search

qdm12 / gluetun

VPN client in a thin Docker container for multiple VPN providers, written in Go, and using OpenVPN or Wireguard, DNS over TLS, with a few proxy servers built-in.
https://hub.docker.com/r/qmcgaw/gluetun
MIT License
8.1k stars 374 forks source link

Bug: cant access services #2469

Open kajvans opened 2 months ago

kajvans commented 2 months ago

Is this urgent?

Yes

Host OS

Debian 12

CPU arch

x86_64

VPN service provider

ExpressVPN

What are you using to run the container

docker-compose

What is the version of Gluetun

v3.39.0

What's the problem 🤔

I am trying to access sabnzbd behind gluetun but when i try this i get: "site not available" My services in the docker network have no problem connecting to it only when i try to go to the GUI from another computer it wont work.

I tried disabling the firewall but that did nothing.

In the logs of gluetun i dont see anything unusual but maybe i missed something since i am not an expert. Sabnzbd logs also dont show anything that might reveal the problem.

Things i have tried:

  1. seperate compose files
  2. disabling firewall
  3. using service:gluetun instead of container:gluetun
  4. switching ports

the problem is not only with sabnzbd but also qbittorrent so i think it is a gluetun problem here.

Share your logs (at least 10 lines)

2024-09-03T18:59:47+02:00 INFO [routing] default route found: interface eth0, gateway 172.19.0.1, assigned IP 172.19.0.3 and family v4
2024-09-03T18:59:47+02:00 INFO [routing] local ethernet link found: eth0
2024-09-03T18:59:47+02:00 INFO [routing] local ipnet found: 172.19.0.0/16
2024-09-03T18:59:48+02:00 INFO [firewall] enabling...
2024-09-03T18:59:48+02:00 INFO [firewall] enabled successfully
2024-09-03T18:59:49+02:00 INFO [storage] merging by most recent 20480 hardcoded servers and 19738 servers read from /gluetun/servers.json
2024-09-03T18:59:49+02:00 INFO Alpine version: 3.20.2
2024-09-03T18:59:50+02:00 INFO OpenVPN 2.5 version: 2.5.10
2024-09-03T18:59:50+02:00 INFO OpenVPN 2.6 version: 2.6.11
2024-09-03T18:59:50+02:00 INFO IPtables version: v1.8.10
2024-09-03T18:59:50+02:00 INFO Settings summary:
├── VPN settings:
|   ├── VPN provider settings:
|   |   ├── Name: expressvpn
|   |   └── Server selection settings:
|   |       ├── VPN type: openvpn
|   |       ├── Countries: Germany
|   |       └── OpenVPN server selection settings:
|   |           └── Protocol: UDP
|   └── OpenVPN settings:
|       ├── OpenVPN version: 2.6
|       ├── Update period: every 24h0m0s
|       ├── Upstream resolvers:
|       |   └── cloudflare
|       ├── Caching: yes
|       ├── IPv6: no
|       └── DNS filtering settings:
|           ├── Block malicious: yes
|           ├── Block ads: no
|           ├── Block surveillance: no
|           └── Blocked IP networks:
|               ├── 127.0.0.1/8
|               ├── 10.0.0.0/8
|               ├── 172.16.0.0/12
|               ├── 192.168.0.0/16
|               ├── 169.254.0.0/16
|               ├── ::1/128
|               ├── fc00::/7
|               ├── fe80::/10
|               ├── ::ffff:127.0.0.1/104
|               ├── ::ffff:10.0.0.0/104
|               ├── ::ffff:169.254.0.0/112
|               ├── ::ffff:172.16.0.0/108
|               └── ::ffff:192.168.0.0/112
├── Firewall settings:
|   ├── Enabled: yes
|   └── VPN input ports:
|       └── 57786
├── Log settings:
|   └── Log level: info
├── Health settings:
|   ├── Server listening address: 127.0.0.1:9999
|   ├── Target address: cloudflare.com:443
|   ├── Duration to wait after success: 5s
|   ├── Read header timeout: 100ms
|   ├── Read timeout: 500ms
|   └── VPN wait durations:
|       ├── Initial duration: 6s
|       └── Additional duration: 5s
├── Shadowsocks server settings:
|   └── Enabled: no
├── HTTP proxy settings:
|   └── Enabled: no
├── Control server settings:
|   ├── Listening address: :8000
|   └── Logging: yes
├── Storage settings:
|   └── Filepath: /gluetun/servers.json
├── OS Alpine settings:
|   ├── Process UID: 998
|   ├── Process GID: 100
|   └── Timezone: Europe/Berlin
├── Public IP settings:
|   ├── Fetching: every 12h0m0s
|   ├── IP file path: /tmp/gluetun/ip
|   └── Public IP data API: ipinfo
└── Version settings:
    └── Enabled: yes
2024-09-03T18:59:50+02:00 INFO [routing] default route found: interface eth0, gateway 172.19.0.1, assigned IP 172.19.0.3 and family v4
2024-09-03T18:59:50+02:00 INFO [routing] adding route for 0.0.0.0/0
2024-09-03T18:59:50+02:00 INFO [firewall] setting allowed subnets...
2024-09-03T18:59:50+02:00 INFO [routing] default route found: interface eth0, gateway 172.19.0.1, assigned IP 172.19.0.3 and family v4
2024-09-03T18:59:50+02:00 INFO TUN device is not available: open /dev/net/tun: no such file or directory; creating it...
2024-09-03T18:59:50+02:00 INFO [dns] using plaintext DNS at address 1.1.1.1
2024-09-03T18:59:50+02:00 INFO [http server] http server listening on [::]:8000
2024-09-03T18:59:50+02:00 INFO [healthcheck] listening on 127.0.0.1:9999
2024-09-03T18:59:50+02:00 INFO [firewall] allowing VPN connection...
2024-09-03T18:59:50+02:00 INFO [openvpn] OpenVPN 2.6.11 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]
2024-09-03T18:59:50+02:00 INFO [openvpn] library versions: OpenSSL 3.3.1 4 Jun 2024, LZO 2.10
2024-09-03T18:59:50+02:00 INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]212.30.36.131:1195
2024-09-03T18:59:50+02:00 INFO [openvpn] UDPv4 link local: (not bound)
2024-09-03T18:59:50+02:00 INFO [openvpn] UDPv4 link remote: [AF_INET]212.30.36.131:1195
2024-09-03T18:59:50+02:00 INFO [openvpn] [Server-11094-0a] Peer Connection Initiated with [AF_INET]212.30.36.131:1195
2024-09-03T18:59:51+02:00 INFO [openvpn] TUN/TAP device tun0 opened
2024-09-03T18:59:51+02:00 INFO [openvpn] /sbin/ip link set dev tun0 up mtu 1500
2024-09-03T18:59:51+02:00 INFO [openvpn] /sbin/ip link set dev tun0 up
2024-09-03T18:59:51+02:00 INFO [openvpn] /sbin/ip addr add dev tun0 local 10.122.34.41 peer 10.122.34.42
2024-09-03T18:59:51+02:00 INFO [openvpn] UID set to nonrootuser
2024-09-03T18:59:51+02:00 INFO [openvpn] Initialization Sequence Completed
2024-09-03T18:59:51+02:00 INFO [firewall] setting allowed input port 57786 through interface tun0...
2024-09-03T18:59:51+02:00 INFO [dns] downloading hostnames and IP block lists
2024-09-03T18:59:51+02:00 INFO [healthcheck] healthy!
2024-09-03T18:59:52+02:00 INFO [dns] DNS server listening on [::]:53
2024-09-03T18:59:52+02:00 INFO [dns] ready

