Prowlarr not behind vpn : leaking IP to websites

[vale075]

It looks like Prowlarr is not setup to be proxied by the VPN service (gluetun).
This means your public IP is being leaked to the torrent websites, that most probably store it for technical reasons, and could be raided by law enforcement.

[Lackoftactics]

nice one

[vale075]

You now need to keep in mind that you must make radarr and sonarr use prowlarr : they have the ability to use any torznab indexer, so can in theory access a remote torrent website by themselves and bypass the prowlarr proxy, which would again leak the IP.

You could also simply make every *arr app go through gluetun, for peace of mind. The only drawback is that it cluttures the gluetun traefik config, but it prevents any leaks (if you trust gluetun).

[Lackoftactics]

You are right. I had this problem before in the previous version with gluetun and everything behind it and simplified it to the previous setup.

The indexer problem is less of an issue than the torrent, but this is a good find and nice analysis.

I just got back from the conference and will revert and reopen the issue and take a look at it again tomorrow. I need to properly test it on the server.

To be honest I don't like the solution with all behind gluetun, because it makes too many roundtrips for data outside of local network

[Lackoftactics]

I think I will add some proxy, as I want to avoid gluetun for everything

[Lackoftactics]

working on egress proxy, prowlarr part was added on Sunday