feat(extras/scripts): update qBittorrent peer port with optional authentication #2700

astappiev · 2025-02-13T10:23:00Z

Inspired by #2611 and talks in #1555 created a script to update peer-port of qBittorrent.

Upd: added option to authenticate.

AndaPlays · 2025-02-13T15:57:45Z

I'm currently working on something similar, but I guess this would be a better solution. 👍

astappiev · 2025-02-14T23:16:40Z

The only downside of these scripts is that they don't cover a scenario when a client is started after gluetun.

AndaPlays · 2025-02-16T14:56:42Z

@astappiev Looks good to me. The only thing I would appreciate is if we could add an option for Nmap to check whether the port is actually open. I'm on a couple of private trackers, and if my TCP port is filtered, I could get heat—or in the worst case—have my account banned.

I tried integrating it into my script and controlling the VPN via the control server, but Gluetun doesn't have an API for WireGuard yet.

astappiev · 2025-02-16T15:47:08Z

I think it should be implemented as another script (as it is not client dependent), or even in the gluetun core.

extras/scripts/qbittorrent-port-update.sh

qdm12 · 2025-11-13T15:40:38Z

extras/scripts/qbittorrent-port-update.sh

+    echo "                         (Omit if not required)"
+    echo "  -p, --pass PASS        Specify the qBittorrent password."
+    echo "                         (Omit if not required)"
+    echo "  -P, --port PORT        Specify the qBittorrent peer-port."


this should accept a comma separated list of ports from Gluetun's {{PORTS}} to simplify usage of this script.
And then it should use $(echo {{PORTS}} | cut -d, -f1) to take only the first port just in case, since qbitorrent supports only one port.

Not sure if I got it right, does it mean we should use it like this bittorrent-port-update.sh --port {{PORTS}}?

E.g. via VPN_PORT_FORWARDING_UP_COMMAND=/bin/sh -c "/scripts/qbittorrent-port-update.sh --port {{PORTS}} --webui-port 9081"

If so, it's already supported, this is exactly how I used it since beggining.

Correct, but {{PORTS}} can have multiple ports so for convenience and a shorter command, let's cut and use the first port within the script. The flag should be renamed to --ports and indicate that despite the name it only picks the first port

I think the other way around, let's keep it named as --port to indicate that only one of them is used.

The logic to split and keep the first was already there
https://github.com/astappiev/gluetun/blob/839e318c9c30676c8ecd9f042c524e87a1634f32/extras/scripts/qbittorrent-port-update.sh#L60

Actually....
Added support for {{PORT}} variable in fcdba0a which takes the first of the ports. No reason to have it supported in scripts!

I updated the example to use --port {{PORT}}, but left PORT=$(echo "$2" | cut -d',' -f1) in to keep it more foolproof

extras/scripts/qbittorrent-port-update.sh

qdm12 · 2025-11-14T05:35:35Z

@AndaPlays for this nmap command to succeed, I suppose you do need a program listening on the forwarded port right? What I'm thinking is to, when setting up port forwarding:

start an ephemeral tcp server on the forwarded port / if the port is used already then don't that's fine too (udp is more complicated and not widely used by users so we'll skip that)
check public-ip:port with a tcp dial (same as the nmap command)
Report to debug logs it is open and finish the port forwarding setup process (I'm a maniac of logging problems only and avoid logging if things work correctly)

I'm going to mark our comments as off topic, would you please open an issue for this? Thanks!!

monstermuffin · 2025-11-20T13:06:12Z

Hey guys, I know it's not a native solution but this use case is exactly why I made qSticky. Been working very well and it doesn't matter what order things come up as it's a middleman between the two applications.

qdm12 · 2025-11-22T15:30:40Z

extras/scripts/qbittorrent-port-update.sh

+fi
+
+# update peer host via API, 0 is a dummy port, required due to https://github.com/qdm12/gluetun-wiki/pull/147
+wget ${WGET_OPTS} -qO- --post-data="json={\"random_port\":false,\"upnp\":false,\"listen_port\":0}" "$PREF_URL/v2/app/setPreferences"


as per #2997 (comment)
let's add

Suggested change

wget ${WGET_OPTS} -qO- --post-data="json={\"random_port\":false,\"upnp\":false,\"listen_port\":0}" "$PREF_URL/v2/app/setPreferences"

wget ${WGET_OPTS} -qO- --post-data="json={\"random_port\":false,\"upnp\":false,\"listen_port\":0,\"current_network_interface\":\"\",\"current_interface_address\":\"\"}" "$PREF_URL/v2/app/setPreferences"

I have added that, but maybe let's use lo as a temporal interface; it feels safer.

Great idea! Updated the wiki with that suggestion.

qdm12 · 2025-11-22T15:31:49Z

extras/scripts/qbittorrent-port-update.sh

+fi
+
+# second call to set the actual port
+wget ${WGET_OPTS} -qO- --post-data="json={\"listen_port\":$PORT}" "$PREF_URL/v2/app/setPreferences"


Suggested change

wget ${WGET_OPTS} -qO- --post-data="json={\"listen_port\":$PORT}" "$PREF_URL/v2/app/setPreferences"

wget ${WGET_OPTS} -qO- --post-data="json={\"listen_port\":$PORT,\"current_network_interface\":\"$VPN_INTERFACE\",\"current_interface_address\":\"0.0.0.0\"}" "$PREF_URL/v2/app/setPreferences"

and I'll add a {{VPN_INTERFACE}} to the template variable available to the command.