### Share your configuration

```yml
version: "3"
services:
  gluetun:
    image: qmcgaw/gluetun
    container_name: gluetun
    cap_add:
      - NET_ADMIN
    networks:
      - services
    environment:
      - PUID=998
      - PGID=100
      - TZ=Europe/Berlin
      - VPN_SERVICE_PROVIDER=
      - OPENVPN_USER=
      - OPENVPN_PASSWORD=
      - SERVER_COUNTRIES=
      - FIREWALL_VPN_INPUT_PORTS=57786
    volumes:
      - /srv/mergerfs/config/appdata/gluetun:/gluetun
    ports:
      - 8086:8000/tcp
      - 8080:8080 # SABnzbd WEB GUI
      - 8081-8085:8081-8085 # qBittorrent WEB GUI
      - 6881-6885:6881-6885/udp
      - 6881-6885:6881-6885
      - 8888:8888/tcp # HTTP proxy
      - 8388:8388/tcp # Shadowsocks
      - 8388:8388/udp # Shadowsocks
    restart: unless-stopped
  sabnzbd:
    image: lscr.io/linuxserver/sabnzbd:latest
    restart: unless-stopped
    network_mode: container:gluetun
    container_name: sabnzbd
    environment:
      - PUID=998
      - PGID=100
      - TZ=Europe/Berlin
    volumes:
      - /srv/mergerfs/config/appdata/sabnzbd:/config
      - /srv/mergerfs/pool/share_media/:/data #optional
      - /srv/mergerfs/pool/share_media/incomplete:/incomplete-downloads
networks:
  services:
    external: true
github-actions[bot] commented 2 months ago

@qdm12 is more or less the only maintainer of this project and works on it in his free time. Please: