seconds. Most often the tunnel's packet size is bigger than your connection
Chris wrote:
Thanks, this is what we needed. Your output points at the VPN rather than Windows: the Gluetun container (the VPN app) is unhealthy and keeps restarting, and every download and indexer app waits for it. Sonarr, Radarr, Prowlarr, qBittorrent, SABnzbd and Byparr are stopped because of that, so the VPN is where to start. The doctor also says your saved VPN server list has not been refreshed in 299 days. Providers change their server keys, and an old list can give a tunnel that connects but carries nothing. Run this once: sudo sparkbox refresh-vpn-servers It only downloads the current list and restarts the VPN. It does not change your Surfshark login or settings. Wait about 3 minutes, then run sudo sparkbox status and check whether sb-gluetun shows (healthy). Two things to know after that: - Six apps are in Docker's "Created" state, which means they have never started. They will not come back on their own, so once the VPN is healthy, run sudo sparkbox up. - The paste stops partway through the doctor's VPN section, right after the line about packet size. Please paste the lines that follow it, with any keys or passwords removed, and tell us whether your Surfshark is set up as WireGuard or OpenVPN. Please leave the VPN settings as they are until we have seen the result.
PMC25 wrote:
Refresh the VPN's server list Downloads a current copy of your VPN provider's server list. Fixes the case where the VPN says it's connected but nothing actually goes through it, because the saved list points at servers whose keys your provider has since changed. [INFO] Your VPN is set to 'custom' — it dials the exact endpoint you entered [INFO] and never uses a provider server list, so there is nothing to refresh.
Chris wrote:
I'm sorry, the refresh step I gave you was the wrong one for this box. Your VPN is set to 'custom', which means you typed in the exact server to connect to. SparkBox never uses a provider server list in that mode, so there was nothing for the refresh to fix, and the 299-day warning should not have sent you there. I should have checked that setting before passing the step on. We have logged the doctor message so it gets corrected, and what the support assistant knows about custom VPN setups has been fixed so it does not happen to the next person. Please leave the VPN settings alone and run this one read-only command. It prints only four settings, no keys or passwords: sudo grep -E '^(VPNPROVIDER|VPNTYPE|VPNDOT|WIREGUARDMTU)=' /opt/sparkbox/.env Paste the lines it prints. If one of the four is missing from the output, say which one. The restart loop in your doctor output is happening inside the tunnel itself, so these lines tell us whether the packet-size setting the doctor mentioned is the right next thing to try.
Chris wrote:
Hi PMC25 — Chris again (SparkBox's support assistant, an AI). A correction to my last message, and I'm sorry for the back-and-forth. I had the doctor's 299-day warning checked against SparkBox's code. That number is exactly the age of the Surfshark server list that comes built into the VPN app. So when you ran the doctor (about 01:46 UTC), your box was set to Surfshark, and the warning was right for that setting. When you ran the refresh about 15 minutes later, the box said it was set to custom. The VPN setting changed in between. So the doctor message was not wrong after all, and there is nothing to fix in it. One question: did you change the VPN in that window? For example, choosing Custom, or importing a WireGuard .conf file in the dashboard. Just say yes or no, and what you changed. The read-only command from my last message still stands. Paste the four lines it prints: sudo grep -E '^(VPNPROVIDER|VPNTYPE|VPNDOT|WIREGUARDMTU)=' /opt/sparkbox/.env Please leave everything else as it is until we have seen them.
PMC25 wrote:
VPNPROVIDER=custom VPNTYPE=wireguard WIREGUARDMTU= VPNDOT=on
Chris wrote:
Thanks, that is what we needed. I'm sorry for the back-and-forth about the server list: the refresh step I gave you was the wrong one for this box. On a custom setup SparkBox dials the exact server you typed and never uses a provider server list, so the refresh had nothing to do. The 299-day warning only shows when the VPN is set to a provider, and we can't tell from here which setting was active when it printed, so please set aside my earlier guess about Surfshark. Your doctor output shows the tunnel's health check timing out during the TLS handshake. On WireGuard that usually means the packet size is too large for the connection, so try a smaller one with these two commands: sudo sparkbox set-env WIREGUARDMTU 1280 sudo sparkbox restart media Wait about 3 minutes, then run sudo sparkbox status and look at the sb-gluetun line. If it says (healthy), run sudo sparkbox up once so the six apps that never started can come up. If it still says unhealthy, paste only that sb-gluetun line here and we will try 1220 next. We've recorded the mix-up with the team so it gets checked.
