Few questions
Posted by pixxel
First of all, a great little stack, a lot of effort went into this... Now, while I like VPNs, I'd like to see alternative like cloudflare tunnel for media stack setups. Or even no VPN requirements at all. I know it's not safe but e.g. if I have a VPN set up on my router I wouldn't like to have to set it up twice. I have a pretty decent setup going with cloudflare tunnels, because I'm behind cg-nat, and one little container and a network switch in compose file is all it takes. Also, some alternatives to qbit or Usenet would be nice, like debrid downloaders, for example. Thanks ;)
3 replies
tomspark wrote:
Thanks pixxel, appreciate the feedback. Quick takes: 1) Cloudflare tunnel — fair callout, especially behind cg-nat. Tailscale module already covers similar ground (no port forwarding, works behind NAT) but a CF tunnel option would be cleaner for users already on CF. Noted. 2) Skip in-stack VPN when you've got a router VPN — reasonable. Default-on Gluetun was a privacy hard-line but the double-VPN case is real. Considering an opt-out flag. 3) Debrid downloaders (Real-Debrid / Torrentio) — on the radar; takes more scope work but it'd be a big upgrade. Comes after the no-VPN piece. Keep suggestions coming, this is exactly the kind of input we need.
pixxel wrote:
Thanks for the prompt update. Debrid would actually be only a downloader, so basically adding one yml definition (I won't post the name here if it's against TOS). I don't know if there's still bring-your-own-docker-compose thing going on, this would probably solve it. Tailscale does work, but it requires apps for every device. Cloudflare requirement is a domain name, and a manual setup in the console for port forwarding and setting up subdomains and protecting the access to subdomains. As it's a bit advanced I wouldn't expect of you to have to explain to people what to do, instead just post the requirements (let's call them prerequisites) - e.g. make radarr:7878 point to your subdomain whatever.yourdomain.blah I'll probably think of something else down the road, all of the speed bumps I got over the years... Thanks again :)
tomspark wrote:
Bring-your-own compose is still there (custom profile in the setup wizard), so yeah, a Debrid downloader would slot in cleanly once you've got the credentials. CF tunnel prerequisites doc is a solid middle ground — I'll add that to the backlog alongside the opt-out VPN flag. Cheers for the concrete feedback.