feat: migrate qbittorrent to LinuxServer image

- Switch from custom NordVPN image to official LinuxServer image
- Remove NordVPN integration and related templates:
  - Delete secret.yaml and NOTES.txt templates
  - Remove NordVPN environment variables and configuration
  - Remove NET_ADMIN/NET_RAW capabilities
- Update to LinuxServer environment variables:
  - Add PUID/PGID for user management
  - Change QBITTORRENT_PORT to WEBUI_PORT
- Simplify deployment with standard qBittorrent setup
- Update chart version: 0.2.0 → 0.3.0
- Update README with new description
- Add testing values file for LinuxServer deployment

Author: cubancodepath

README.md

@@ -25,7 +25,7 @@ helm repo update
 | **jellyseerr** | Media request and discovery tool for Jellyfin and Plex servers | 0.1.0 | latest |
 | **pihole** | Network-wide DNS ad-blocker with DNSCrypt-proxy integration | Latest | 2025.08.0 |
 | **prowlarr** | Centralized indexer manager for all *arr applications | 0.1.2 | latest |
-| **qbittorrent** | Secure BitTorrent client with integrated NordVPN for safe downloading | 0.2.0 | 5.1.2 |
+| **qbittorrent** | BitTorrent client using LinuxServer image for reliable downloading | 0.3.0 | latest |
 | **radarr** | Movie collection manager with simplified media volume configuration | 0.2.2 | latest |
 | **sonarr** | TV series collection manager with automated episode monitoring | 0.1.2 | latest |
 

charts/qbittorrent/Chart.yaml

@@ -1,20 +1,17 @@
 apiVersion: v2
 name: qbittorrent
-description: A Helm chart for qBittorrent with integrated NordVPN for secure torrenting
+description: A Helm chart for qBittorrent BitTorrent client using LinuxServer image
 type: application
-version: 0.2.0
-appVersion: "5.1.2"
+version: 0.3.0
+appVersion: "latest"
 
 keywords:
   - qbittorrent
   - torrent
   - bittorrent
   - download
   - client
-  - vpn
-  - nordvpn
-  - privacy
-  - security
+  - linuxserver
 
 maintainers:
   - name: Barbaro Javier

charts/qbittorrent/templates/NOTES.txt

@@ -20,66 +20,40 @@ spec:
       {{- end }}
       serviceAccountName: {{ include "qbittorrent.serviceAccountName" . }}
       containers:
-      # Main qBittorrent + NordVPN Container
+      # Main qBittorrent Container
       - name: qbittorrent
-        securityContext:
-          capabilities:
-            add:
-              - NET_ADMIN
-              - NET_RAW
         image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
         imagePullPolicy: {{ .Values.image.pullPolicy }}
         ports:
         - name: webui
-          containerPort: {{ .Values.env.QBITTORRENT_PORT }}
+          containerPort: {{ .Values.env.WEBUI_PORT }}
         - name: torrenting-tcp
           containerPort: 6881
           protocol: TCP
         - name: torrenting-udp
           containerPort: 6881
           protocol: UDP
         env:
-        - name: NORDVPN_TOKEN
-          {{- if .Values.nordvpn.credentialsSecret.name }}
-          valueFrom:
-            secretKeyRef:
-              name: {{ .Values.nordvpn.credentialsSecret.name }}
-              key: {{ .Values.nordvpn.credentialsSecret.tokenKey }}
-          {{- else }}
-          value: {{ .Values.nordvpn.token | quote }}
-          {{- end }}
-        - name: NORDVPN_COUNTRY
-          value: {{ .Values.nordvpn.country | quote }}
-        - name: NORDVPN_GROUP
-          value: {{ .Values.nordvpn.group | quote }}
-        - name: NORDVPN_PROTOCOL
-          value: {{ .Values.nordvpn.protocol | quote }}
-        - name: QBITTORRENT_PORT
-          value: {{ .Values.env.QBITTORRENT_PORT | quote }}
-        - name: QBITTORRENT_USERNAME
-          value: {{ .Values.env.QBITTORRENT_USERNAME | quote }}
-        {{- if .Values.env.QBITTORRENT_PASSWORD }}
-        - name: QBITTORRENT_PASSWORD
-          value: {{ .Values.env.QBITTORRENT_PASSWORD | quote }}
+        {{- range $key, $value := .Values.env }}
+        - name: {{ $key }}
+          value: {{ $value | quote }}
         {{- end }}
-        - name: TZ
-          value: {{ .Values.env.TZ | quote }}
         {{- with .Values.resources }}
         resources:
           {{- toYaml . | nindent 10 }}
         {{- end }}
         livenessProbe:
           httpGet:
             path: /
-            port: {{ .Values.env.QBITTORRENT_PORT }}
+            port: {{ .Values.env.WEBUI_PORT }}
           initialDelaySeconds: 60
           periodSeconds: 30
           timeoutSeconds: 5
           failureThreshold: 3
         readinessProbe:
           httpGet:
             path: /
-            port: {{ .Values.env.QBITTORRENT_PORT }}
+            port: {{ .Values.env.WEBUI_PORT }}
           initialDelaySeconds: 30
           periodSeconds: 10
           timeoutSeconds: 5

