Proton VPN + Port Forwarding + qBittorrent

This relies on qBittorrent Web UI not requiring authentication for localhost connections.

Tools
  -> Options
    -> Web UI
      -> Authentication
        -> [X] Bypass authentication for clients on localhost

Variable	Default	Examples	Description
`TZ`	`UTC`	`America/Denver`	Set your timezone to make sure logs rotate at local midnight instead of at UTC midnight.
`WIREGUARD_INTERFACE`	`wg0`	`wg0`, `wg1`, ...	Set the wireguard interface name to use.
`LOCAL_IPV4_SUBNETS`	`192.168.0.0/16`	`192.168.0.0/16, 10.0.0.0/8`	Comma separated list of local subnet CIDRs to be allowed outside the wireguard tunnel.
`WEBUI_HOST`	`http://localhost:8080`		URL to the qBittorrent Web UI. Authentication must be disabled to localhost connections unless `WEBUI_USERNAME` and `WEBUI_PASSWORD` are set.
`WEBUI_USERNAME`		`admin`	Optional qBittorrent Web UI username. Use this if localhost authentication bypass is not enabled.
`WEBUI_PASSWORD`		`adminadmin`	Optional qBittorrent Web UI password. Use this if localhost authentication bypass is not enabled.