this post was submitted on 24 Jan 2024
127 points (94.4% liked)
Piracy: ꜱᴀɪʟ ᴛʜᴇ ʜɪɢʜ ꜱᴇᴀꜱ
54716 readers
240 users here now
⚓ Dedicated to the discussion of digital piracy, including ethical problems and legal advancements.
Rules • Full Version
1. Posts must be related to the discussion of digital piracy
2. Don't request invites, trade, sell, or self-promote
3. Don't request or link to specific pirated titles, including DMs
4. Don't submit low-quality posts, be entitled, or harass others
Loot, Pillage, & Plunder
📜 c/Piracy Wiki (Community Edition):
💰 Please help cover server costs.
 |
 |
|---|---|
| Ko-fi | Liberapay |
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
very little network experience but I'm using Ubuntu to ssh into raspbian on a pi4. All of which is new to me, I can get sonarr radarr qbittorrent all working on it (i think - not willing to test without vpn), but it's the VPN / Jellyfin stuff that's really kicking my butt.
but if I'm turning off the VPN to watch something, doesn't that make expose me because of all the seeding etc through qbittorrent?
This is why I talked about allowing local traffic.
I'm going to try and keep this newbie friendly (but I'm not the best at it, so let me know if something is not clear).
In an ideal world everything has an IP address that is unique. Some portion of the denotes it's network, some portion denotes the host. In this way we can define logical (and oftentimes physical) associations. Your home is a classic example of a local area network (LAN).
So what does a vpn do? It makes a tunnel that connects your machine to a remote network, forming a logical connection and "relocating" your device. In the VPN config you should have the option to allow local access. This will set up some fun rules for how network traffic is routed - if it's going to a LAN address it can, otherwise all traffic is routed over the VPN.
Ok.
I'm going to warn you right now. Unless you want to do some reading on how traffic is routed, how Linux handles VPN connections and (probably) containers, do not run the clients that download content on your media server.
If you want to use jellyfin to distribute media in a lan you do not need to do anything other then just start the jellyfin server on the pi and add content.
I do really appreciate your help - but unfortunately things like "just configure your VPN to allow local traffic" isn't that helpful when my VPN is just me typing "mullvad connect" into a command line. There isn't anything obvious to configure, and the moment you start looking into it, it's insanely complicated.
edit: OK, so with some googling this morning I found "allow local traffic" is set with "mullvad lan set allow" (which is in the help doc, but again - zero explanation, it just lists the command amongst other commands)
edir2: apparently I need to run mullvad inside gluetun, so that's the next thing
edit3: gluetun installed... step 1: "Required environment variables: VPN_SERVICE_PROVIDER=mullvad" that's it - no other text. Does that go in docker .env or does it go in the compose.yml or is it set by the command line and where does it go in those files?Who knows?
Apparently gluetun is running on port 8000 - point browser to it "unable to connect" so either I fucked something in installing it or there's no GUI browser interface - which is it? no idea.
edit4: .env has "VPN_CLIENT='openvpn'" - is that the same or different to "_SERVICE_PROVIDER"? should the client be gluetun and the service provider be mullvad? Or neither? Or both? or vice versa? No one knows.
edit 5: After more looking around I glimpsed that line in the last edit in a .yml file so im guessing that means "environment variable" is different to .env - still no idea what VPN_CLIENT should be.
edit 6: no, apparently thats all wrong. It should go in override.yml instead...
Generated private key, downloaded json, extracted the keys put them into the yml (why do these lines get hyphens at the start but nothing else does in the yml? hope i didn't fuck it up!)
edit 7: did all that, took over an hour, docker restart gluetun no errors and whatsmyipaddress.com shows me where I actually am so its not working. Another complete waste of time with no idea what went wrong or how to fix it
Unfortunately I can't give you specifics - because I simply don't use mulivad. It looks like mulivad used open VPN if on windows, or wire guard for Mac/linux. And Gluetin is a generic vpn client packaged in a docker container?
If you are downloading onto your main computer - a docker vpn client is just going to get in your way. I should ask - what is is said computer running?
it's a raspberry pi running raspbian bookworm
what's the difference between wireguard and mullvad. Is mullvad just another shell for wireguard?
Got it. Yea. In this instance it's a wrapper for wire guard. If your on windows or would be a wrapper for openvpn. And your running mulivad on the pi?