feat(extras/scripts): update qBittorrent peer port with optional authentication by astappiev · Pull Request #2700 · qdm12/gluetun

astappiev · 2025-02-13T10:23:00Z

Inspired by #2611 and talks in #1555 created a script to update peer-port of qBittorrent.

Upd: added option to authenticate.

AndaPlays · 2025-02-13T15:57:45Z

I'm currently working on something similar, but I guess this would be a better solution. 👍

astappiev · 2025-02-14T23:16:40Z

The only downside of these scripts is that they don't cover a scenario when a client is started after gluetun.

AndaPlays · 2025-02-16T14:56:42Z

@astappiev Looks good to me. The only thing I would appreciate is if we could add an option for Nmap to check whether the port is actually open. I'm on a couple of private trackers, and if my TCP port is filtered, I could get heat—or in the worst case—have my account banned.

I tried integrating it into my script and controlling the VPN via the control server, but Gluetun doesn't have an API for WireGuard yet.

astappiev · 2025-02-16T15:47:08Z

I think it should be implemented as another script (as it is not client dependent), or even in the gluetun core.

extras/scripts/qbittorrent-port-update.sh

qdm12 · 2025-11-14T05:35:35Z

@AndaPlays for this nmap command to succeed, I suppose you do need a program listening on the forwarded port right? What I'm thinking is to, when setting up port forwarding:

start an ephemeral tcp server on the forwarded port / if the port is used already then don't that's fine too (udp is more complicated and not widely used by users so we'll skip that)
check public-ip:port with a tcp dial (same as the nmap command)
Report to debug logs it is open and finish the port forwarding setup process (I'm a maniac of logging problems only and avoid logging if things work correctly)

I'm going to mark our comments as off topic, would you please open an issue for this? Thanks!!

monstermuffin · 2025-11-20T13:06:12Z

Hey guys, I know it's not a native solution but this use case is exactly why I made qSticky. Been working very well and it doesn't matter what order things come up as it's a middleman between the two applications.

extras/scripts/qbittorrent-port-update.sh

Copilot

Pull request overview

This PR adds a shell script for updating qBittorrent's peer port configuration via its WebUI API, inspired by PR #2611 which added a similar script for Transmission. The script is designed to work with Gluetun's VPN port forwarding commands and supports optional authentication.

Changes:

Added a new shell script qbittorrent-port-update.sh with authentication support and flexible configuration options
Modified the Dockerfile to copy the script into the Docker image at /scripts/qbittorrent-port-update.sh

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 12 comments.

File	Description
extras/scripts/qbittorrent-port-update.sh	New script to update qBittorrent peer port, network interface, and address with optional authentication support
Dockerfile	Added COPY instruction to include the script in the Docker image

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

extras/scripts/qbittorrent-port-update.sh

Dockerfile

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

…f scope

… with script changes

Copilot

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 8 comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot · 2026-03-03T18:04:31Z

extras/scripts/qbittorrent-port-update.sh

+# second call to set the actual port, interface and address
+wget ${WGET_OPTS} -qO- --post-data="json={\"listen_port\":$VPN_PORT,\"current_network_interface\":\"$VPN_INTERFACE\",\"current_interface_address\":\"$VPN_ADDRESS\"}" "$WEBUI_URL/v2/app/setPreferences"
+if [ $? -ne 0 ]; then


The JSON payload is constructed via string interpolation without escaping VPN_INTERFACE / VPN_ADDRESS. If either contains a quote/backslash (or other unexpected characters), the request JSON will be invalid and could potentially change the intended preferences. Consider either JSON-escaping these values before building the payload, or strictly validating them against an allowlist pattern (interface name / IP literal / empty) before sending.

extras/scripts/qbittorrent-port-update.sh

Copilot · 2026-03-03T18:04:32Z

extras/scripts/qbittorrent-port-update.sh

+        --server-response 2>&1 | \
+        grep -i "set-cookie:" | \
+        sed 's/.*set-cookie: //I;s/;.*//')
+
+    if [ -z "${cookie}" ]; then
+        echo "ERROR: Failed to authenticate with qBittorrent. Check username/password or verify WebUI is accessible"
+        exit 1
+    fi
+
+    # set cookie for future requests
+    WGET_OPTS="${WGET_OPTS} --header=Cookie:$cookie"


cookie is derived from potentially multiple Set-Cookie headers; if multiple lines are returned, the variable may contain newlines and later be appended into WGET_OPTS, producing an invalid --header argument. Consider constraining this to the specific cookie qBittorrent requires (e.g., first match for the session cookie) and/or stripping newlines before adding it to request headers.

