I use a Wireguard tunnel to a VPS and fail2ban with geoblocking: https://codeberg.org/skjalli/jellyfin-vps-setup

I actually enjoyed Hogfather but haven’t read the book.

This is my setup

sabnzbd:
    ...
    restart: unless-stopped
    network_mode: "service:gluetun"

  gluetun:
    image: qmcgaw/gluetun
    container_name: gluetun
    cap_add:
      - NET_ADMIN
    environment:
      - VPN_SERVICE_PROVIDER=custom
      - VPN_TYPE=wireguard
    devices:
      - /dev/net/tun:/dev/net/tun
    ports:
      - 9090:8080 # SABnzbd webui port forwarding
    volumes:
      - ./Wireguard/wg0.conf:/gluetun/wireguard/wg0.conf:ro
    restart: unless-stopped

Note how i explicitly tell sabnzbd container to use gluetun as a network.

Afaik, with your setup you simply run both containers in the same network so that both can reach each other.

What do your docker logs mention? Especially regarding sab ans deluge?

Usually you should be able to download a wg0.conf file from your vpn provider. It basically contains all the data that you provided via env var in a specific format.

Note: the server address has to be an IP address since gluetun won’t resolve addresses (see here).

You could maybe try using the wg0.conf and mount this insteas. Here is how I set it up (works with proton and windscribe)

gluetun:
    image: qmcgaw/gluetun
    container_name: gluetun
    cap_add:
      - NET_ADMIN
    environment:
      - VPN_SERVICE_PROVIDER=custom
      - VPN_TYPE=wireguard
    devices:
      - /dev/net/tun:/dev/net/tun
    ports:
      - 9090:8080 # SABnzbd webui port forwarding
    volumes:
      - ./Wireguard/wg0.conf:/gluetun/wireguard/wg0.conf:ro
    restart: unless-stopped

I’m not your buddy, friend.