# Proton VPN + Port Forwarding + qBittorrent

This relies on qBittorrent Web UI not requiring authentication for localhost connections.

```
Tools
  -> Options
    -> Web UI
      -> Authentication
        -> [X] Bypass authentication for clients on localhost
```

### Recommended Environment Variables

| Variable              | Default                 | Examples                     | Description                                                                                                                                              |
|-----------------------|-------------------------|------------------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------|
| `TZ`                  | `UTC`                   | `America/Denver`             | Set your [timezone](https://en.wikipedia.org/wiki/List_of_tz_database_time_zones) to make sure logs rotate at local midnight instead of at UTC midnight. |
| `MANAGE_WIREGUARD`    | `true`                  | `false`                      | Set to `false` when this container should only manage Proton NAT-PMP and qBittorrent while sharing another WireGuard container's network namespace.      |
| `WIREGUARD_INTERFACE` | `wg0`                   | `wg0`, `wg1`, ...            | Set the wireguard interface name to use.                                                                                                                 |
| `GATEWAY_IP`          | `10.2.0.1`              | `10.2.0.1`                   | Proton VPN NAT-PMP gateway IP.                                                                                                                           |
| `LOCAL_IPV4_SUBNETS`  | `192.168.0.0/16`        | `192.168.0.0/16, 10.0.0.0/8` | Comma separated list of local subnet CIDRs to be allowed outside the wireguard tunnel.                                                                   |
| `WEBUI_HOST`          | `http://localhost:8080` | <URL to qBittorrent Web UI>  | URL to the qBittorrent Web UI. Authentication must be disabled to localhost connections unless `WEBUI_USERNAME` and `WEBUI_PASSWORD` are set.            |
| `QBITTORRENT_HOST`    |                         | `localhost`                  | Alternative way to set the qBittorrent Web UI host. Used with `QBITTORRENT_PORT`.                                                                        |
| `QBITTORRENT_PORT`    |                         | `8088`                       | Alternative way to set the qBittorrent Web UI port. Used with `QBITTORRENT_HOST`.                                                                        |
| `WEBUI_USERNAME`      |                         | `admin`                      | Optional qBittorrent Web UI username. Use this if localhost authentication bypass is not enabled.                                                        |
| `WEBUI_PASSWORD`      |                         | `adminadmin`                 | Optional qBittorrent Web UI password. Use this if localhost authentication bypass is not enabled.                                                        |