Media Server Stack

Media Server

Self-hosted media server stack built with Docker Compose. Includes automated downloading, library management, and media playback — with torrent traffic isolated behind a VPN.

Services

Service	Role	Local URL
Jellyfin	Media playback	http://localhost:8096
Jellyseerr	Media request portal	http://localhost:5055
Prowlarr	Indexer manager	http://localhost:9696
Radarr	Movie automation	http://localhost:7878
Sonarr	TV automation	http://localhost:8989
Lidarr	Music automation	http://localhost:8686
Readarr	Books automation	http://localhost:8787
qBittorrent	Torrent client (VPN)	http://localhost:8081
SABnzbd	Usenet downloader	http://localhost:8080
FlareSolverr	CloudFlare bypass proxy (used by Prowlarr)	—
Gluetun	VPN gateway (NordVPN, Linux only)	—

Architecture

VPN Isolation

qBittorrent runs inside Gluetun's network namespace (`network_mode: service:gluetun`). All torrent traffic is routed through NordVPN via OpenVPN UDP. SABnzbd and all \*arr services use the normal network — no VPN overhead.

Hardlink-Compatible Storage

All services that handle files mount `./media` as `/data`. Downloads and the organized library share the same filesystem, so the \*arr apps can use hardlinks instead of copying files.

media/
├── movies/        ← Radarr library
├── tv/            ← Sonarr library
├── music/         ← Lidarr library
├── books/         ← Readarr library
└── downloads/
    ├── torrents/  ← qBittorrent (movies/ tv/ music/ books/)
    └── usenet/    ← SABnzbd     (movies/ tv/ music/ books/)

Traefik (Optional)

Traefik