From ba9d3d292cc716e32bb7d2d6b2471f0a14501e6c Mon Sep 17 00:00:00 2001
From: Matthew Pomes <matthew.pomes@pm.me>
Date: Tue, 30 Sep 2025 11:22:40 -0500
Subject: [PATCH] Add VPN config

---
 jellyfin-compose.yaml | 30 ++++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)

diff --git a/jellyfin-compose.yaml b/jellyfin-compose.yaml
index 11b6fab..094838b 100644
--- a/jellyfin-compose.yaml
+++ b/jellyfin-compose.yaml
@@ -1,7 +1,37 @@
 services:
+  gluetun:
+    container_name: GlueTun-VPN
+    image: qmcgaw/gluetun
+    cap_add:
+      - NET_ADMIN
+    ports:
+      - 8080:8080
+      - 51820:51820
+      - 51820:51820/udp
+      - 46931:46931
+      - 46931:46931/udp
+    environment:
+      - VPN_SERVICE_PROVIDER=custom
+      - VPN_TYPE=wireguard
+      - VPN_ENDPOINT_IP=${ENDPOINT_IP}
+      - WIREGUARD_ADDRESSES=${WIREGUARD_ADDR}
+      - VPN_ENDPOINT_PORT=${ENDPOINT_PORT}
+      - VPN_DNS_ADDRESS=${DNS_ADDRESS}
+      - WIREGUARD_PUBLIC_KEY=${PUBLIC_KEY}
+      - WIREGUARD_PRIVATE_KEY=${PRIVATE_KEY}
+      - VPN_PORT_FORWARDING=on
+      - VPN_PORT_FORWARDING_PROVIDER=protonvpn
+      - VPN_PORT_FORWARDING_STATUS_FILE=/tmp/gluetun/forwarded_port
+      - TZ=${TZ}
+      - UPDATER_PERIOD=24h
+    restart: always
+    volumes:
+      - /data/jellyfin:/data/jellyfin
+      - /data/jellyfin/gluetun:/tmp/gluetun
   qbittorrent:
     image: lscr.io/linuxserver/qbittorrent:latest
     container_name: qbittorrent
+    network_mode: service:gluetun
     environment:
       - WEBUI_PORT=8080
       - PUID=0