PMC25 wrote:
root@PMCHD01:~ sudo sparkbox set-env WIREGUARDMTU 1280 sudo sparkbox restart media [OK] WIREGUARDMTU=1280 Apply it with: sudo sparkbox restart media (or 'sudo sparkbox up' for other modules) [INFO] Restarting module: media (recreating to pick up .env changes) [+] up 11/11 ✔ Container sb-jellyfin-media Started 11.0s ✔ Container sb-seerr Started 10.9s ✔ Container sb-deunhealth Started 10.8s ✘ Container sb-gluetun Error dependency gluetun failed to start 311.5s ✔ Container sb-bazarr Started 10.9s ✔ Container sb-qbittorrent Recreated 3.4s ✔ Container sb-prowlarr Recreated 9.0s ✔ Container sb-byparr Recreated 0.5s ✔ Container sb-sonarr Recreated 6.4s ✔ Container sb-radarr Recreated 9.0s ✔ Container sb-sabnzbd Recreated 3.9s dependency failed to start: container sb-gluetun is unhealthy
PMC25 wrote:
root@PMCHD01:~ sudo sparkbox status / | | | | ) \ \| ' \ / | '| |/ / \ / \ \/ / ) | |) | (| | | | <| |) | () < |/| ./ \,|| ||\\/ \//\\ || SparkBox v1.6.977 - Self-Hosted Privacy Stack Created by Tom Spark | youtube.com/@TomSparkReviews Network profile: private Module Status: ○ adguard (disabled) - AdGuard Home ○ antivirus (disabled) - Antivirus ○ audiobookshelf (disabled) - Audiobookshelf ○ authelia (disabled) - Authelia ○ backup (disabled) - Backups ○ bedrock (disabled) - Minecraft Bedrock Server ○ bookstack (disabled) - BookStack ○ budget (disabled) - Actual Budget ○ changedetection (disabled) - Changedetection.io ○ cloud (disabled) - Cloud Storage ○ cloudflared (disabled) - Cloudflare Tunnel ○ coolercontrol (disabled) - CoolerControl ● core (enabled) - Core Infrastructure ● dashboard (enabled) - TomSparkBox Dashboard ○ ebooks (disabled) - Ebooks & Comics ○ emby (disabled) - Emby ○ ersatztv (disabled) - ErsatzTV ○ factorio (disabled) - Factorio Server ○ files (disabled) - File Browser ○ freshrss (disabled) - FreshRSS ○ frigate (disabled) - Frigate NVR ○ games (disabled) - Game Servers ○ ghost (disabled) - Ghost ○ gitea (disabled) - Gitea ○ gotify (disabled) - Gotify ○ hearth (disabled) - Hearth Chat ○ homeassistant (disabled) - Home Assistant ○ immich (disabled) - Immich ○ jellyfin (disabled) - Jellyfin ○ jellystat (disabled) - Jellystat ○ kiwix (disabled) - Kiwix ○ linkding (disabled) - Linkding ○ localai (disabled) - Local AI ○ matrix (disabled) - Matrix Chat ○ mealie (disabled) - Mealie ● media (enabled) - Media Center ○ metrics (disabled) - Metrics & Dashboards ○ monitoring (disabled) - Monitoring ○ n8n (disabled) - n8n ○ navidrome (disabled) - Navidrome ○ paperless (disabled) - Paperless-ngx ○ photoprism (disabled) - PhotoPrism ○ pihole (disabled) - Pi-hole ○ pinchflat (disabled) - Pinchflat ○ plex (disabled) - Plex ○ searxng (disabled) - SearXNG ○ shelfarr (disabled) - Shelfarr ○ speedtest (disabled) - Speedtest Tracker ○ stablediffusion (disabled) - Stable Diffusion ○ stirling-pdf (disabled) - Stirling PDF ○ syncthing (disabled) - Syncthing ○ tailscale (disabled) - Tailscale ○ tdarr (disabled) - Tdarr ○ terraria (disabled) - Terraria Server ○ tomsparkcal (disabled) - TomSparkCal ○ tunarr (disabled) - Tunarr ○ unpackerr (disabled) - Unpackerr ○ valheim (disabled) - Valheim Server ○ vaultwarden (disabled) - Vaultwarden ○ vpn (disabled) - Remote Access VPN ○ webapp (disabled) - Web App ○ wizarr (disabled) - Wizarr ○ wordpress (disabled) - WordPress ○ zomboid (disabled) - Project Zomboid Server Container Status: NAMES STATUS PORTS sb-qbittorrent Up 2 minutes (healthy) sb-sabnzbd Up 2 minutes (healthy) sb-sonarr Up 2 minutes (healthy) sb-radarr Up 2 minutes (healthy) sb-prowlarr Up 2 minutes (healthy) sb-byparr Up 2 minutes (health: starting) sb-jellyfin-media Up 6 minutes (healthy) 0.0.0.0:8096-8096/tcp, [::]:8096-8096/tcp sb-bazarr Up 6 minutes (healthy) 0.0.0.0:6767-6767/tcp, [::]:6767-6767/tcp sb-seerr Up 6 minutes (healthy) 0.0.0.0:5055-5055/tcp, [::]:5055-5055/tcp sb-deunhealth Up 6 minutes (healthy) sb-gluetun Up 6 minutes (unhealthy) 8000/tcp, 0.0.0.0:7878-7878/tcp, [::]:7878-7878/tcp, 0.0.0.0:8686-8686/tcp, [::]:8686-8686/tcp, 8388/tcp, 0.0.0.0:8789-8789/tcp, [::]:8789-8789/tcp, 0.0.0.0:8989-8989/tcp, [::]:8989-8989/tcp, 8888/tcp, 8388/udp, 0.0.0.0:8089-8080/tcp, [::]:8089-8080/tcp, 0.0.0.0:8186-8081/tcp, [::]:8186-8081/tcp, 0.0.0.0:8181-9696/tcp, [::]:8181-9696/tcp sb-dashboard Up About an hour (healthy) 0.0.0.0:8443-8443/tcp sb-npm Up About an hour (healthy) 0.0.0.0:80-81-80-81/tcp, [::]:80-81-80-81/tcp, 0.0.0.0:443-443/tcp, [::]:443-443/tcp sb-portainer Up About an hour 8000/tcp, 9443/tcp, 0.0.0.0:9000-9000/tcp sb-homepage Up About an hour (healthy) 0.0.0.0:3000-3000/tcp, [::]:3000-3000/tcp root@PMCHD01:~ sudo sparkbox status / | | | | ) \ \| ' \ / | '| |/ / \ / \ \/ / ) | |) | (| | | | <| |) | () < |/| ./ \,|| ||\\/ \//\\ || SparkBox v1.6.977 - Self-Hosted Privacy Stack Created by Tom Spark | youtube.com/@TomSparkReviews Network profile: private Module Status: ○ adguard (disabled) - AdGuard Home ○ antivirus (disabled) - Antivirus ○ audiobookshelf (disabled) - Audiobookshelf ○ authelia (disabled) - Authelia ○ backup (disabled) - Backups ○ bedrock (disabled) - Minecraft Bedrock Server ○ bookstack (disabled) - BookStack ○ budget (disabled) - Actual Budget ○ changedetection (disabled) - Changedetection.io ○ cloud (disabled) - Cloud Storage ○ cloudflared (disabled) - Cloudflare Tunnel ○ coolercontrol (disabled) - CoolerControl ● core (enabled) - Core Infrastructure ● dashboard (enabled) - TomSparkBox Dashboard ○ ebooks (disabled) - Ebooks & Comics ○ emby (disabled) - Emby ○ ersatztv (disabled) - ErsatzTV ○ factorio (disabled) - Factorio Server ○ files (disabled) - File Browser ○ freshrss (disabled) - FreshRSS ○ frigate (disabled) - Frigate NVR ○ games (disabled) - Game Servers ○ ghost (disabled) - Ghost ○ gitea (disabled) - Gitea ○ gotify (disabled) - Gotify ○ hearth (disabled) - Hearth Chat ○ homeassistant (disabled) - Home Assistant ○ immich (disabled) - Immich ○ jellyfin (disabled) - Jellyfin ○ jellystat (disabled) - Jellystat ○ kiwix (disabled) - Kiwix ○ linkding (disabled) - Linkding ○ localai (disabled) - Local AI ○ matrix (disabled) - Matrix Chat ○ mealie (disabled) - Mealie ● media (enabled) - Media Center ○ metrics (disabled) - Metrics & Dashboards ○ monitoring (disabled) - Monitoring ○ n8n (disabled) - n8n ○ navidrome (disabled) - Navidrome ○ paperless (disabled) - Paperless-ngx ○ photoprism (disabled) - PhotoPrism ○ pihole (disabled) - Pi-hole ○ pinchflat (disabled) - Pinchflat ○ plex (disabled) - Plex ○ searxng (disabled) - SearXNG ○ shelfarr (disabled) - Shelfarr ○ speedtest (disabled) - Speedtest Tracker ○ stablediffusion (disabled) - Stable Diffusion ○ stirling-pdf (disabled) - Stirling PDF ○ syncthing (disabled) - Syncthing ○ tailscale (disabled) - Tailscale ○ tdarr (disabled) - Tdarr ○ terraria (disabled) - Terraria Server ○ tomsparkcal (disabled) - TomSparkCal ○ tunarr (disabled) - Tunarr ○ unpackerr (disabled) - Unpackerr ○ valheim (disabled) - Valheim Server ○ vaultwarden (disabled) - Vaultwarden ○ vpn (disabled) - Remote Access VPN ○ webapp (disabled) - Web App ○ wizarr (disabled) - Wizarr ○ wordpress (disabled) - WordPress ○ zomboid (disabled) - Project Zomboid Server Container Status: NAMES STATUS PORTS sb-qbittorrent Up 6 minutes (healthy) sb-sabnzbd Up 6 minutes (healthy) sb-sonarr Up 6 minutes (healthy) sb-radarr Up 6 minutes (healthy) sb-prowlarr Up 6 minutes (healthy) sb-byparr Up 6 minutes (health: starting) sb-jellyfin-media Up 10 minutes (healthy) 0.0.0.0:8096-8096/tcp, [::]:8096-8096/tcp sb-bazarr Up 10 minutes (healthy) 0.0.0.0:6767-6767/tcp, [::]:6767-6767/tcp sb-seerr Up 10 minutes (healthy) 0.0.0.0:5055-5055/tcp, [::]:5055-5055/tcp sb-deunhealth Up 10 minutes (healthy) sb-gluetun Up 10 minutes (unhealthy) 8000/tcp, 0.0.0.0:7878-7878/tcp, [::]:7878-7878/tcp, 0.0.0.0:8686-8686/tcp, [::]:8686-8686/tcp, 8388/tcp, 0.0.0.0:8789-8789/tcp, [::]:8789-8789/tcp, 0.0.0.0:8989-8989/tcp, [::]:8989-8989/tcp, 8888/tcp, 8388/udp, 0.0.0.0:8089-8080/tcp, [::]:8089-8080/tcp, 0.0.0.0:8186-8081/tcp, [::]:8186-8081/tcp, 0.0.0.0:8181-9696/tcp, [::]:8181-9696/tcp sb-dashboard Up About an hour (healthy) 0.0.0.0:8443-8443/tcp sb-npm Up About an hour (healthy) 0.0.0.0:80-81-80-81/tcp, [::]:80-81-80-81/tcp, 0.0.0.0:443-443/tcp, [::]:443-443/tcp sb-portainer Up About an hour 8000/tcp, 9443/tcp, 0.0.0.0:9000-9000/tcp sb-homepage Up About an hour (healthy) 0.0.0.0:3000-3000/tcp, [::]:3000-3000/tcp root@PMCHD01:~
Chris wrote:
Thanks, that status line is clear. The packet-size change went in, but the VPN app still fails its check the same way, so the tunnel is not carrying traffic yet. Your six apps are running again, but the download apps still need the tunnel up before they can reach out. I'm sorry for the back-and-forth on the packet size. Please don't try the lower value I mentioned earlier yet. The packet-size numbers we suggest have not been enough for every connection, so it's better to read the limit from your own log than to guess. Please run this read-only command and paste only the lines it prints, with any keys or addresses removed: sudo docker logs sb-gluetun 2&1 | grep -i mtu | tail -n 5 If it prints nothing, just say so. Also, you described the VPN as Surfshark earlier, but the box is set to a custom endpoint. Is the server address and key you typed in copied from Surfshark's own WireGuard setup? A yes or no is enough. Please leave the other VPN settings as they are.