Is this still a problem now that is uses a cookie jar?

Copilot · 2026-03-03T18:04:32Z

extras/scripts/qbittorrent-port-update.sh

+        if [ $# -lt 2 ] || [ -z "$2" ]; then
+            echo "Error: --iface requires a non-empty argument."
+            usage
+            exit 1
+        fi
+        VPN_INTERFACE="$2"


The --iface option block rejects an explicitly empty value (--iface ""), but the usage text lists "" (any interface) as a valid example. Consider allowing an empty string by only erroring when the argument is missing (i.e., $# -lt 2), not when $2 is empty, and ensure downstream JSON generation handles the empty value correctly.

Copilot · 2026-03-03T18:04:33Z

extras/scripts/qbittorrent-port-update.sh

+        if [ $# -lt 2 ] || [ -z "$2" ]; then
+            echo "Error: --addr requires a non-empty argument."
+            usage
+            exit 1
+        fi
+        VPN_ADDRESS="$2"


The --addr option block rejects an explicitly empty value (--addr ""), but the usage text lists "" (all addresses) as a valid example. Consider allowing an empty string by only erroring when the argument is missing (i.e., $# -lt 2), not when $2 is empty, and ensure the JSON payload remains valid when the address is empty.

Copilot · 2026-03-03T18:04:33Z

extras/scripts/qbittorrent-port-update.sh

+    --webui-port)
+        if [ $# -lt 2 ] || [ -z "$2" ]; then
+            echo "Error: --webui-port requires a non-empty argument."
+            usage
+            exit 1
+        fi
+        WEBUI_PORT="$2"
+        WEBUI_URL=$(build_default_url "$WEBUI_PORT")
+        shift 2
+        ;;
+    --url)
+        if [ $# -lt 2 ] || [ -z "$2" ]; then
+            echo "Error: --url requires a non-empty argument."
+            usage
+            exit 1
+        fi
+        WEBUI_URL="$2"
+        shift 2


The help text says --webui-port is not compatible with --url (and vice-versa), but the parser currently allows both and whichever appears last silently wins. Please add an explicit validation after argument parsing to fail fast when both are provided, or otherwise define and document precedence.

@copilot apply changes based on this feedback

extras/scripts/qbittorrent-port-update.sh

blixten85 · 2026-03-08T13:43:03Z

Look at hotio plex container and see how they have done for plex. Their plex container works with port forwarding.

This setup works for me. Whatever what’s going on under the hood I have no clue about.

  plex:
    container_name: plex
    image: ghcr.io/hotio/plex
    hostname: plex
    restart: unless-stopped
    cap_add:
      - NET_ADMIN
    environment:
      - PUID=${PUID}
      - PGID=${PGID}
      - UMASK=${UMASK}
      - TZ=${TZ}
      - PLEX_CLAIM_TOKEN=${PLEX_CLAIM_TOKEN}
      - PLEX_BETA_INSTALL=false
      - PLEX_PURGE_CODECS=false
      - VPN_ENABLED=true
      - VPN_CONF=wg0
      - VPN_PROVIDER=${HOTIO_VPN}
      - VPN_DNS=${VPN_DNS}
      - VPN_LAN_NETWORK=${VPN_LAN_NETWORK}
      - VPN_AUTO_PORT_FORWARD=true
      - VPN_PORT_REDIRECTS=32400/tcp
    volumes:
      - ${DOCKER_APP}/plex:/config
      - ${TV}:/tv
      - ${MOVIES}:/movies
      - ${RAM}:/transcode
    devices:
      - /dev/dri:/dev/dri
    networks:
      - media

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

feat(scripts): add script to update qBittorrent peer port

5f9be3c

feat: add option to specify user/pass and authorize on qBittorrent

1932f9e

qdm12 reviewed Nov 13, 2025

View reviewed changes

This comment was marked as off-topic.

Sign in to view

qdm12 mentioned this pull request Nov 13, 2025

Update qBittorrent example to add a DOWN_COMMAND qdm12/gluetun-wiki#147

Merged

This comment was marked as off-topic.

