Hello there,
I put together a small Usenet setup with thick containers and would like to have your opinion about what should and shouldn’t be behind a VPN to connect to the outside.
Container:
SABnzbd; no VPN, but SSL
Jellyseerr; no VPN
Jellyfin;
Radarr; has VPN
Sonarr; has VPN
Readarr; has VPN
Unless you’re also running a torrent client, you don’t really need a VPN at all. The *arrs aren’t doing anything that needs to be hidden, and Usenet is fine with just SSL.
I think most people will tell you that there’s no need to use a VPN with Usenet. I personally do not. However, if one was to put any of the containers behind the VPN, I think that SABnzbd would be the one to do it with.
I’m not a Usenet expert so feel free to correct me.
With Usenet there’s no real reason to have any of your services behind a VPN unless you’re using torrents as a backup method to grab files. Even then, you should only be putting your torrent client behind a VPN.
Here’s my basic setup. I have a container that I call dl1. This has qbitorrent, sabnzbd, and a VPN client. This container only accepts connections from my local subnet or connections from the VPN interface. Everything else, *arrs, etc are separate containers that communicate with the dl1 container. Total seperarion and totally secure. I administer everything from tailscale if I’m not on the local net
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !piracy@lemmy.dbzer0.com
⚓ Dedicated to the discussion of digital piracy, including ethical problems and legal advancements.
Unless you’re also running a torrent client, you don’t really need a VPN at all. The *arrs aren’t doing anything that needs to be hidden, and Usenet is fine with just SSL.
I think most people will tell you that there’s no need to use a VPN with Usenet. I personally do not. However, if one was to put any of the containers behind the VPN, I think that SABnzbd would be the one to do it with.
I’m not a Usenet expert so feel free to correct me.
Correct because the connection to usenet these days is with SSL, so the ISP is in the dark of what is being transferred.
If you’d rather your ISP not know where you are connecting you can get SABnzbd dockers with VPN built in that will killswitch if the VPN drops.
I do the VPN anyway because that’s how I set it up years back, and I just like the layer of privacy.
With Usenet there’s no real reason to have any of your services behind a VPN unless you’re using torrents as a backup method to grab files. Even then, you should only be putting your torrent client behind a VPN.
Here’s my basic setup. I have a container that I call dl1. This has qbitorrent, sabnzbd, and a VPN client. This container only accepts connections from my local subnet or connections from the VPN interface. Everything else, *arrs, etc are separate containers that communicate with the dl1 container. Total seperarion and totally secure. I administer everything from tailscale if I’m not on the local net
Nah man you don’t need vpn software for Usenet. It doesn’t hurt but you aren’t getting any added benefit.
I’m doing something similar. Sabnzb, radar sonarr lidarr bazarr prowlarr No vpn
It hurts a bit on speed loss though right? Depending on your location and vpn provider
I would assume so. I don’t use a VPN.
No need for VPN, but keep the SSL on SABnzbd. At some point I should probably switch over from nzbget, but it’s been solid for years.
Tbh I switched from sabnzdb to nzbget. Imo is nicer
Ssl is fine.
I run without vpn for mine personally.