TorSentinel Armor — Gluetun + Deluge (Docker) Setup & Test

1) Docker Compose (Gluetun + Deluge)

Deluge shares the Gluetun network namespace. Publish Web UI and ports on the gluetun service.

services:
  gluetun:
    image: qmcgaw/gluetun
    container_name: gluetun
    cap_add: [NET_ADMIN]
    environment:
      - TZ=UTC
      # Choose ONE stack (WireGuard shown):
      - VPN_SERVICE_PROVIDER=custom
      - VPN_TYPE=wireguard
      - WIREGUARD_PRIVATE_KEY=<your_private_key>
      - WIREGUARD_ADDRESSES=<10.x.x.x/32>
      - SERVER_HOSTNAMES=<provider_servername>
      # Or OpenVPN: OPENVPN_USER / OPENVPN_PASSWORD / OPENVPN_CONFIG
    volumes:
      - ./gluetun:/gluetun
    ports:
      - "8112:8112"          # Deluge Web UI (via gluetun)
      - "58846:58846"        # Deluge daemon (optional)
      - "58946:58946"        # BitTorrent TCP
      - "58946:58946/udp"    # BitTorrent UDP
    restart: unless-stopped

  deluge:
    image: lscr.io/linuxserver/deluge:latest
    container_name: deluge
    network_mode: "service:gluetun"
    depends_on: [gluetun]
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=UTC
      - DELUGE_LOGLEVEL=info
    volumes:
      - ./deluge/config:/config
      - ./deluge/downloads:/downloads
    restart: unless-stopped

Access Deluge Web at http://HOST:8112 (default password deluge — change it).

Gluetun + Deluge wiring — Only Gluetun exposes ports; Deluge rides that namespace.

2) Find your SOCKS5

Armor SOCKS5 page with domain/ports — Services → SOCKS5 Proxies

Protocol: SOCKS5
Host:     proxy.torsentinel.com
Port:     1080 (or 1085 / 1090 / 1095)
Auth:     TorSentinel username & password

Also available: IP endpoints where shown on your SOCKS5 page.

3) Configure Deluge SOCKS5

Open Deluge Web → Preferences → Proxy.
Type: SOCKS5 • Host: proxy.torsentinel.com • Port: 1080 (or 1085/1090/1095) • Auth: your credentials.
Apply To: Trackers (required), Peers (optional), Peer discovery (optional).
Enable Proxy hostnames. Save & restart Deluge if prompted.

If proxying Peers reduces speeds, set SOCKS5 for Trackers only. Announces will still originate from TorSentinel SOCKS5.

Deluge proxy settings with SOCKS5 — Trackers required; peers optional.

4) Add proxy to Safelist

Safelist add domain for proxy — Safelist → Add Domain

Type:  Domain
Value: proxy.torsentinel.com
Label: Armor proxy

If you sometimes run VPN-only (no SOCKS5), also Safelist your VPN egress IP or /24.

5) Start the Test Torrent

Open Services → Torrents → Test Torrent and copy the magnet (or download the .torrent).
Add it in Deluge; wait ~1–3 minutes for an announce.
Confirm the dashboard shows Monitoring and a recent Last Seen.

No content is downloaded. The test torrent is metadata-only for announce validation.

6) Alerts

Notifications channels: email & Telegram

Email: add your address → Save → confirm verification email.
Telegram: click Connect Telegram → press Start in the bot.

FAQ & Troubleshooting

Can I run SOCKS5 and VPN at the same time?

Yes. Deluge sends tracker announces via TorSentinel SOCKS5 inside the VPN tunnel. Safelist the proxy domain (and optionally your VPN egress if you switch between modes).

Peers via SOCKS5 hurt speeds

Proxy Trackers only. Announces still originate from TorSentinel SOCKS5 and appear Covered.

How to handle rotating egress IPs?

Safelist a /24 range covering your provider’s pool, or keep a single IP and update it when it changes.