Sign in to view

qdm12 changed the title ~~Add script to update qBittorrent peer port~~ feat(extras/scripts): update qBittorrent peer port with optional authentication Nov 13, 2025

qdm12 mentioned this pull request Nov 13, 2025

feat(vpn-port-forwarding): qbittorrent-port-updater tool qdm12/gluetun-wiki#65

Closed

qdm12 requested changes Nov 13, 2025

View reviewed changes

extras/scripts/qbittorrent-port-update.sh Outdated Show resolved Hide resolved

qdm12 added Status: 🗯️ Waiting for feedback Status: 🔒 After next release Will be done after the next release labels Nov 13, 2025

qdm12 reviewed Nov 13, 2025

View reviewed changes

extras/scripts/qbittorrent-port-update.sh Outdated Show resolved Hide resolved

feat(scripts): address minor issues in the script

839e318

This comment was marked as off-topic.

Sign in to view

qdm12 mentioned this pull request Nov 22, 2025

Bug: VPN Stability Issue with ProtonVPN #2997

Open

qdm12 reviewed Nov 22, 2025

View reviewed changes

extras/scripts/qbittorrent-port-update.sh Outdated Show resolved Hide resolved

extras/scripts/qbittorrent-port-update.sh Outdated Show resolved Hide resolved

feat(scripts): add options for interface and address

47ab446

qdm12 reviewed Nov 22, 2025

View reviewed changes

extras/scripts/qbittorrent-port-update.sh Outdated Show resolved Hide resolved

astappiev added 4 commits November 23, 2025 11:39

chore(scripts): update docs to include addr options

8d55d4a

chore: update message

d0470fa

chore(scripts): update qbittorent script help

6d2d5a4

Merge branch 'master' into qbittorrent

297c7ee

Copilot AI review requested due to automatic review settings January 15, 2026 08:43

Copilot started reviewing on behalf of astappiev January 15, 2026 08:43 View session

Copilot AI reviewed Jan 15, 2026

View reviewed changes

qdm12 force-pushed the master branch 3 times, most recently from 27f74e4 to fe3d4a9 Compare January 24, 2026 17:56

qdm12 force-pushed the master branch 2 times, most recently from d0247a1 to 0eeee5c Compare February 25, 2026 04:24

qdm12 and others added 4 commits March 3, 2026 16:56

Apply suggestions from code review

b59e869

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

add both up and down examples

0554e69

remove documentation on gluetun templating variables since it's out o…

d7516a0

…f scope

Move Copy after apk installs to reduce re-build times when rebuilding…

48c69c5

… with script changes

qdm12 requested a review from Copilot March 3, 2026 17:56

Copilot started reviewing on behalf of qdm12 March 3, 2026 17:57 View session

Copilot AI reviewed Mar 3, 2026

View reviewed changes

qdm12 force-pushed the master branch from 53bc8fb to d8a3cc3 Compare March 4, 2026 22:54

qdm12 added Status: 📌 Before next release Has to be done before the next release and removed Status: 🔒 After next release Will be done after the next release Status: 🗯️ Waiting for feedback labels Mar 7, 2026

qdm12 mentioned this pull request Mar 8, 2026

Feature request: port forwarding by environment variables #3206

Closed

qdm12 force-pushed the master branch 2 times, most recently from 2c06921 to 9a5995f Compare March 16, 2026 13:48

qdm12 force-pushed the master branch from f4a8fc4 to 086e374 Compare March 23, 2026 14:36

qdm12 and others added 2 commits March 29, 2026 01:29

Check port is a valid port number

e5cefb5

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Use a cookie jar file to avoid command injections

839efa7

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Uh oh!

Conversation

astappiev commented Feb 13, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

AndaPlays commented Feb 13, 2025

Uh oh!

astappiev commented Feb 14, 2025

Uh oh!

AndaPlays commented Feb 16, 2025

Uh oh!

astappiev commented Feb 16, 2025

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

This comment was marked as off-topic.

This comment was marked as off-topic.

Uh oh!

Uh oh!

This comment was marked as off-topic.

qdm12 commented Nov 14, 2025

Uh oh!

monstermuffin commented Nov 20, 2025

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Copilot AI Mar 3, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Copilot AI Mar 3, 2026

Choose a reason for hiding this comment

Uh oh!

qdm12 Mar 29, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Mar 3, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Mar 3, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Mar 3, 2026

Choose a reason for hiding this comment

Uh oh!

qdm12 Mar 29, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

blixten85 commented Mar 8, 2026 • edited by qdm12 Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

astappiev commented Feb 13, 2025 •

edited

Loading

blixten85 commented Mar 8, 2026 •

edited by qdm12

Loading