search

DyonR / docker-qbittorrentvpn

Docker container which runs a qBittorent-nox client with an optional WireGuard or OpenVPN connection
https://hub.docker.com/r/dyonr/qbittorrentvpn/
GNU General Public License v3.0
255 stars 82 forks source link

qBittorrent not starting due to VPN issue #173

Open hkhiro opened 1 year ago

hkhiro commented 1 year ago

Hi - when I turn the Off switch for VPN then qBittorrent starts and is accessible. I turn it On and it fails to start or at least is inaccessible from the port I have for it 8081

Running latest Docker Engine Version: 20.10.17 (API: 1.41)

Logs below 

2023-04-10 08:01:09.920827 [INFO] VPN_ENABLED defined as 'yes'
2023-04-10 08:01:09.987126 [INFO] LEGACY_IPTABLES is set to ''
2023-04-10 08:01:10.047433 [INFO] Not making any changes to iptables version
2023-04-10 08:01:10.135145 [INFO] The container is currently running iptables v1.8.7 (nf_tables).
2023-04-10 08:01:10.210925 [INFO] VPN_TYPE defined as 'openvpn'
2023-04-10 08:01:10.329625 [INFO] OpenVPN config file is found at /config/openvpn/md2-ovpn-udp.ovpn
dos2unix: converting file /config/openvpn/md2-ovpn-udp.ovpn to Unix format...
2023-04-10 08:01:10.537755 [INFO] VPN remote line defined as 'md2-auto-udp.ptoserver.com 53'
2023-04-10 08:01:10.599445 [INFO] VPN_REMOTE defined as 'md2-auto-udp.ptoserver.com'
2023-04-10 08:01:10.664135 [INFO] VPN_PORT defined as '53'
2023-04-10 08:01:10.724240 [INFO] VPN_PROTOCOL defined as 'udp'
2023-04-10 08:01:10.783838 [INFO] VPN_DEVICE_TYPE defined as 'tun0'
2023-04-10 08:01:10.845092 [INFO] LAN_NETWORK defined as '192.168.0.0/24'
2023-04-10 08:01:10.902512 [WARNING] NAME_SERVERS not defined (via -e NAME_SERVERS), defaulting to CloudFlare and Google name servers
2023-04-10 08:01:10.960033 [INFO] VPN_OPTIONS not defined (via -e VPN_OPTIONS)
2023-04-10 08:01:11.021519 [INFO] Adding 1.1.1.1 to resolv.conf
2023-04-10 08:01:11.083124 [INFO] Adding 8.8.8.8 to resolv.conf
2023-04-10 08:01:11.160640 [INFO] Adding 1.0.0.1 to resolv.conf
2023-04-10 08:01:11.240376 [INFO] Adding 8.8.4.4 to resolv.conf
2023-04-10 08:01:11.312555 [INFO] PUID not defined. Defaulting to root user
2023-04-10 08:01:11.388276 [INFO] PGID not defined. Defaulting to root group
2023-04-10 08:01:11.458930 [INFO] Starting OpenVPN...
2023-04-10 08:01:11 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning.
2023-04-10 08:01:11 WARNING: file 'credentials.conf' is group or others accessible
2023-04-10 08:01:11 OpenVPN 2.5.1 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on May 14 2021
2023-04-10 08:01:11 library versions: OpenSSL 1.1.1n  15 Mar 2022, LZO 2.10
2023-04-10 08:01:11 TCP/UDP: Preserving recently used remote address: [AF_INET]178.175.131.164:53
2023-04-10 08:01:11 UDP link local: (not bound)
2023-04-10 08:01:11 UDP link remote: [AF_INET]178.175.131.164:53
2023-04-10 08:01:11 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1557', remote='link-mtu 1550'
2023-04-10 08:01:11 WARNING: 'auth' is used inconsistently, local='auth SHA1', remote='auth [null-digest]'
2023-04-10 08:01:11 WARNING: 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo'
2023-04-10 08:01:12 [Secure-Server] Peer Connection Initiated with [AF_INET]178.175.131.164:53
