qBittorrent

services:
  qbittorrent:
    image: "ghcr.io/daemonless/qbittorrent:latest"
    container_name: qbittorrent
    environment:
      - PUID=1000  # User ID for the application process
      - PGID=1000  # Group ID for the application process
      - TZ=UTC  # Timezone for the container
      - WEBUI_PORT=8080  # Web UI port (must match port mapping)
      - TORRENTING_PORT=6881  # BitTorrent listening port for peer connections (must match port mapping)
      - WEBUI_PASSWORD=<WEBUI_PASSWORD>  # Set a persistent admin password. If unset, a temporary password is generated each restart and printed to the logs.
      - WEBUI_AUTH=false  # Set to 'true' to enable Web UI authentication. (Note: Upstream/FreeBSD port enables auth by default, but this image defaults to disabled).
    volumes:
      - "/path/to/containers/qbittorrent:/config"
      - "/path/to/downloads:/downloads"
    ports:
      - "8080:8080"
      - "6881:6881"
      - "6881:6881"
    # always (not unless-stopped) so FreeBSD's podman rc.d auto-starts it at boot
    restart: always

podman run -d --name qbittorrent \
  -p 8080:8080 \
  -p 6881:6881 \
  -p 6881:6881 \
  -e PUID=1000 \
  -e PGID=1000 \
  -e TZ=UTC \
  -e WEBUI_PORT=8080 \
  -e TORRENTING_PORT=6881 \
  -e WEBUI_PASSWORD=<WEBUI_PASSWORD> \
  -e WEBUI_AUTH=false \
  -v /path/to/containers/qbittorrent:/config \
  -v /path/to/downloads:/downloads \
  ghcr.io/daemonless/qbittorrent:latest

- name: Deploy qbittorrent
  containers.podman.podman_container:
    name: qbittorrent
    image: "ghcr.io/daemonless/qbittorrent:latest"
    state: started
    restart_policy: always
    env:
      PUID: "1000"
      PGID: "1000"
      TZ: "UTC"
      WEBUI_PORT: "8080"
      TORRENTING_PORT: "6881"
      WEBUI_PASSWORD: "<WEBUI_PASSWORD>"
      WEBUI_AUTH: "false"
    ports:
      - "8080:8080"
      - "6881:6881"
      - "6881:6881"
    volumes:
      - "/path/to/containers/qbittorrent:/config"
      - "/path/to/downloads:/downloads"

# .env

DIRECTOR_PROJECT=qbittorrent
PUID=1000
PGID=1000
TZ=UTC
WEBUI_PORT=8080
TORRENTING_PORT=6881
WEBUI_PASSWORD=<WEBUI_PASSWORD>
WEBUI_AUTH=false

# appjail-director.yml

options:
  - virtualnet: ':<random> default'
  - nat:
services:
  qbittorrent:
    name: qbittorrent
    options:
      - container: 'boot args:--pull'
      - expose: '8080:8080 proto:tcp'
      - expose: '6881:6881 proto:tcp'
      - expose: '6881:6881 proto:udp'
    oci:
      user: root
      environment:
        - PUID: !ENV '${PUID}'
        - PGID: !ENV '${PGID}'
        - TZ: !ENV '${TZ}'
        - WEBUI_PORT: !ENV '${WEBUI_PORT}'
        - TORRENTING_PORT: !ENV '${TORRENTING_PORT}'
        - WEBUI_PASSWORD: !ENV '${WEBUI_PASSWORD}'
        - WEBUI_AUTH: !ENV '${WEBUI_AUTH}'
    volumes:
      - QBITTORRENT_CONFIG_PATH: /config
      - DOWNLOADS_PATH: /downloads
volumes:
  QBITTORRENT_CONFIG_PATH:
    device: '/path/to/containers/qbittorrent'
  DOWNLOADS_PATH:
    device: '/path/to/downloads'

# Makejail

ARG tag=latest

OPTION overwrite=force
OPTION from=ghcr.io/daemonless/qbittorrent:${tag}

appjail oci run -Pd \
  -o overwrite=force \
  -o container="args:--pull" \
  -o virtualnet=":<random> default" \
  -o nat \
  -o expose="8080:8080 proto:tcp" \
  -o expose="6881:6881 proto:tcp" \
  -o expose="6881:6881 proto:udp" \
  -e PUID=1000 \
  -e PGID=1000 \
  -e TZ=UTC \
  -e WEBUI_PORT=8080 \
  -e TORRENTING_PORT=6881 \
  -e WEBUI_PASSWORD=<WEBUI_PASSWORD> \
  -e WEBUI_AUTH=false \
  -o fstab="/path/to/containers/qbittorrent /config <pseudofs>" \
  -o fstab="/path/to/downloads /downloads <pseudofs>" \
  ghcr.io/daemonless/qbittorrent:latest qbittorrent