Similar except for a few minor details. I have jackett in the stack too. I have wireguard instead of tailscale. Debian on the host. No zfs, just a bunch of disks. The whole torrent stack is on the vpn so metadata requests don't go out via my ip. I limit the vpn countries to non 14 eyes countries. I change the vpn country every time the vpn container comes up. I use vuetorrent as the qbittorrent webui.
Similar except for a few minor details. I have jackett in the stack too. I have wireguard instead of tailscale. Debian on the host. No zfs, just a bunch of disks. The whole torrent stack is on the vpn so metadata requests don't go out via my ip. I limit the vpn countries to non 14 eyes countries. I change the vpn country every time the vpn container comes up. I use vuetorrent as the qbittorrent webui.