charts/qbittorrent/templates/deployment.yaml

@@ -6,31 +6,16 @@ fullnameOverride: ""
 replicaCount: 1
 
 image:
-  repository: ghcr.io/barbar0jav1er/qbittorrent-nordvpn-docker
+  repository: lscr.io/linuxserver/qbittorrent
   tag: latest
   pullPolicy: IfNotPresent
 
 env:
-
+  # LinuxServer qBittorrent environment variables
+  PUID: "1000"
+  PGID: "1000"
   TZ: "UTC"
-  QBITTORRENT_PORT: "8080"
-  QBITTORRENT_USERNAME: "admin"
-  QBITTORRENT_PASSWORD: ""
-
-# NordVPN Configuration
-nordvpn:
-  # NordVPN token (get from: https://my.nordaccount.com/dashboard/nordvpn/)
-  token: ""
-  
-  # Server Selection
-  country: "US"
-  group: "P2P"
-  protocol: "udp"
-  
-  # Alternatively, use an existing secret
-  credentialsSecret:
-    name: ""
-    tokenKey: "nordvpn-token"
+  WEBUI_PORT: "8080"
 
 service:
   webui:

charts/qbittorrent/templates/secret.yaml

@@ -0,0 +1,85 @@
+# qBittorrent Values for Testing
+# BitTorrent client using LinuxServer image
+
+nameOverride: ""
+fullnameOverride: ""
+
+replicaCount: 1
+
+image:
+  repository: lscr.io/linuxserver/qbittorrent
+  tag: latest
+  pullPolicy: IfNotPresent
+
+env:
+  # LinuxServer qBittorrent environment variables
+  PUID: "1000"
+  PGID: "1000"
+  TZ: "America/Havana"
+  WEBUI_PORT: "8080"
+
+service:
+  webui:
+    enabled: true
+    type: ClusterIP
+    port: 8080
+  torrenting:
+    enabled: true
+    type: LoadBalancer
+    port: 6881
+
+ingress:
+  enabled: true
+  className: ""
+  annotations:
+    cert-manager.io/cluster-issuer: "letsencrypt-staging"
+    traefik.ingress.kubernetes.io/router.entrypoints: "web,websecure"
+  host: qbittorrent.dev.cubancodelab.net
+  path: /
+  tls:
+    enabled: false
+    secretName: qbittorrent-tls
+
+persistence:
+  config:
+    enabled: true
+    storageClass: "nfs-ssd-fast"
+    accessMode: ReadWriteOnce
+    size: 5Gi
+
+  downloads:
+    enabled: true
+    storageClass: "nfs-ssd-fast"
+    accessMode: ReadWriteOnce
+    size: 100Gi
+
+podSecurityContext:
+  fsGroup: 1000
+
+securityContext:
+  runAsUser: 1000
+  runAsGroup: 1000
+  runAsNonRoot: true
+
+resources:
+  limits:
+    cpu: 2000m
+    memory: 2Gi
+  requests:
+    cpu: 500m
+    memory: 512Mi
+
+nodeSelector: {}
+tolerations: []
+affinity: {}
+
+podAnnotations: {}
+
+serviceAccount:
+  create: true
+  annotations: {}
+  name: ""
+
+podDisruptionBudget:
+  enabled: false
+  minAvailable: 1