2023-04-10 08:01:13 TUN/TAP device tun0 opened
2023-04-10 08:01:13 net_iface_mtu_set: mtu 1500 for tun0
2023-04-10 08:01:13 net_iface_up: set tun0 up
2023-04-10 08:01:13 net_addr_v4_add: 10.53.7.3/27 dev tun0
2023-04-10 08:01:13 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2023-04-10 08:01:13 Initialization Sequence Completed
2023-04-10 08:01:13.907195 [INFO] Docker network defined as 172.17.0.0/16
2023-04-10 08:01:13.984329 [INFO] Adding 192.168.0.0/24 as route via docker eth0
Error: Nexthop has invalid gateway.
2023-04-10 08:01:14.042947 [INFO] ip route defined as follows...
--------------------
0.0.0.0/1 via 10.53.7.1 dev tun0 
default via 10.53.7.1 dev tun0 
10.53.7.0/27 dev tun0 proto kernel scope link src 10.53.7.3 
128.0.0.0/1 via 10.53.7.1 dev tun0 
172.17.0.0/16 dev eth0 proto kernel scope link src 172.17.0.3 
178.175.131.164 via 172.17.0.1 dev eth0 
--------------------
2023-04-10 08:01:14.271555 [INFO] iptables defined as follows...
--------------------
-P INPUT DROP
-P FORWARD ACCEPT
-P OUTPUT DROP
-A INPUT -i tun0 -j ACCEPT
-A INPUT -s 172.17.0.0/16 -d 172.17.0.0/16 -j ACCEPT
-A INPUT -i eth0 -p udp -m udp --sport 53 -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --dport 8080 -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --sport 8080 -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 0 -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A OUTPUT -o tun0 -j ACCEPT
-A OUTPUT -s 172.17.0.0/16 -d 172.17.0.0/16 -j ACCEPT
-A OUTPUT -o eth0 -p udp -m udp --dport 53 -j ACCEPT
-A OUTPUT -o eth0 -p tcp -m tcp --dport 8080 -j ACCEPT
-A OUTPUT -o eth0 -p tcp -m tcp --sport 8080 -j ACCEPT
-A OUTPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT
-A OUTPUT -o lo -j ACCEPT
--------------------
2023-04-10 08:01:14.468762 [WARNING] ENABLE_SSL is set to '', SSL is not enabled. This could cause issues with logging if other apps use the same Cookie name (SID).
2023-04-10 08:01:14.525753 [WARNING] Removing the SSL configuration from the config file...
2023-04-10 08:01:14.585916 [INFO] A group with PGID root already exists in /etc/group within this container, nothing to do.
2023-04-10 08:01:14.649801 [INFO] An user with PUID root already exists within this container, nothing to do.
2023-04-10 08:01:14.704123 [WARNING] UMASK not defined (via -e UMASK), defaulting to '002'
2023-04-10 08:01:14.761192 [INFO] Starting qBittorrent daemon...
Logging to /config/qBittorrent/data/logs/qbittorrent.log.
2023-04-10 08:01:15.863460 [INFO] Started qBittorrent daemon successfully...
2023-04-10 08:01:15.923938 [INFO] qBittorrent PID: 207
2023-04-10 08:01:15.983015 [INFO] HEALTH_CHECK_HOST is not set. For now using default host one.one.one.one
2023-04-10 08:01:16.039815 [INFO] HEALTH_CHECK_INTERVAL is not set. For now using default interval of 300
2023-04-10 08:01:16.096913 [INFO] HEALTH_CHECK_SILENT is not set. Because this variable is not set, it will be supressed by default
2023-04-10 08:01:16.158491 [WARNING] RESTART_CONTAINER not defined,(via -e RESTART_CONTAINER), defaulting to 'yes'
2023-04-10 08:01:16.215207 [INFO] HEALTH_CHECK_AMOUNT is not set. For now using default interval of 1
2023-04-10 08:01:16.272048 [INFO] HEALTH_CHECK_AMOUNT is set to 1
hkhiro commented 1 year ago

