Using network_mode with gluetun and traefik results in 401 Unauthorized

[the-bort-the]

Has anyone been able to get qbittorrent working with Traefik labels to enable a reverse proxy? I'm using qbittorrent with gluetun as well.

Currently using traefik:v3.2.3 with success on multiple compose.yml stacks. This is accomplished by putting the traefik_network network on each service across all the compose.yml files. Now I wanted to apply this to a compose stack that uses gluetun, with qbittorrent and nzbget using network_mode: "service:gluetun". I managed to get the labels added to the gluetun service and defined for each additional service below.

The below labels work for nzbget, but not with qbittorrent. I'm using qbittorrent version Linuxserver.io version: 5.0.2-r0-ls367.

After applying the labels, now when I browse to the url, I immediately get a 401 Unauthorized. I noticed in the traefik logs something related to a username "ClientUsername":"-". There aren't any concerning logs from the qbittorrent side of things. Below is snippet of labels

I can still get to the UI and login via local IP+port and my normal username password is working just fine.

    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.qbittorrent.entrypoints=http"
      - "traefik.http.routers.qbittorrent.rule=Host(`qbittorrent.example.com`)"
      - "traefik.http.middlewares.qbittorrent-https-redirect.redirectscheme.scheme=https"
      - "traefik.http.routers.qbittorrent.middlewares=qbittorrent-https-redirect"
      - "traefik.http.routers.qbittorrent-secure.entrypoints=https"
      - "traefik.http.routers.qbittorrent-secure.rule=Host(`qbittorrent.example.com`)"
      - "traefik.http.routers.qbittorrent-secure.tls=true"
      - "traefik.http.routers.qbittorrent-secure.tls.certresolver=cloudflare"
      - "traefik.http.routers.qbittorrent-secure.service=qbittorrent-svc"
      - "traefik.http.services.qbittorrent-svc.loadbalancer.server.port=9099"
      # below labels work for nzbget
      - "traefik.http.routers.nzbget.entrypoints=http"
      - "traefik.http.routers.nzbget.rule=Host(`nzbget.example.com`)"
      - "traefik.http.middlewares.nzbget-https-redirect.redirectscheme.scheme=https"
      - "traefik.http.routers.nzbget.middlewares=nzbget-https-redirect"
      - "traefik.http.routers.nzbget-secure.entrypoints=https"
      - "traefik.http.routers.nzbget-secure.rule=Host(`nzbget.example.com`)"
      - "traefik.http.routers.nzbget-secure.tls=true"
      - "traefik.http.routers.nzbget-secure.tls.certresolver=cloudflare"
      - "traefik.http.routers.nzbget-secure.service=nzbget-svc"
      - "traefik.http.services.nzbget-svc.loadbalancer.server.port=6789"
      - "traefik.docker.network=traefik_network"

logs:

{"ClientAddr":"198.44.140.148:33508","ClientHost":"198.44.140.148","ClientPort":"33508","ClientUsername":"-","DownstreamContentSize":12,"DownstreamStatus":401,"Duration":3572780,"OriginContentSize":12,"OriginDuration":2360529,"OriginStatus":401,"Overhead":1212251,"RequestAddr":"qbittorrent.example.com:8443","RequestContentSize":0,"RequestCount":1427,"RequestHost":"qbittorrent.example.com","RequestMethod":"GET","RequestPath":"/","RequestPort":"8443","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"qbittorrent-secure@docker","ServiceAddr":"192.168.112.12:9099","ServiceName":"qbittorrent-svc@docker","ServiceURL":"http://192.168.112.12:9099","SpanId":"0000000000000000","StartLocal":"2025-03-07T18:18:36.396664362-06:00","StartUTC":"2025-03-08T00:18:36.396664362Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","TraceId":"00000000000000000000000000000000","entryPointName":"https","level":"info","msg":"","request_User-Agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36","time":"2025-03-07T18:18:36-06:00"}
2025-03-07T18:18:36-06:00 DBG github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:196 > Service selected by WRR: f0a079f4b1ce1b1a

[the-bort-the]

I even went ahead and added a basic auth label + secret, but that didn't work either. I get the prompt for basic auth to complete, but still results in the same 401 Unauthorized. I'm guessing basic auth isn't an option.

- "traefik.http.routers.qbittorrent-secure.middlewares=qbittorrent-basic-auth@file"

logs:

{"ClientAddr":"198.44.140.148:60416","ClientHost":"198.44.140.148","ClientPort":"60416","ClientUsername":"qbit","DownstreamContentSize":12,"DownstreamStatus":401,"Duration":67473999,"OriginContentSize":12,"OriginDuration":738597,"OriginStatus":401,"Overhead":66735402,"RequestAddr":"qbittorrent.example.com:8443","RequestContentSize":0,"RequestCount":34,"RequestHost":"qbittorrent.example.com","RequestMethod":"GET","RequestPath":"/","RequestPort":"8443","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"qbittorrent-secure@docker","ServiceAddr":"192.168.112.12:9099","ServiceName":"qbittorrent-svc@docker","ServiceURL":"http://192.168.112.12:9099","SpanId":"0000000000000000","StartLocal":"2025-03-07T18:36:54.458085629-06:00","StartUTC":"2025-03-08T00:36:54.458085629Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","TraceId":"00000000000000000000000000000000","entryPointName":"https","level":"info","msg":"","request_User-Agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36","time":"2025-03-07T18:36:54-06:00"}