DelugeVPN is the torrent client for the Smithflix automation chain. It runs with VPN enforcement, PIA WireGuard credentials, and explicit download paths that the Arr stack depends on for label-based routing.
This page documents the delugevpn service. It does not replace the Prowlarr, Sonarr, or Radarr pages that depend on it.
delugevpnbinhex/arch-delugevpn:latest/opt/stacks/smithflix/docker-compose.ymlsmithflix_defaultunless-stoppedprivileged=true, CAP_NET_ADMIN, /dev/net/tun mappeddeluge.better-than.tv2026-04-07/srv/docker/delugevpn/config/srv/docker/delugevpn/config/wireguard/srv/docker/delugevpn/config/wireguard/wg0.conf/media/incomplete-downloads mounted as /data/incomplete/media/downloads mounted as /data/downloads8112/tcp58846/tcp58946/tcp and 58946/udphttps://deluge.better-than.tv/opt/stacks/smithflix/.env as PIA_VPN_USER and PIA_VPN_PASSLAN_NETWORK and NAME_SERVERS/srv/docker/delugevpn/configsonarr goes to /data/downloads/tv and radarr goes to /data/downloads/moviesUse random ports disabled so Deluge continues using the forwarded VPN portSuccessfully assigned and bound incoming port/home/adam/scripts/setup-delugevpn.sh is the provisioning helper for this servicewg0.conf2026-04-07docker logs delugevpn reports VPN bring-up and port-forwarding state/srv/docker/delugevpn/config is within the documented Duplicati scope/media/incomplete-downloads and /media/downloads are operational data, not assumed full backups/dev/net/tun, lost CAP_NET_ADMIN, or privilege changes will break VPN startup2026-04-07