I think most people will tell you that there's no need to use a VPN with Usenet. I personally do not. However, if one was to put any of the containers behind the VPN, I think that SABnzbd would be the one to do it with.

I'm not a Usenet expert so feel free to correct me.

With Usenet there's no real reason to have any of your services behind a VPN unless you're using torrents as a backup method to grab files. Even then, you should only be putting your torrent client behind a VPN.

Here's my basic setup. I have a container that I call dl1. This has qbitorrent, sabnzbd, and a VPN client. This container only accepts connections from my local subnet or connections from the VPN interface. Everything else, *arrs, etc are separate containers that communicate with the dl1 container. Total seperarion and totally secure. I administer everything from tailscale if I'm not on the local net

No need for VPN, but keep the SSL on SABnzbd. At some point I should probably switch over from nzbget, but it's been solid for years.

Unless you're also running a torrent client, you don't really need a VPN at all. The *arrs aren't doing anything that needs to be hidden, and Usenet is fine with just SSL.

Nah man you don't need vpn software for Usenet. It doesn't hurt but you aren't getting any added benefit.

I'm doing something similar. Sabnzb, radar sonarr lidarr bazarr prowlarr No vpn

Ssl is fine.

I run without vpn for mine personally.