my vpn provider supports wg so tried that - again webui not accessible via 8081 but logs seem to indicate it has come up in any case

2023-04-10 09:04:35.870685 [INFO] VPN_ENABLED defined as 'yes'
2023-04-10 09:04:35.933067 [INFO] LEGACY_IPTABLES is set to ''
2023-04-10 09:04:35.995589 [INFO] Not making any changes to iptables version
2023-04-10 09:04:36.053468 [INFO] The container is currently running iptables v1.8.7 (nf_tables).
2023-04-10 09:04:36.118743 [INFO] VPN_TYPE defined as 'wireguard'
2023-04-10 09:04:36.192310 [INFO] WireGuard config file is found at /config/wireguard/wg0.conf
dos2unix: converting file /config/wireguard/wg0.conf to Unix format...
2023-04-10 09:04:36.260005 [INFO] VPN remote line defined as 'sx530201-wg.pointtoserver.com:51820'
2023-04-10 09:04:36.321352 [INFO] VPN_REMOTE defined as 'sx530201-wg.pointtoserver.com'
2023-04-10 09:04:36.379504 [INFO] VPN_PORT defined as '51820'
2023-04-10 09:04:36.437727 [INFO] VPN_PROTOCOL set as 'udp', since WireGuard is always udp.
2023-04-10 09:04:36.534369 [INFO] VPN_DEVICE_TYPE set as 'wg0', since WireGuard will always be wg0.
2023-04-10 09:04:36.592434 [INFO] LAN_NETWORK defined as '192.168.0.0/24'
2023-04-10 09:04:36.651592 [WARNING] NAME_SERVERS not defined (via -e NAME_SERVERS), defaulting to CloudFlare and Google name servers
2023-04-10 09:04:36.712478 [INFO] Adding 1.1.1.1 to resolv.conf
2023-04-10 09:04:36.769965 [INFO] Adding 8.8.8.8 to resolv.conf
2023-04-10 09:04:36.828032 [INFO] Adding 1.0.0.1 to resolv.conf
2023-04-10 09:04:36.888360 [INFO] Adding 8.8.4.4 to resolv.conf
2023-04-10 09:04:36.945640 [INFO] PUID not defined. Defaulting to root user
2023-04-10 09:04:37.006941 [INFO] PGID not defined. Defaulting to root group
2023-04-10 09:04:37.060876 [INFO] Starting WireGuard...
Warning: `/config/wireguard/wg0.conf' is world accessible
[#] ip link add wg0 type wireguard
[#] wg setconf wg0 /dev/fd/63
[#] ip -4 address add 172.17.164.58 dev wg0
[#] ip link set mtu 1420 up dev wg0
[#] resolvconf -a wg0 -m 0 -x
[#] wg set wg0 fwmark 51820
[#] ip -4 route add 0.0.0.0/0 dev wg0 table 51820
[#] ip -4 rule add not fwmark 51820 table 51820
[#] ip -4 rule add table main suppress_prefixlength 0
[#] iptables-restore -n
2023-04-10 09:04:37.741733 [INFO] Docker network defined as 172.17.0.0/16
2023-04-10 09:04:37.804965 [INFO] Adding 192.168.0.0/24 as route via docker eth0
2023-04-10 09:04:37.866817 [INFO] ip route defined as follows...
--------------------
default via 172.17.0.1 dev eth0 
172.17.0.0/16 dev eth0 proto kernel scope link src 172.17.0.3 
192.168.0.0/24 via 172.17.0.1 dev eth0 
--------------------
2023-04-10 09:04:38.029274 [INFO] iptables defined as follows...
--------------------
-P INPUT DROP
-P FORWARD ACCEPT
-P OUTPUT DROP
-A INPUT -i wg0 -j ACCEPT
-A INPUT -s 172.17.0.0/16 -d 172.17.0.0/16 -j ACCEPT
-A INPUT -i eth0 -p udp -m udp --sport 51820 -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --dport 8080 -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --sport 8080 -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 0 -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A OUTPUT -o wg0 -j ACCEPT
-A OUTPUT -s 172.17.0.0/16 -d 172.17.0.0/16 -j ACCEPT
-A OUTPUT -o eth0 -p udp -m udp --dport 51820 -j ACCEPT
-A OUTPUT -o eth0 -p tcp -m tcp --dport 8080 -j ACCEPT
-A OUTPUT -o eth0 -p tcp -m tcp --sport 8080 -j ACCEPT
-A OUTPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT
-A OUTPUT -o lo -j ACCEPT
--------------------
2023-04-10 09:04:38.113381 [WARNING] ENABLE_SSL is set to '', SSL is not enabled. This could cause issues with logging if other apps use the same Cookie name (SID).
2023-04-10 09:04:38.173108 [WARNING] Removing the SSL configuration from the config file...
2023-04-10 09:04:38.233217 [INFO] A group with PGID root already exists in /etc/group within this container, nothing to do.
2023-04-10 09:04:38.290097 [INFO] An user with PUID root already exists within this container, nothing to do.
2023-04-10 09:04:38.347199 [WARNING] UMASK not defined (via -e UMASK), defaulting to '002'
2023-04-10 09:04:38.402802 [INFO] Starting qBittorrent daemon...
Logging to /config/qBittorrent/data/logs/qbittorrent.log.
2023-04-10 09:04:39.504234 [INFO] Started qBittorrent daemon successfully...
2023-04-10 09:04:39.563099 [INFO] qBittorrent PID: 271
2023-04-10 09:04:39.631630 [INFO] HEALTH_CHECK_HOST is not set. For now using default host one.one.one.one
2023-04-10 09:04:39.703887 [INFO] HEALTH_CHECK_INTERVAL is not set. For now using default interval of 300
2023-04-10 09:04:39.783015 [INFO] HEALTH_CHECK_SILENT is not set. Because this variable is not set, it will be supressed by default
2023-04-10 09:04:39.838257 [WARNING] RESTART_CONTAINER not defined,(via -e RESTART_CONTAINER), defaulting to 'yes'
2023-04-10 09:04:39.893355 [INFO] HEALTH_CHECK_AMOUNT is not set. For now using default interval of 1
2023-04-10 09:04:39.947492 [INFO] HEALTH_CHECK_AMOUNT is set to 1
TrueBankai416 commented 1 year ago

i am having the same issue, its been working for a few months and a few days ago it stopped