Do you know SABnzbd? It's a file downloading client for newsgroups. If you also use tools like Sonarr or Radarr, you know how convenient they are for automatically organizing your series and movies without hassle. These tools are available as Docker images in the "Container Manager" of your Synology NAS and are very useful for managing your downloads.
However, how do you protect your privacy when these tools download files from your NAS? The answer: Gluetun.
What is Gluetun?
No, it's not glue! Pronounce it in a local accent "GLOU-TAIN". Gluetun is a Docker image that acts as a VPN for your Docker containers. It allows, for example, SABnzbd or BitTorrent to go through a secure VPN network to protect your privacy. Note: the goal here is not to promote illegality, but to preserve your privacy.
Why not set up a general VPN on Synology?
Installing an .ovpn file directly on your NAS might seem like a simple solution. But it can cause problems if:
- You use your NAS as an entry point from the outside (for example, via a domain like
https://nas.my-house.com). - You use tools like TailScale or other network tunnels.
A global VPN can interfere with these services. With Gluetun, you only configure certain Docker images to use a VPN while allowing other containers or services on the NAS to function normally.
Prerequisites
- A VPN subscription (for example, NordVPN).
- Docker installed on your Synology via the "Package Center" (Container Manager).
- SSH access enabled on your NAS (enable it via Control Panel > Terminal & SNMP).
Step 1: Check Docker on your NAS
Log in via SSH to your NAS (with your Synology username and password):
If a Docker version appears, you're ready. Otherwise, install Container Manager via the "Package Center".
Step 2: Install Gluetun
Run the following command in SSH to create the Gluetun container:
Important points:
- Replace
your_nordvpn_usernameandyour_nordvpn_passwordwith your NordVPN credentials. - Adjust the country and city if necessary (e.g.,
FranceandParis).
Once installed, Gluetun will appear in the "Container Manager" of your Synology. Check that it starts correctly (the dot next to its name should be green).
If it fails, check your VPN credentials or consult the logs in "Log" under the Docker image.
Note for NordVPN: The credentials needed are not those of your NordVPN account. Log in to NordVPN, create an Access Token, and use it as your username and password.
Step 3: Install SABnzbd
To install SABnzbd and configure it to use Gluetun as a network, use this command in SSH:
Important note:
- No port forwarding is necessary for SABnzbd. Gluetun manages traffic through the ports configured in its Docker command. In this example, SABnzbd will be accessible at the address
http://192.168.1.100:5092.
Step 4: Configure elevated privileges
For everything to work correctly, give elevated privileges to Gluetun and SABnzbd in the "Container Manager":
- Go to Container Manager > Container > [Container Name].
- Click on Settings > Edit.
- Enable the option "Run the container with elevated privileges".
Step 5: Start the containers
Once configured, start the containers in this order via SSH:
Step 6: Check the VPN
To verify that SABnzbd is indeed going through the VPN:
Compare the displayed IP address with that of your VPN. You can check information related to this IP online, for example on ip.guide. Type the given IP address as follows: https://ip.guide/XXX.XXX.XXX.XXX
With these steps, SABnzbd will be secured via Gluetun and your VPN, thus protecting your privacy. Happy installation! 😊
Aucun commentaire pour le moment.