So here's my current setup (each one is a separate docker container):

Download machine: (has lots of RAM and HDD space)

• Nginx (for reverse proxy)
• Sonarr (tv)
• Radar (movies)
• Prowlarr (organizing download sources)
• Qbittorrent (make sure to bind to Wireguard interface)
• Wireguard (for qbittorrent VPN)
• Nzbget (Usenet)
• Szabnzb (also Usenet; some providers work better with Szabnzb for whatever reason)
• Portainer agent (for remote docker management)
• Watchtower (for automatic updates)

Tv machine: (can transcode)

• Nginx
• Jellyfin (to transcode and actually watch the content)
• Portainer agent (for remote docker management)
• Watchtower (automatic updates)

I'm not aware of a single container that has all of this bundled together though.