Gluetun is the bomb. I run it in front of all of the *arrs as well as LSIO's webtop for quick access to a VPN (Mullvad). The nice thing is the operational containers don't have network access to the Internet if the Glutun container is down, so it's a nice failsafe mechanism to guarantee the VPN path.