Added, but I'm concerned by the 0.0.0.0 as the default address.
It means we restrict to never use IPv6 (I don't know if there are any IPv6 VPNs)

There are (airvpn, mullvad) AFAIK; I copied this from a comment of someone; any idea if we can make it for all ipv4 and ipv6? What's the default? Maybe not touching that one would be a better idea.

New template variable {{VPN_INTERFACE}} is available, so we can use it for the current network interface json field.

qdm12 · 2025-11-22T23:37:18Z

extras/scripts/qbittorrent-port-update.sh

+# How to use:
+# 1. (Optional) Disable authentication for localhost clients in qBittorrent WebUI settings ("Bypass authentication for clients on localhost" or `bypass_local_auth` in json).
+# 2. Set the environment variable:
+# VPN_PORT_FORWARDING_UP_COMMAND=/bin/sh -c "/scripts/qbittorrent-port-update.sh --port {{PORT}} --webui-port 9081"


Suggested change

# VPN_PORT_FORWARDING_UP_COMMAND=/bin/sh -c "/scripts/qbittorrent-port-update.sh --port {{PORT}} --webui-port 9081"

# VPN_PORT_FORWARDING_UP_COMMAND=/bin/sh -c "/scripts/qbittorrent-port-update.sh --port {{PORT}} --iface {{VPN_INTERFACE}} --webui-port 9081"

feat(scripts): add script to update qBittorrent peer port

5f9be3c

feat: add option to specify user/pass and authorize on qBittorrent

1932f9e

qdm12 reviewed Nov 13, 2025

View reviewed changes

extras/scripts/qbittorrent-port-update.sh Show resolved Hide resolved

extras/scripts/qbittorrent-port-update.sh Outdated Show resolved Hide resolved

extras/scripts/qbittorrent-port-update.sh Outdated Show resolved Hide resolved

extras/scripts/qbittorrent-port-update.sh Show resolved Hide resolved

This comment was marked as off-topic.

Sign in to view

qdm12 mentioned this pull request Nov 13, 2025

Update qBittorrent example to add a DOWN_COMMAND qdm12/gluetun-wiki#147

Merged

This comment was marked as off-topic.

Sign in to view

qdm12 changed the title ~~Add script to update qBittorrent peer port~~ feat(extras/scripts): update qBittorrent peer port with optional authentication Nov 13, 2025

qdm12 mentioned this pull request Nov 13, 2025

feat(vpn-port-forwarding): qbittorrent-port-updater tool qdm12/gluetun-wiki#65

Closed

qdm12 requested changes Nov 13, 2025

View reviewed changes

qdm12 added Status: 🗯️ Waiting for feedback Status: 🔒 After next release Will be done after the next release labels Nov 13, 2025

qdm12 reviewed Nov 13, 2025

View reviewed changes

extras/scripts/qbittorrent-port-update.sh Outdated Show resolved Hide resolved

feat(scripts): address minor issues in the script

839e318

This comment was marked as off-topic.

Sign in to view

qdm12 mentioned this pull request Nov 22, 2025

Bug: VPN Stability Issue with ProtonVPN #2997

Open

qdm12 reviewed Nov 22, 2025

View reviewed changes

feat(scripts): add options for interface and address

47ab446

qdm12 reviewed Nov 22, 2025

View reviewed changes

	wget ${WGET_OPTS} -qO- --post-data="json={\"random_port\":false,\"upnp\":false,\"listen_port\":0}" "$PREF_URL/v2/app/setPreferences"
	wget ${WGET_OPTS} -qO- --post-data="json={\"random_port\":false,\"upnp\":false,\"listen_port\":0,\"current_network_interface\":\"\",\"current_interface_address\":\"\"}" "$PREF_URL/v2/app/setPreferences"

	# VPN_PORT_FORWARDING_UP_COMMAND=/bin/sh -c "/scripts/qbittorrent-port-update.sh --port {{PORT}} --webui-port 9081"
	# VPN_PORT_FORWARDING_UP_COMMAND=/bin/sh -c "/scripts/qbittorrent-port-update.sh --port {{PORT}} --iface {{VPN_INTERFACE}} --webui-port 9081"

Uh oh!

feat(extras/scripts): update qBittorrent peer port with optional authentication #2700

Are you sure you want to change the base?

feat(extras/scripts): update qBittorrent peer port with optional authentication #2700

Conversation

astappiev commented Feb 13, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

AndaPlays commented Feb 13, 2025

Uh oh!

astappiev commented Feb 14, 2025

Uh oh!

AndaPlays commented Feb 16, 2025

Uh oh!

astappiev commented Feb 16, 2025

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

This comment was marked as off-topic.

This comment was marked as off-topic.

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

This comment was marked as off-topic.

qdm12 commented Nov 14, 2025

Uh oh!

monstermuffin commented Nov 20, 2025

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

astappiev commented Feb 13, 2025 •

edited

Loading